InstantForum.NET v2.9.0SQLServerCentralhttp://www.sqlservercentral.com/Forums/notifications@sqlservercentral.comTue, 21 May 2013 12:16:09 GMT20http://www.sqlservercentral.com/Forums/Topic888975-146-1.aspx[quote][b]river1 (3/24/2010)[/b][hr]ok, thank you very much.So what is the "EXECUTE AS" for?[/quote]to execute as another database user that is not linked to a server level loginWed, 24 Mar 2010 12:13:00 GMTPerry Whittlehttp://www.sqlservercentral.com/Forums/Topic888975-146-1.aspxok, thank you very much.So what is the "EXECUTE AS" for?Wed, 24 Mar 2010 09:35:46 GMTriver1http://www.sqlservercentral.com/Forums/Topic888975-146-1.aspxIt is one aspect of security. If you only grant users access to the views and stored procedures, they don't require access to the underlying tables. It is a means of layering security.Also, by using views and stored procedures to provide access to the underlying tables, you hide the actual schema of your database. If future changes are required to add functionality, as long as the output from the views and stored procedures remains the same, the users never have to know that the schema changed.Wed, 24 Mar 2010 09:32:24 GMTLynn Pettishttp://www.sqlservercentral.com/Forums/Topic888975-146-1.aspxhum???How is that?If a user as rights to execute the stored procedure but do not have permissions on the tables inside the stored procedure how can the procedure run if it runs in the context of the user?Wed, 24 Mar 2010 09:26:26 GMTriver1http://www.sqlservercentral.com/Forums/Topic888975-146-1.aspxShould only need execute rights on the stored procedure. There may be exceptions to that, but usuallly only if the tables in question on in another database.Wed, 24 Mar 2010 09:23:31 GMTLynn Pettishttp://www.sqlservercentral.com/Forums/Topic888975-146-1.aspxHi, I have this stored procedure:create procedure UpdateAut (@TIPO as varchar(10),@OBS as varchar(20))asbegin declare @erro as integer begin transaction update consulta_contribuintes set tipo =@tipo,obs=@obs,dtaupd=getdate() set @erro =@@error if @erro =0 begin commit transaction insert into procedimentos_executados values (21) end else rollback transaction end I want that a user (SQL User) can execute the stored procedure, so i will give him the right to execute the procedure.Inside the procedure i insert and update values in two tables: consulta_contribuintes procedimentos_executados This users needs rights to in this two tables? or only needs the right to execute the procedure?Thank youWed, 24 Mar 2010 07:54:06 GMTriver1