July 30, 2002 at 11:40 am
Whenever I run sp_makewebtask in DTS or query builder I receive the message that I must be a member of the sysadmins role. That seems like a big security risk. BOL states that the login only needs SELECT rights, but that doesn't work even as the dbowner. What am I doing wrong?
July 31, 2002 at 6:18 pm
I dont use it often, usually just as easy to put up a simple *.asp. For those following along, here is what we find in BOL:
The user must have SELECT permissions to run the specified query and CREATE PROCEDURE permissions in the database in which the query will run. The SQL Server account must have permissions to write the generated HTML document to the specified location. Only the members of the sysadmin fixed server role can impersonate other users.
Tried it with a login that no permissions in a test db, verified that you do have to be sysadmin to run it. So, dont think you're doing anything wrong. Does seem like overkill, I'd say the biggest danger would be that someone could overwrite important files on disk potentially?
Andy
Viewing 2 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply