Gift, I'm sorry. I don't understand that sentence at all. Could you rephrase? Because the...

Gift Peddie (12/3/2009)[hrIf a DBA stops intermediate inserts which are needed in most complex reports the DBA will write the code to create that report because there are reasons why...

So it's not that Execute perms don't work, but that by the rules you can't use them?

Could you post some sample code for the resolution so that people who need this in the future can better understand your solution?

In my experience, the Compliance team (or whatever name the watchdogs have) are not tech people. If a DBA wanted to get away with something, it would be easy to...

laurav (12/3/2009)

---

I would tell my managers and IT security folks what I was doing and why, and they would look at me as though I had two heads. I...

Sorry about that. This is the same link Steve...

Seth,

Hate to break the news to you, but if they haven't already figured that trick out, they're either new to being T-SQL writer or they're not a very good one.

That's...

Actually, we don't allow anybody to write procs in production. We have a Dev environment, Test environment and QC environment to go through before things reach Production. Unfortunately, we're all...

GSquared (12/2/2009)

---

A very common practice is to deny all rights in a database except the right to execute certain procs, then have those procs do all the DML actions. ...

Nope. That did NOT work. I even did a DENY INSERT on schema dbo and had the user's default schema as MySchema and had the proc saved in the schema...

Oh, now I haven't tested other schemas here. And in the database we'll be doing this in, the procs will be a different schema from the tables.

Thanks. I'll check that...

Okay, so you've tested the scripts using the Execute AS feature...

What does the script affect? Just tables in a database or does it access other things outside the database?...

I have when it's a permissions or ownership chain issue. Without seeing the script, I can't be for sure exactly what the issue is.

You say Query Analyzer. Do you...

sabyasm (11/23/2009)

---

[font="Comic Sans MS"]Can type of logging be configured through configuration file? For example - a flag in config file would enable or disable the SSIS log provider for text...