topic Re: SQL Server windows authenticated user seeing all objects in ArcCatalog in Data Management Questions

SQL Server windows authenticated user seeing all objects in ArcCatalog

ScottNoldy — Thu, 23 Feb 2017 17:21:41 GMT

Details:
SQL Server 2014, 10.4.1 geodatabase.

I am the admin of the geodatabase (SDE user created, not dbo) using a SQL Server login.

When I connect via ArcCatalog I see all the feature classes, relationship classes and sde tables.

Most of these objects are registered as versioned.

I added a windows group to the database in SQL Server with nothing but the public role and went through, via ArcCatalog, and granted them permissions to all these objects. When a user in that group connects they're seeing all the _evw views from the versioned datasets along with everything I can see above.

What did I do wrong that they can see all these objects in Catalog?

Re: SQL Server windows authenticated user seeing all objects in ArcCatalog

George_Thompson — Thu, 23 Feb 2017 17:30:34 GMT

Did you only give them "Public" under the Server roles?

What are their permissions in the database for the User Mapping?

Geodatabase‌

Re: SQL Server windows authenticated user seeing all objects in ArcCatalog

ManviLather1 — Thu, 23 Feb 2017 17:43:54 GMT

Hello,

In SQL Server management studio,

Right click on the database -> properties -> permissions -> select the user-> click on effective and check the permissions granted to the user.

Also, please have a look at the below links:

http://desktop.arcgis.com/en/arcmap/10.4/manage-data/gdbs-in-sql-server/privileges-sqlserver.htm

http://desktop.arcgis.com/en/arcmap/10.4/manage-data/gdbs-in-oracle/grant-dataset-privileges.htm

Re: SQL Server windows authenticated user seeing all objects in ArcCatalog

ScottNoldy — Thu, 23 Feb 2017 19:07:14 GMT

Yes, I only gave them public when adding to the database.

I actually didn't give it to them, that's the default that you can't unselect.

Re: SQL Server windows authenticated user seeing all objects in ArcCatalog

ScottNoldy — Thu, 23 Feb 2017 19:11:05 GMT

It's a windows group so it's not possible to get effective permissions.

I used the change privileges tool to grant permissions to the windows group via arccatalog.

No permissions were granted via SQL Server.

Re: SQL Server windows authenticated user seeing all objects in ArcCatalog

ManviLather1 — Thu, 23 Feb 2017 19:55:36 GMT

Check if group have "select" permission

Re: SQL Server windows authenticated user seeing all objects in ArcCatalog

ScottNoldy — Thu, 23 Feb 2017 21:34:41 GMT

No,connect is the only thing selected in the database permissions list.