Access that can allow to execute SP (create object), however not allow to create/drop/alter table from query window

  • I need to give an access right to a user that can execute a SP (which creates object tables), however that access shouldn't allow him to create tables from the query window.

    To conclude, As a DBA what kind of access can I give to the user that can allow him to execute SP(which creates object), but at the same time restricts him to create/alter or drop tables from the query window?

    Regards

    Asir

  • Hi,

    I can't for the life of me remember the term for doing this but if you grant the stored proc create, insert, update, etc then don't provide the users with any of those rights except execute on the stored proc that should do it for you.

  • There are two ways you can achieve this (they can be combined into one):

    EXECUTE AS clause:

    http://msdn.microsoft.com/en-us/library/ms178106.aspx

    Module signing:

    http://msdn.microsoft.com/en-us/library/ms178106.aspx

    Have a look at the above links and post further on this thread with any additional questions.

    __________________________________________________________________________________
    SQL Server 2016 Columnstore Index Enhancements - System Views for Disk-Based Tables[/url]
    Persisting SQL Server Index-Usage Statistics with MERGE[/url]
    Turbocharge Your Database Maintenance With Service Broker: Part 2[/url]

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply