数据库权限查询

select SYSTEM_USER
select USER_NAME(0),USER_NAME(1),USER_NAME(2),USER_NAME(3),USER_NAME(100) 

--权限相关基本表
select * from sys.server_principals
select * from sys.database_principals
select * from syslogins
select * from sysusers
select * from syspermissions

select b.name as tName,c.name as objname,
CASE b.type
 WHEN 'U' THEN 'Table'
 WHEN 'P' THEN 'SP'
 ELSE 'OTHER'
 END AS TYPE,
CASE WHEN  a.ACTION = 26 AND a.PROTECTTYPE = 205 THEN '√' ELSE '' END AS 'REFERENCES',
CASE WHEN  a.ACTION = 193 AND a.PROTECTTYPE = 205 THEN '√' ELSE '' END AS 'SELECT',
CASE WHEN  a.ACTION = 195 AND a.PROTECTTYPE = 205 THEN '√' ELSE '' END AS 'INSERT',
CASE WHEN  a.ACTION = 197 AND a.PROTECTTYPE = 205 THEN '√' ELSE '' END AS 'UPDATE',
CASE WHEN  a.ACTION = 196 AND a.PROTECTTYPE = 205 THEN '√' ELSE '' END AS 'DELETE',
CASE WHEN  a.ACTION = 224 AND a.PROTECTTYPE = 205 THEN '√' ELSE '' END AS 'EXECUTE',
CASE a.PROTECTTYPE
 WHEN 204 THEN 'GRANT_W_GRANT '
 WHEN 205 THEN 'GRANT'
 WHEN 206 THEN 'DENY'
 ELSE 'OTHER'  --当有other出现的时候，需要将其他的PROTECTTYPE添加进去。
 END AS PROTECTTYPE
from sysprotects a inner join sysobjects b on a.id = b.id
 inner join sysusers c on a.uid = c.uid
order by tname

select
  'GRANT '+ CASE a.ACTION
     WHEN 26 THEN 'REFERENCES'
     WHEN 193 THEN 'SELECT'
     WHEN 195 THEN 'INSERT'
     WHEN 196 THEN 'DELETE'
     WHEN 197 THEN 'UPDATE'
     WHEN 224 THEN 'EXECUTE'
    ELSE 'OTHER' --当有other出现的时候，需要将其他的ACTION类型添加进去。
END +' ON '+ b.name +' TO '+ c.name
from sysprotects a(nolock) inner join sysobjects b(nolock) on a.id = b.id
  inner join sysusers  c (nolock)on a.uid = c.uid
WHERE A.UID > 0 

select a.uid as uid,a.status as uStatus,a.name as uName,
  b.uid as rId,b.status as rStatus,b.name as rName
from sysusers a left join sysmembers m on m.memberuid = a.uid
    left join sysusers b on b.gid = m.groupuid
where a.issqluser =1
 --a.islogin =1
 --b.issqlrole

SELECT DP.name as[user_name],SP.name as [logion_name] 
FROM sys.database_principals DP ,sys.server_principals SP 
WHERE SP.sid = DP.sid 
  
select DbRole = g.name, MemberName = u.name, MemberSID = u.sid
  from sys.database_principals u, sys.database_principals g, sys.database_role_members m
 where g.principal_id = m.role_principal_id
   and u.principal_id = m.member_principal_id
 order by 1, 2

use master
go
 
select SrvRole = g.name, MemberName = u.name, MemberSID = u.sid
  from sys.server_principals u, sys.server_principals g, sys.server_role_members m
 where g.principal_id = m.role_principal_id
   and u.principal_id = m.member_principal_id
  order by 1, 2
go

WITH CTE AS
(
SELECT u.name AS 用户名,
u.is_disabled AS 是否禁用,
g.name as 服务器角色,
'√' as 'flag'
FROM sys.server_principals u
INNER JOIN sys.server_role_members m ON u.principal_id = m.member_principal_id
INNER JOIN sys.server_principals g ON g.principal_id = m.role_principal_id
)
SELECT * FROM CTE PIVOT(MAX(flag) FOR 服务器角色 IN ([public],
[sysadmin],
[securityadmin],
[serveradmin],
[setupadmin],
[processadmin],
[diskadmin],
[dbcreator],
[bulkadmin])) AS T
go

