Only Show the related Database to the Account owners while login through SSMS. Now its showing all DBs of other accounts,
This is a security threat, Only Show the related Database to the Account owners while login through SSMS. Now its showing all DBs of other accounts, Screenshot attached.
1
vote
Anurag Sukumaran
shared this idea
Thank you for bringing this up. It is a known issue, but unfortunately caused by an underlying deficiency of MSSQL. At this time it cannot be fixed. The security risk has been assessed here not only when it became first known, but also in the following years several times. After careful consideration by our security team we think the risk is quite low unless the database name itself can reveal sensitive information. Once a solution on MS side becomes available we will take a fresh look at the issue. Reference: PPP-3890.
-- PD