New Login Question

Hello,
I have been programming with Sql Server 2000 for 2-3 years
now. But I am just now starting out with having to also
be the DBA of Sql Server 2000. My question is about
creating new Logins.
I noticed that at the bottom of the New login dialog there
are 2 dropdown boxes. One selects a database to log in to
and the other is the language. The database login
dropdown always has master listed. If I leave that alone
and then go to the Database access tab where I select what
database the new login can access I leave master in that
dialog unchecked but I check some other database. If a
user creates a connection with a tool like MS Access 2002
adp, the user can connect to master but can't access
anything because I did not check master in the Database
access tab of the New Login dialog. So my question is -
what is the significance of the database dropdown on the
first dialog of the Login dialog? If I change the
database dropdown from Master to just the desired
database, then the user cannot connect to master in
addition to not being able to access any objects in
master. But does master contain login information? If
the user is only going to be creating ODBC connections to
the desired Sql DB, does the user need to be able to
connect to master?
Thanks,
RonI see your dilemma. The answer to whether the user needs to be able to
connect to master, I don't know. But the syslogins table does exist there.
So any underlying tables that are affected by it will not show if you don't
choose it from the dropdown. I'm sure there are other system tables in maste
r
like sysobjects, sysdatabases etc that require a reference as well...
SELECT name, [password], dbname, language, sid,
'skip_encryption', loginname
FROM master..syslogins
"Ron" wrote:

> Hello,
> I have been programming with Sql Server 2000 for 2-3 years
> now. But I am just now starting out with having to also
> be the DBA of Sql Server 2000. My question is about
> creating new Logins.
> I noticed that at the bottom of the New login dialog there
> are 2 dropdown boxes. One selects a database to log in to
> and the other is the language. The database login
> dropdown always has master listed. If I leave that alone
> and then go to the Database access tab where I select what
> database the new login can access I leave master in that
> dialog unchecked but I check some other database. If a
> user creates a connection with a tool like MS Access 2002
> adp, the user can connect to master but can't access
> anything because I did not check master in the Database
> access tab of the New Login dialog. So my question is -
> what is the significance of the database dropdown on the
> first dialog of the Login dialog? If I change the
> database dropdown from Master to just the desired
> database, then the user cannot connect to master in
> addition to not being able to access any objects in
> master. But does master contain login information? If
> the user is only going to be creating ODBC connections to
> the desired Sql DB, does the user need to be able to
> connect to master?
> Thanks,
> Ron
>|||The default database option is just that, a default database to connect to
if one is not specified in the connection string/DSN. More often than not
when a user creates a DSN or a connection string they will specify a
database. All logins have access to the master database via the guest user
(a special database user account that cannot be removed from master) and do
not need to be explicitly granted access to that database. When setting up a
new login via Enterprise Manager, you simply need to select which databases
the login can access and also what permissions that user has access to with
the database.When you grant access to a database for a login, they are added
to the public role, however this role generally has no access to user
database objects (and not should it). Generally you would create a new role
in the database and grant the required permissions to that role. THen you
can simply add the user to that role. At the login level, you should be
using groups to access SQL Server so that when a new user needs access to an
existing database you can simply add them to a Windows group and not have to
touch the SQL Server at all.
HTH
Jasper Smith (SQL Server MVP)
http://www.sqldbatips.com
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"Ron" <anonymous@.discussions.microsoft.com> wrote in message
news:100301c53aba$a7a56690$a501280a@.phx.gbl...
> Hello,
> I have been programming with Sql Server 2000 for 2-3 years
> now. But I am just now starting out with having to also
> be the DBA of Sql Server 2000. My question is about
> creating new Logins.
> I noticed that at the bottom of the New login dialog there
> are 2 dropdown boxes. One selects a database to log in to
> and the other is the language. The database login
> dropdown always has master listed. If I leave that alone
> and then go to the Database access tab where I select what
> database the new login can access I leave master in that
> dialog unchecked but I check some other database. If a
> user creates a connection with a tool like MS Access 2002
> adp, the user can connect to master but can't access
> anything because I did not check master in the Database
> access tab of the New Login dialog. So my question is -
> what is the significance of the database dropdown on the
> first dialog of the Login dialog? If I change the
> database dropdown from Master to just the desired
> database, then the user cannot connect to master in
> addition to not being able to access any objects in
> master. But does master contain login information? If
> the user is only going to be creating ODBC connections to
> the desired Sql DB, does the user need to be able to
> connect to master?
> Thanks,
> Ron