up vote 0 down vote favorite
share [g+] share [fb]

Can users who are members of SQL2008's server DBCreator role, access databases created/restored by another user with the same permissions, without having to grant any additional permissions?

link|improve this question
80% accept rate
feedback

1 Answer

up vote 1 down vote accepted

The user becomes the owner of any database they create (meaning they can do pretty much anything to it including rename it or drop it), but they are unable to access databases created by other db_creator members.

More info here

link|improve this answer
That's funny, because I just created a new, regular user on my server, and gave them the "dbcreator" role. They were able to DELETE databases they didn't own, even though they couldn't otherwise access them. "dbcreator" at the server-role level means they can CREATE and DELETE any database. – Triynko Jan 17 '11 at 22:18
See note at msdn.microsoft.com/en-us/library/ms188659.aspx "Members of the dbcreator fixed server role can create, alter, drop, and restore ANY database." – Triynko Jan 17 '11 at 22:26
That's true, but they can't access the data within them or modify security on them unless they're the owner. – CodeByMoonlight Jan 18 '11 at 8:13
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.