I thought it was a good idea to revoke these permissions so that I don't have to do this manually every time after creating a new database. However, on SQL7 I have taken a closer look at model and found permissions granted for public. People need to 'pass through' master to have their logins validated and everyone needs permission to tempdb in case the optimizer needs to create a working table.
People will not be able to use sp_help, other system stored procedures and system functions. However, I think if you remove permissions from public in master or temp your server is likely to become unusable. I haven't touched any permissions in master yet, and depending on how this thread goes on, I'll see if I'll do so.
0 kommentar(er)
