Remove Exec Permissions To Extended Stored Procs

Total article views: 67 | Views in the last 30 days: 5

 Rate this |   Join the discussion |  Briefcase

I created this script to simplify the process of restricting access to high risk extended stored procedures. It will find any user or role which has execute permissions on any of the stored procedures in the "#High_Risk_Stored_Procs" temp table and will generate the relevant revoke statements to remove those permissions.

The current list of stored procedures was taken from "SQL Server Security" by Chip Andrews, David Litchfield and Bill Grindlay. But you can easily insert additional stored procs into the "#High_Risk_Stored_Procs" temp table.

To use just change your query results to Text and copy and past the results into a new query window.

N.B. Remember to test this in your development environment first and keep a copy of the revoke script so that you can easily roll back.

Total article views: 67 | Views in the last 30 days: 5