Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Access that can allow to execute SP (create object), however not allow to create/drop/alter table from query window Expand / Collapse
Author
Message
Posted Thursday, February 24, 2011 6:51 AM
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: Thursday, February 27, 2014 1:56 AM
Points: 23, Visits: 192
I need to give an access right to a user that can execute a SP (which creates object tables), however that access shouldn't allow him to create tables from the query window.

To conclude, As a DBA what kind of access can I give to the user that can allow him to execute SP(which creates object), but at the same time restricts him to create/alter or drop tables from the query window?


Regards
Asir
Post #1068903
Posted Thursday, February 24, 2011 9:15 PM
SSC-Enthusiastic

SSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-Enthusiastic

Group: General Forum Members
Last Login: 2 days ago @ 6:47 PM
Points: 145, Visits: 187
Hi,

I can't for the life of me remember the term for doing this but if you grant the stored proc create, insert, update, etc then don't provide the users with any of those rights except execute on the stored proc that should do it for you.
Post #1069383
Posted Friday, February 25, 2011 8:29 PM
SSCommitted

SSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommitted

Group: General Forum Members
Last Login: Thursday, April 17, 2014 2:42 PM
Points: 1,851, Visits: 3,575
There are two ways you can achieve this (they can be combined into one):

EXECUTE AS clause:
http://msdn.microsoft.com/en-us/library/ms178106.aspx

Module signing:
http://msdn.microsoft.com/en-us/library/ms178106.aspx

Have a look at the above links and post further on this thread with any additional questions.


__________________________________________________________________________________

Turbocharge Your Database Maintenance With Service Broker: Part 2
Turbocharge Your Database Maintenance With Service Broker: Part 1
Real-Time Tracking of Tempdb Utilization Through Reporting Services
Monitoring Database Blocking Through SCOM 2007 Custom Rules and Alerts
Preparing for the Unthinkable - a Disaster/Recovery Implementation
Post #1069979
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse