Enterprise Manager list databases

Hi everyone,
Is there a possibility to block SQL user using Enterprise Manager from
listing other databases on SQL server?
Every user can see the list of databases but can change only his database.
Is there a way to set it up just his own and nothing else.
Suggestions, links, ... appreciated
Thanks,
BorkoNot any supported way. The only way I know of would be to hack the stored procedure that EM uses to
retrieve the database list. This is not supported and done at your own risk. I don't recommend it.
Possibly, you find such hack if you search the newsgroup archives.
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
http://www.sqlug.se/
"borko" <borko@.borko.co.co> wrote in message news:ctakq8$c0n$1@.ls219.htnet.hr...
> Hi everyone,
> Is there a possibility to block SQL user using Enterprise Manager from listing other databases on
> SQL server?
> Every user can see the list of databases but can change only his database. Is there a way to set
> it up just his own and nothing else.
> Suggestions, links, ... appreciated
> Thanks,
> Borko
>|||Even if you "hacked" the system sp, the next hotfix or service pack release
would overwrite any work you had done. Moreoer, the
INFORMATION_SCHEMA.SCHEMATA would still be available to query for EVERY
user.
This is the nature of a DBMS, to announce its existence and the catalogues
it make available. It is up to the DBA to secure those systems, not to hide
them.
Out of curiosity, why the need to conceal the names?
Sincerely,
Anthony Thomas
"Tibor Karaszi" <tibor_please.no.email_karaszi@.hotmail.nomail.com> wrote in
message news:eTK$umGBFHA.3472@.TK2MSFTNGP14.phx.gbl...
Not any supported way. The only way I know of would be to hack the stored
procedure that EM uses to
retrieve the database list. This is not supported and done at your own risk.
I don't recommend it.
Possibly, you find such hack if you search the newsgroup archives.
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
http://www.sqlug.se/
"borko" <borko@.borko.co.co> wrote in message
news:ctakq8$c0n$1@.ls219.htnet.hr...
> Hi everyone,
> Is there a possibility to block SQL user using Enterprise Manager from
listing other databases on
> SQL server?
> Every user can see the list of databases but can change only his database.
Is there a way to set
> it up just his own and nothing else.
> Suggestions, links, ... appreciated
> Thanks,
> Borko
>|||In news:O9VSm6GBFHA.2428@.TK2MSFTNGP14.phx.gbl,
Anthony Thomas <ALThomas@.kc.rr.com> said:
> Even if you "hacked" the system sp, the next hotfix or service pack
> release would overwrite any work you had done. Moreoer, the
> INFORMATION_SCHEMA.SCHEMATA would still be available to query for
> EVERY user.
> This is the nature of a DBMS, to announce its existence and the
> catalogues it make available. It is up to the DBA to secure those
> systems, not to hide them.
> Out of curiosity, why the need to conceal the names?
If you're running a shared database server (i.e. one which is used by
different companies), you may wish to hide the other database names or
indeed their quantity!
--
Steve|||FYI, in next version of SQL Server you will only see objects etc on which you have permissions...
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
http://www.sqlug.se/
"Steve" <steve@.somewhere.invalid.com> wrote in message
news:sx7Kd.207465$ju.35135@.news.easynews.com...
> In news:O9VSm6GBFHA.2428@.TK2MSFTNGP14.phx.gbl,
> Anthony Thomas <ALThomas@.kc.rr.com> said:
>> Even if you "hacked" the system sp, the next hotfix or service pack
>> release would overwrite any work you had done. Moreoer, the
>> INFORMATION_SCHEMA.SCHEMATA would still be available to query for
>> EVERY user.
>> This is the nature of a DBMS, to announce its existence and the
>> catalogues it make available. It is up to the DBA to secure those
>> systems, not to hide them.
>> Out of curiosity, why the need to conceal the names?
> If you're running a shared database server (i.e. one which is used by
> different companies), you may wish to hide the other database names or
> indeed their quantity!
> --
> Steve
>|||Hi,
Provider (that I am stuck with) doesn't allow me to use Enterprise Manager
because of privacy/business secret ... they don't want me to be able to see
what users are on the server (database names)
Just out of curiosity, is it possible to get the database list from ASP?
Thanks,
Borko
"Anthony Thomas" <ALThomas@.kc.rr.com> wrote in message
news:O9VSm6GBFHA.2428@.TK2MSFTNGP14.phx.gbl...
> Even if you "hacked" the system sp, the next hotfix or service pack
> release
> would overwrite any work you had done. Moreoer, the
> INFORMATION_SCHEMA.SCHEMATA would still be available to query for EVERY
> user.
> This is the nature of a DBMS, to announce its existence and the catalogues
> it make available. It is up to the DBA to secure those systems, not to
> hide
> them.
> Out of curiosity, why the need to conceal the names?
> Sincerely,
>
> Anthony Thomas
>
> --
> "Tibor Karaszi" <tibor_please.no.email_karaszi@.hotmail.nomail.com> wrote
> in
> message news:eTK$umGBFHA.3472@.TK2MSFTNGP14.phx.gbl...
> Not any supported way. The only way I know of would be to hack the stored
> procedure that EM uses to
> retrieve the database list. This is not supported and done at your own
> risk.
> I don't recommend it.
> Possibly, you find such hack if you search the newsgroup archives.
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
> http://www.sqlug.se/
>
> "borko" <borko@.borko.co.co> wrote in message
> news:ctakq8$c0n$1@.ls219.htnet.hr...
>> Hi everyone,
>> Is there a possibility to block SQL user using Enterprise Manager from
> listing other databases on
>> SQL server?
>> Every user can see the list of databases but can change only his
>> database.
> Is there a way to set
>> it up just his own and nothing else.
