Grant a user the permission to view only specified objects

Hi all,
I want a such user to connect to my SQL Server 2008R2 instance but I wish that:
1) it can't view all database listed, I want that it can see only the database it has the permission
2) it can see only some object in the list for example I want that it can see a such view and or a such table 
is it possible?

The only way to "hide" databases is to deny VIEW ANY DATABASE permissions. But now you don't see *any* databases, unless you in fact own a database - then you will see that database. Not really useful, but that is all we got.
As for objects (tables etc), you can play with  GRANT and DENY VIEW DEFINITION permissions on the object in question.
Tibor Karaszi, SQL Server MVP |
web | blog

Similar Messages

  • How to set the font size on only one object!

    I wonder how i could programmatically set the font size on only one object?
    Igor Stojčević

    Hello,
    You can use the builtin SRW.SET_FONT_SIZE
    http://www.oracle.com/webapps/online-help/reports/10.1.2/topics/htmlhelp_rwbuild_hs/rwrefex/plsql/builtins/srw/srw_set_font_size.htm
    in the Format trigger
    http://www.oracle.com/webapps/online-help/reports/10.1.2/topics/htmlhelp_rwbuild_hs/rwrefex/plsql/triggers/tr_format_trigger.htm
    Regards

  • Grant a user the select permission on a view that references external objects

    Hi all,
    SQL Server 2012 Enterprise Edition SP2.
    I've a database (let's say SRC_DB) that contains a series of views, some of these views refercenses tables or other views in other databases (let's say EXT_DB). I'm searching the best way to grant a user permission to SELECT from that view without granting
    permission to every single obejct in external databases referenced by the view.

    There is a dmv that tells you all the referenced views and tables. you can use that to get the list of all the tables,views being referenced in the cross database and them scrip the to grant only on those views\tables.
    the link  is here:  https://msdn.microsoft.com/en-us/library/bb677315.aspx
    example from the link that woulf work for your suitation:
    CREATE DATABASE db1;
    GO
    USE db1;
    GO
    CREATE PROCEDURE p1 AS SELECT * FROM db2.s1.t1;
    GO
    CREATE PROCEDURE p2 AS
    UPDATE db3..t3
    SET c1 = c1 + 1;
    GO
    SELECT OBJECT_NAME (referencing_id),referenced_database_name,
    referenced_schema_name, referenced_entity_name
    FROM sys.sql_expression_dependencies
    WHERE referenced_database_name IS NOT NULL;
    GO
    USE master;
    GO
    DROP DATABASE db1;
    GO
    Hope it Helps!!

  • How do you restrict web browsing to view only specified sites for business use?

    Hello, I need to restrict the use of Firefox and Internet Explorer to only specified websites that we use for business use.
    I have a problem with a number of employees using unauthorized and dangerous websites that have put my business computers at risk.
    Since it is impossible to police the employees viewing habits in real time, I need to restrict the viewing. How do I set up a list of only allowed sites that can only be overridden by admin privileges despite user accounts?

    You will have to block such unwanted sites in a firewall or router or proxy and only allow access via that proxy.<br />
    All other ways can easily circumvented, by starting Firefox in [[Safe mode]] if it is an extension or by using a portable Firefox version.
    Your above posted system details show outdated plugin(s) with known security and stability risks.
    # Shockwave Flash 10.0 r45
    Update the [[Managing the Flash plugin|Flash]] plugin to the latest version.
    *http://www.adobe.com/software/flash/about/

  • Dreamweaver CC fluid grid site, how do I give user the option to view desktop version on mobile?

    Hi all,  I've just built my first fluid grid site with Dreamweaver CC, just wondering what is the easiest way to give an option to the user to view the desktop version on a mobile device (so they can zoom-in and pinch around and get to see what would be shown on a desktop).  My mobile version of the site is a lot different to the desktop. I've kept all the original code structure, css, media quries and use of boilerplate etc intact from the original dreamweaver cc template.  If someone could please show the best way to do this would be great

    Hi Ben, yes I know but I come across people who insist on using the desktop version of sites because they are more familiar with the layout of the buttons and dont want to relearn etc, I come across this many times on sites I visit myself actually where I don't have time to relearn the navigation of the site because I know the desktop version so well, if in a rush etc.
    Hi Mary Blight its definatley possible, I mean I could create a new css file with desktop version only css and use jquery to change the mobile css to this new css file when a user clicks "view desktop button", its just that I must have over 2000 lines of css and about 200 classes thats properties are spread over the 3 different media queries (with different inhertence), and I really don't want to have to manually go through each if I have to.
    Was hoping I might be able to use some view port meta tags like how apple does on their devices
    <meta name="viewport" content="width=device-width, initial-scale=1"> something like this to fool the device into thinking its a desktop site, or something along those lines etc.

