MSSQL user can see all databases on Plesk for Windows server

Symptoms

MS SQL database user is able to see MS SQL database names which are not owned by him.

Cause

Default behavior. This issue should be addressed to Microsoft as the provider of SQL Server.

Resolution

To revoke the permissions, do the following:

1. Connect to the server via RDP.

2. Open SQL Server Management Studio either locally, or via remote connection. Or use any web admin like MyLittleAdmin to access the database(Plesk > Tools & Settings > Database Servers - Web admin).

3. Select "master" database from the list of databases. Once the database is selected, click the button "New Query".

4. Run the following SQL query:

   CONFIG_TEXT: USE master;
   REVOKE VIEW ANY DATABASE TO PUBLIC;
   GO

Note: "MASTER" and "TEMPDB" databases will always be visible to all users. It is not possible to make them invisible.