SDE user account able to create feature datasets and domains

Question

I have a non admin user account in SQL Server (database authentication) that has been configured to be read-only. However we are noticing that this user can create feature datasets and domains. The user account cannot however create feature classes.

Can anyone suggest why this might be happening?

Thanks.

RoySP · Answer

Thanks letting me know! There seems to be no update on that NIM and I'm guessing has not been fixed.

AbhishekSingh · Answer

Hi Roy,

The issue that you have notified about has been reported to ESRI as bug -

NIM089563: The PUBLIC role is automatically granted INSERT/UPDATE/DELETE on geodatabase (GDB) tables.

I am not sure if it has been fixed.

- Abhishek

RoySP · Answer

Thanks Martin.

I think that's exactly what I am seeing as well. The user has only CONNECT privileges but is able to create feat datasets and even domains.

More than feat datasets I am not ok with such users being able to create domains. This causes issues when we want to maintain a standard schema throughout the org.

Thanks for your reply!