  • Windows Remote Desktop Permission to view only

    We have multiple Windows Server 2008 & 2003 servers in LAN & don't have active directory .If we allow remote session to LAN user / 3rd Party on Server1 then through this Server 1 connecting person get allow the remote session for other server also.
    We want to allows only to take/view remote session but don't want to allow to further remote session from connecting server.
    Alok

    You can create different ID's for the user on different server and provide access for RDP to the specific ID. 
    Like : 
    Server 1 --> user ID user1
    Server 2 --> User ID user2
    In this way user one wont have access on server 2. 
    Arnav Sharma | http://arnavsharma.net/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
    the thread.

  • Users are able to view only their own uploaded documents in Document Library

    Permissions for all are "Contribute" but still few are not able to see all documents - docs uploaded by other users. Is there a setting that is preventing them? 

    Hi,
    One more thing you need to check about library is versioning. Go to doc lib settings-->versioning settings-->check content approval and document version history settings. They should be turn off.
    >but still few are not able to see all documents
    If this is happening for few users then have you tried to use different browser and different machine. Just try to use different browser and machine with same user login and see the result.
    Let us know your result
    Hemendra: "Yesterday is just a memory,Tomorrow we may never see"
    Whenever you see a reply and if you think is helpful, click "Vote As Helpful"! And whenever
    you see a reply being an answer to the question of the thread, click "Mark As Answer
    Please feel free to unmark answer if does not resolves your problem.

  • On certain sites, I don't get the option to "view" only to "save". Also, Firefox says that I have to close Firefox that is already running when this is not true. I then have to restart my computer

    When I've closed Firefox and want to re-open it in the same session, I get a message that I have to close an open Firefox window before being able to use Firefox again. There is nothing to close.
    == This happened ==
    A few times a week
    == many months ago

    See http://kb.mozillazine.org/Firefox_hangs and [[Firefox hangs]] (Hang at exit

  • How to hide welcome user and logout link for only specified pages

    Hi,
    I have few pages in my application like forget password page, in which i don't want to show logout link on top corner and welcome message. For rest other pages its ok. If I edit the template body for doing it then in all pages the welcome user vanishes, where i need to hide it for some specific page only.
    Please give some idea.
    Thanks,
    Chandra Bhanu

    Go to Shared Components/Templates.
    Find the page template that you are using and click Copy.
    Go into the copy and look for &USER. and #NAVIGATION_BAR# and delete.
    Go to each page that does not need the user and navigation and assign the new template.
    This will get rid off the user details and the navigation bar.
    Gus

  • Can you make the iTouch sync with only specified folder(s) on your PC?

    I share a PC with my girlfriend and basically when I sync I only want to sync with my tunes, pictures etc and not her's as well.
    Is there a way to do this?
    Thanks in advance for any help you can offer me.
    Darren

    hold shift when you are loading itunes up, and you will be able to create a separate library.
    when you load up itunes again, it will load up the last library opened, to get back to the other one you need to repeat this process and open the other one.

  • CANNOT GRANT A USER ACCESS TO VIEW A SCHEMA USING PORTAL API'S

    Hi, we are using portal 3.0.9.8.3(UNIX middle tier) on a 8.1.7.3 database (UNIX backend).
    We would like to be able to grant a group of users the rights to view only a specific table or view using the functionality of the wwexp_api_engine package. However the only way to do this seems to be to give the users "view data" privilege to "all schemas" within the portal admin. This presents a large security hole since users can could potentionaly pass in different table names (to a url) and get access to undesired tables.
    Granting executable privileges on the package(and sub packages) to the application database schema(whether public or explicit) still yields the above
    message: Error: Insufficient privileges. (WWV-10600)
    So does anyone know of a way to use the wwexp_api_engine package and restrict it to only a certain table or view of a schema? Or possibly what grants may be needed to allow the package to access the table without giving "view data" portal access to "all schemas".
    Any help would be appreciated.