>> Suggestions, links, ... appreciated
>> Thanks,
>> Borko
>|||> Just out of curiosity, is it possible to get the database list from ASP?
You can get a list of databases from any programming language from which you can execute SQL
statements:
SELECT CATALOG_NAME FROM INFORMATION_SCHEMA.SCHEMATA
or
SELECT name FROM sysdatabases
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
http://www.sqlug.se/
"borko" <borko@.borko.co.co> wrote in message news:ctd2p1$4j2$1@.ls219.htnet.hr...
> Hi,
> Provider (that I am stuck with) doesn't allow me to use Enterprise Manager because of
> privacy/business secret ... they don't want me to be able to see what users are on the server
> (database names)
> Just out of curiosity, is it possible to get the database list from ASP?
> Thanks,
> Borko
>
> "Anthony Thomas" <ALThomas@.kc.rr.com> wrote in message
> news:O9VSm6GBFHA.2428@.TK2MSFTNGP14.phx.gbl...
>> Even if you "hacked" the system sp, the next hotfix or service pack release
>> would overwrite any work you had done. Moreoer, the
>> INFORMATION_SCHEMA.SCHEMATA would still be available to query for EVERY
>> user.
>> This is the nature of a DBMS, to announce its existence and the catalogues
>> it make available. It is up to the DBA to secure those systems, not to hide
>> them.
>> Out of curiosity, why the need to conceal the names?
>> Sincerely,
>>
>> Anthony Thomas
>>
>> --
>> "Tibor Karaszi" <tibor_please.no.email_karaszi@.hotmail.nomail.com> wrote in
>> message news:eTK$umGBFHA.3472@.TK2MSFTNGP14.phx.gbl...
>> Not any supported way. The only way I know of would be to hack the stored
>> procedure that EM uses to
>> retrieve the database list. This is not supported and done at your own risk.
>> I don't recommend it.
>> Possibly, you find such hack if you search the newsgroup archives.
>> --
>> Tibor Karaszi, SQL Server MVP
>> http://www.karaszi.com/sqlserver/default.asp
>> http://www.solidqualitylearning.com/
>> http://www.sqlug.se/
>>
>> "borko" <borko@.borko.co.co> wrote in message
>> news:ctakq8$c0n$1@.ls219.htnet.hr...
>> Hi everyone,
>> Is there a possibility to block SQL user using Enterprise Manager from
>> listing other databases on
>> SQL server?
>> Every user can see the list of databases but can change only his database.
>> Is there a way to set
>> it up just his own and nothing else.
>> Suggestions, links, ... appreciated
>> Thanks,
>> Borko
>>
>|||And the old standby, sp_helpdb.
This is kind of the point, a server ALWAYS announces its services. You have
to do quite a bit of homework to block that.
This is another good reason to ALWAYS choose a default database for EVERY
login, not just master. If users are used to automatically landing in
"their" databases, there is less need to query for others.
However, nothing is absolute; so, these are minor twiddles and not a real
solution. The real solution is what Tibor pointed out, that the upcoming
version has security in mind and that you will only view what you have
permission to.
Anthony Thomas
"Tibor Karaszi" <tibor_please.no.email_karaszi@.hotmail.nomail.com> wrote in
message news:uLM0lmSBFHA.3820@.TK2MSFTNGP11.phx.gbl...
> Just out of curiosity, is it possible to get the database list from ASP?
You can get a list of databases from any programming language from which you
can execute SQL
statements:
SELECT CATALOG_NAME FROM INFORMATION_SCHEMA.SCHEMATA
or
SELECT name FROM sysdatabases
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
http://www.sqlug.se/
"borko" <borko@.borko.co.co> wrote in message
news:ctd2p1$4j2$1@.ls219.htnet.hr...
> Hi,
> Provider (that I am stuck with) doesn't allow me to use Enterprise Manager
because of
> privacy/business secret ... they don't want me to be able to see what
users are on the server
> (database names)
> Just out of curiosity, is it possible to get the database list from ASP?
> Thanks,
> Borko
>
> "Anthony Thomas" <ALThomas@.kc.rr.com> wrote in message
> news:O9VSm6GBFHA.2428@.TK2MSFTNGP14.phx.gbl...
>> Even if you "hacked" the system sp, the next hotfix or service pack
release
>> would overwrite any work you had done. Moreoer, the
>> INFORMATION_SCHEMA.SCHEMATA would still be available to query for EVERY
>> user.
>> This is the nature of a DBMS, to announce its existence and the
catalogues
>> it make available. It is up to the DBA to secure those systems, not to
hide
>> them.
>> Out of curiosity, why the need to conceal the names?
>> Sincerely,
>>
>> Anthony Thomas
>>
>> --
>> "Tibor Karaszi" <tibor_please.no.email_karaszi@.hotmail.nomail.com> wrote
in
>> message news:eTK$umGBFHA.3472@.TK2MSFTNGP14.phx.gbl...
>> Not any supported way. The only way I know of would be to hack the stored
>> procedure that EM uses to
>> retrieve the database list. This is not supported and done at your own
risk.
>> I don't recommend it.
>> Possibly, you find such hack if you search the newsgroup archives.
>> --
>> Tibor Karaszi, SQL Server MVP
>> http://www.karaszi.com/sqlserver/default.asp
>> http://www.solidqualitylearning.com/
>> http://www.sqlug.se/
>>
>> "borko" <borko@.borko.co.co> wrote in message
>> news:ctakq8$c0n$1@.ls219.htnet.hr...
>> Hi everyone,
>> Is there a possibility to block SQL user using Enterprise Manager from
>> listing other databases on
>> SQL server?
>> Every user can see the list of databases but can change only his
database.
>> Is there a way to set
>> it up just his own and nothing else.
>> Suggestions, links, ... appreciated
>> Thanks,
>> Borko
>>
>