Set database management permissions
(Workgroup) database permissions are now mainly used to prevent users from modifying content within the database, but there is currently no way to prevent them from updating databases, creating new ones unlimitedly on servers with otherwise protected access etc. It would therefore be useful to have an additional security level which deals with database management permissions.
Johan Van Assel
shared this idea
Thank you for this request.
There are already settings available for database creation permissions which can be implemented using the snumbat.ini file.
Specifically there is a keyword “AllowDatabaseCreation” where a setting of 0 means creation is disallowed and a settings of 1 means creation is allowed. The Workgroup Data Server Administration document which can be requested from Innovyze talks through these steps and provides examples for the snumbat.ini files.
When it comes to the updating of databases, is this to restrict the ability to update from a particular software version database to a later one or rather to prevent update to the contents of the database please?
Thanks,
Pascal
-
Johan Van Assel
commented
Hi Pascal,
Thanks for commenting. By updating I mean to a higher software version (but in the end this is also a content update and hence in my view should not be done by somebody who has no write permissions on that database). I'll have a look through the document and see if this can help for the other issues.