Do all geodatabase schema objects require access through the PUBLIC server role?

220
2
Jump to solution
10-26-2021 05:57 AM
JonathanBailey_LimGeomatics
Occasional Contributor

Looking at a geodatabase in Azure SQL database, the PUBLIC server role has permissions on many geodatabase objects, including INSERT and DELETE on some SDE_* tables, and EXECUTE on data modifying stored procedures.

What this means is that any user added to the database has these privileges by default. Is this necessary for the proper functioning of the geodatabase and, if not, which permissions can be removed from the PUBLIC user role?
 

0 Kudos
1 Solution

Accepted Solutions
Asrujit_SenGupta
MVP Regular Contributor

The below link will partially answer your question:

How To: Repair permissions on ArcSDE repository tables and objects for the public role in ArcSDE for... 

So, in short, these are necessary but can also be revoked from PUBLIC role and granted to other users separately. Probably try it out on a test database and make sure everything is working first.

View solution in original post

2 Replies
Asrujit_SenGupta
MVP Regular Contributor

The below link will partially answer your question:

How To: Repair permissions on ArcSDE repository tables and objects for the public role in ArcSDE for... 

So, in short, these are necessary but can also be revoked from PUBLIC role and granted to other users separately. Probably try it out on a test database and make sure everything is working first.

View solution in original post

JonathanBailey_LimGeomatics
Occasional Contributor

Thank you, Asrujit. This is the best information that I've seen on this.

0 Kudos