WITH CTE AS
(
SELECT u.name AS 用户名,
g.name AS 数据库角色,
'√' as 'flag'
FROM sys.database_principals u
INNER JOIN sys.database_role_members m ON u.principal_id = m.member_principal_id
INNER JOIN sys.database_principals g ON g.principal_id = m.role_principal_id
)
SELECT * FROM CTE PIVOT(MAX(flag) FOR 数据库角色 IN ([public],
[db_owner],
[db_accessadmin],
[db_securityadmin],
[db_ddladmin],
[db_backupoperator],
[db_datareader],
[db_datawriter],
[db_denydatareader],
[db_denydatawriter])) AS T
go

select c.name as 用户名,b.name as 对象名,
CASE b.type
WHEN 'U' THEN '表'
WHEN 'V' THEN '视图'
WHEN 'FN' THEN '标量函数'
WHEN 'AF' THEN '聚合函数'
WHEN 'IF' THEN '内联表值函数'
WHEN 'TF' THEN '表值函数'
WHEN 'P' THEN '存储过程'
WHEN 'X' THEN '扩展存储过程'
ELSE  b.type
END AS 对象类型,
CASE WHEN a.ACTION = 26 AND a.PROTECTTYPE = 205 THEN '√' ELSE '' END AS 'REFERENCES',
CASE WHEN a.ACTION = 193 AND a.PROTECTTYPE = 205 THEN '√' ELSE '' END AS 'SELECT',
CASE WHEN a.ACTION = 195 AND a.PROTECTTYPE = 205 THEN '√' ELSE '' END AS 'INSERT',
CASE WHEN a.ACTION = 197 AND a.PROTECTTYPE = 205 THEN '√' ELSE '' END AS 'UPDATE',
CASE WHEN a.ACTION = 196 AND a.PROTECTTYPE = 205 THEN '√' ELSE '' END AS 'DELETE',
CASE WHEN a.ACTION = 224 AND a.PROTECTTYPE = 205 THEN '√' ELSE '' END AS 'EXECUTE',
CASE a.PROTECTTYPE
WHEN 204 THEN 'GRANT_W_GRANT'
WHEN 205 THEN 'GRANT'
WHEN 206 THEN 'DENY'
ELSE 'OTHER'
END AS PROTECTTYPE
from sysprotects a inner join sysobjects b on a.id = b.id
inner join sysusers c on a.uid = c.uid
go

--SQL Server中查询用户的对象权限`和角色的方法
-- 查询用户的object权限
exec sp_helprotect NULL, 'public'
go
exec sp_helprotect @username = 'public'
go

-- 查询用户拥有的role
exec sp_helpuser 'public'

-- 查询哪些用户拥有指定的系统role
exec sp_helpsrvrolemember 'sysadmin'
go

WITH tree_roles as
(
    SELECT role_principal_id, member_principal_id
    FROM sys.database_role_members
    WHERE member_principal_id = USER_ID('UserName')
    UNION ALL
    SELECT c.role_principal_id,c.member_principal_id
    FROM sys.database_role_members as c
    inner join tree_roles
    on tree_roles.member_principal_id = c.role_principal_id
)
SELECT distinct USER_NAME(role_principal_id) RoleName
FROM tree_roles

SELECT
 name as UserName, type_desc as UserType, is_disabled as IsDisabled
FROM sys.server_principals
where type_desc in('WINDOWS_LOGIN', 'SQL_LOGIN')
order by UserType, name, IsDisabled

SELECT
 dp.name as UserName, dp.type_desc as UserType, sp.name as LoginName, sp.type_desc as LoginType
FROM sys.database_principals dp
JOIN sys.server_principals sp ON dp.principal_id = sp.principal_id
order by UserType

select
 p.name as UserName, p.type_desc as UserType, pp.name as ServerRoleName, pp.type_desc as ServerRoleType
from sys.server_role_members roles
join sys.server_principals p on roles.member_principal_id = p.principal_id
join sys.server_principals pp on roles.role_principal_id = pp.principal_id
order by ServerRoleName, UserName

SELECT
 p.name as UserName, p.type_desc as UserType, pp.name as DBRoleName, pp.type_desc as DBRoleType, pp.is_fixed_role as IfFixedRole
FROM sys.database_role_members roles
JOIN sys.database_principals p ON roles.member_principal_id = p.principal_id
JOIN sys.database_principals pp ON roles.role_principal_id = pp.principal_id

SELECT
    grantor.name as GrantorName, dp.state_desc as StateDesc, dp.class_desc as ClassDesc, dp.permission_name as PermissionName,
    OBJECT_NAME(major_id) as ObjectName, GranteeName = grantee.name
FROM sys.database_permissions dp
JOIN sys.database_principals grantee on dp.grantee_principal_id = grantee.principal_id
JOIN sys.database_principals grantor on dp.grantor_principal_id = grantor.principal_id