    Hi,
    Try to grant "Create" global privilege to user and grant explicit privileges on the tables to the user. This way the user can create objects, but can view only those tables on which he has a privilege.
    Thanks,
    Sharmila

  • Difference between read and view only -users having both permissions can download the documents

    Hi All,
     Would like to know whats the difference between view only and read permission.
    As per my requirement, my end users who have been assigned View Only should NOT be able to Download the document from a doc lib.Whereas who have Read permissions should be able to download.
    But when i tested with few users with these  permissions, those users who are having  viewonly permissions was able to  download the documents.
    how this will be true? MS says that this is not possible if it contains server side handlers.
    my customer worried about the  download-the-document part. as per them end users who have  view only permissions should not download the docs.

    Hi,
    Please check this similar thread:
    https://social.technet.microsoft.com/Forums/sharepoint/en-US/4b21a168-443b-45d3-940c-fe52e8538290/how-to-protect-sharepoint-document-not-allow-to-download?forum=sharepointadminprevious
    Your only option is to implement IRM to accomplish your requirement.
    Nico Martens
    SharePoint/Office365/Azure Consultant

  • OAM View-Only Access in 11.5.10.2?

    Is there any way to give a user view-only, or inquiry, access to OAM?
    Or is there any way to give a user any access (view-only or not) to OAM without granting that user the "System Administrator" responsibility?
    We are on 11.5.10.2 (CU2).
    For SOX compliance, we need to remove "System Administrator" from our developers' EBS IDs. But these developers then lose any access to OAM when their "System Administrator" responsibility assignment is removed.
    Auditors might find this surprising, but our developers need access -- even if View-Only -- to OAM in Production in order to monitor complex things like Workflow processes, managers, etc.
    11.5.10.2 does have 2 seeded OAM responsibilities, but they do not seem to grant a user any access to OAM: "OAM Patch History" and "OAM Read Only Mode".
    Any suggestions would be appreciated.

    Did you figure out a way to achieve this?I believe this cannot be achieved -- Please log a SR to confirm this with Oracle support.
    Thanks,
    Hussein

  • Grant one user to see another's scheduled jobs

    What's the best way to grant one user the right to see another's scheduled jobs?
    If I just grant the user select on dba_scheduler_jobs it'll allow it to see all users jobs.
    Right now select count(*) from all_scheduler_jobs returns nothing.
    Thanks.

    Hi,
    There isn't any quick way of doing this. There are 2 ways I can think of.
    - grant alter on every job to user1. This unfortunately allows user2 to not only see but also to modify user1's jobs. It also needs to be done manually for every job.
    - the best way is probably to create a view on top of dba_scheduler_jobs like
    create or replace view user1_jobs as select * from dba_scheduler_jobs where owner='USER1';
    then grant select on that to user 2
    grant select on user1_jobs to user2;
    Hope this helps,
    Ravi.

  • View only responsibiliteis in 11.5.8

    Can someone please help me ? I am new at this. I want to set up the resposibilities in "view only" mode so that user cann't update the data. Does anyone knoe how to do this?
    Please let me know. Any help would be appreciated.
    Nikunj

    From Release 11 there are seeded Inquiry Only responsibilities available for few modules.. For e.g. Payables Inquiry, Receivables Inquiry. These responsibilities can be assigned to the users as View Only access modules.
    To check the seeded responsibilities: System Administrator responsibility
    Navigate: Security&gt;Responsibility&gt;Define
    Find: %Inquiry
    For the modules where such feature is not available, you may have to determine the Form Functions for which you need query only feature.
    Login as System Administrator: Application--&gt;Function--&gt;
    In form function window query the function that you want to run in QUERY ONLY mode, create a new Function (record) using this function name, and enter QUERY_ONLY=YES in the parameters field. Create or modify the menu and menu structure that needs to be attached to this function. Create or modify the responsibility to associate with the above menu/menu structure. Finally assign this responsibility to the user.
    Best Regards,
    Sanjeev

Maybe you are looking for