How Can User Change Password?

Database
Enthusiast

How Can User Change Password?

Hi All,

For a user to be able to change a password of his own user or another user, he must have "Drop User" access on that particular user.

Yesterday, however, a user (and I have rechecked this) did not have the required "Drop User" access on his own user but somehow still managed to change his password. Prior to that, all password changing requests were directed to me.

I am confused as to how was he able to do this?

I have checked the logs and he had run the following statement:

MODIFY USER "username" AS PASSWORD ="*******"

The statement type was that of a "Modify Database" and statement group was that of "DDL Alter".

Any help on this?

3 REPLIES
Junior Contributor

Re: How Can User Change Password?

Hi Usmans,

every user can change his own password, there's no right needed for that. Only if you want to change the password of another user you'll nedd the DROP USER right.

Dieter

Enthusiast

Re: How Can User Change Password?

Thanks Dieter,

This solves it then. 

Enthusiast

Re: How Can User Change Password?

Hi,

I have a question regarding password change and appreciate if someone can assist:

We have 2 database servers:

In one server, When the password expires for any specific ID, say after 90 days it shows a pop up box and requests that you change your pwd.

But in second database server, When the password expires for any specific ID, say after 90 days it DOESN'T show this pop up box.

Can you please help me understand why in the second database server it doesn't show up the pop up box?

Thanks,
Kaleem Pasha