Mssql user can see databasess it doesn't own
When a user logs in to SSMS (SQL Server Management Studio), the user is able to see all databases on a given server. Even though it has only been assigned a single database in SolidCP.
The user is not able to open the other databases. But it can see them.
Is it possible to set SolidCP up in a way, that it also restricts what a user can see in SSMS?
I guess I want the created users to be owners of the databases, and then revoke the "VIEW ANY DATABASE" setting for the created users.
I am pretty sure this was discussed before and came down to mssql limitations.
I however have not looked into this since mssql 2014.
Do you know the correct steps to limit this view manually in mssql? if so i can check how to implement it into the codes.
This post from StackOverflow describes very well what I usually do in SSMS: https://stackoverflow.com/a/26055371
you may use the SSMS interface as following: -
1) Go to your SQL Server Instance, right click and select Properties.
2) Choose Permission on the left pane.
3) Select the specific user that you mention on the "Logins or roles" section.
4) At the permissions for section, check on Deny column for "View any database"
5) Go to the newly added databases, right click and select Properties.
6) Add the specific user under "Users or roles"
7) At the permissions for section, check on Grant column for "View database state" or any other permission that you would like to grant"