All new users getting db_datareader by default......

  • sql 2008 R2 SP3

    windows 2008 R2

    recently I noticed that when in MS creating a new login, going to User Mapping...

    just highlighting databases, not even checking 'Map and I see that this new Login has db_datareader check box

    already 'pre-checked' there automatically, it is greyed out though. (see attachment pic)

    So if I Map that login to those dbs....db_datareader is already there.

    Didn't happen before....

    Any idea what could be the cause?

  • I recently started seeing this as well. However it is not on all databases nor all servers. Any ideas on this would be appreciated.

  • Check the permissions of the public role.

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • i did 🙂

    that was first thing i checked....nothing

    i fixed that problem -

    i found an orphaned database user that did not have a server login associated with it

    as soon as i removed that db user...problem went away

    still have NO IDEA WHY it happened.

    was it a sql bug or if someone can provide rational explanation....would be great

  • PS

    i Used sp_helprotect to verify public role permissions

  • That was it. I had an orphaned user as well. I removed it and the issue went away.

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply