yep if you are granted execute to a proc, even if you, the caller, are denied permission to the underlying tables, the proc will execute.

is this a real problem for...

unless the procedure starts with "sp_", i believe it assumes the context of the msdb database, right?

i had to poke around to find this; it involves editing an xml file:

http://visualstudiohacks.com/options/changing-the-my-projects-folder-location-and-other-settings-in-ssms/

db042188 (1/21/2013)

---

Hi. It looks like granting a user permission to execute a proc overrides that user's insert/update/delete permissions they'd otherwise have on a table that the proc updates.

I was...

as far as I know, the binaries for SQL must be installed on the %systemdrive% (usually the C:\ drive)

that part cannot be changed, but you can easily change / move...

the example you found from simpletalk

http://www.simple-talk.com/code/WinWord/spExportToWord.txt

has nothing to do with mailmerge; it's just an example automating the population of data into a word document;

worse, you didn't modify it...

I dont believe you can.

You cwn open word and use word to select a datasouece which is on a sql server.

But sql has no way to call word and...

mrTexasFreedom I'm glad my code helped a bit, but mister magoo really identified the culprit, i think;

some process imported(and maybe still imports) data that should be nvarchar instead of varchar;...

got your fix right here:

ok just checking the basics here;

I'm assuming you are reviewing the code in SSMS? by default, to save memory, SSMS limits results to the first 256 characters...have you already changed...

glad this post helped you out!

or another version: a scalar function that would remove anything that was not A-Z/numeric:

same basic logic, i think:

select

id,

name,

dbo.StripNonAlphaNumeric(name) As Fixed

from my_user_table

If that's cleaning up...

Ells (1/18/2013)

---

Are my assumptions correct in that a deny would for USerB overrule the access that it had as USerN and as a member of RoleA?

Its mainly the difference between...

REVOKE would remove a GRANT from the permissions matrix (if it existed). In my head, i think "UN-GRANT"

DENY would add a new entry to the permissions matrix, and prevent access,...

i believe there is a bug in the ACE drivers which affects Access but not Excel, even if you've installed the 64 bit versions;

there's a connect item on it with...