Re: Thank you very much...again
From: Donna Lambert [MS] (dlambert@online.microsoft.com)
Date: 08/08/02
- Next message: Chris Wood: "Re: SQL2K and AS2K SP3"
- Previous message: Donna Lambert [MS]: "Re: Roles"
- In reply to: Jason Tai: "Re: Thank you very much...again"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: dlambert@online.microsoft.com (Donna Lambert [MS]) Date: Thu, 08 Aug 2002 13:45:16 GMT
Great feedback Sue!
Thanks for sharing your knowledge!
Donna Lambert
Microsoft SQL Server Support
Disclaimer:
This posting is provided “AS IS” with no warranties, and confers no rights.
Are you secure? For information about the Microsoft Strategic Technology
Protection Program and to order your FREE Security Tool Kit, please visit
http://www.microsoft.com/security.
Recent viruses on the Internet underscore the threat to all computer users
and highlight challenges facing the entire industry in providing security
that everyone needs to conduct business. I encourage you to sign up to
receive automatic notification of Microsoft Security Bulletins by visiting
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
bulletin/notify.asp. For more information on security, our Strategic
Technology Protection Program and to order your FREE Security Tool Kit,
please visit http://www.microsoft.com/security. We will be happy to answer
any questions or provide assistance with your security needs.
--------------------
| Content-Class: urn:content-classes:message
| From: "Jason Tai" <jastai@hotmail.com>
| Sender: "Jason Tai" <jastai@hotmail.com>
| References: <192d001c2319d$936d8550$37ef2ecf@TKMSFTNGXA13>
<hbeojug77qjosbei33akqifvv0l8muja9k@4ax.com>
<1bb7001c231af$438e1ce0$3bef2ecf@TKMSFTNGXA10>
<6jnojukkkpgkqfgi15dppa7ttf369vuasa@4ax.com>
| Subject: Re: Thank you very much...again
| Date: Mon, 22 Jul 2002 13:39:21 -0700
| Lines: 90
| Message-ID: <1894501c231bf$db853550$9ee62ecf@tkmsftngxa05>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Thread-Index: AcIxv9uFDv5CdBoASFGxevw3FGU8+A==
| Newsgroups: microsoft.public.sqlserver.security
| NNTP-Posting-Host: TKMSFTNGXA05 10.201.232.164
| Path: cpmsftngxa07!cpmsftngxa08
| Xref: cpmsftngxa07 microsoft.public.sqlserver.security:7134
| X-Tomcat-NG: microsoft.public.sqlserver.security
|
| You are right. The reason that we need to grant
| permissinos to a database user to two tables in tempdb is
| because of a ASP.NET application. The user who needs to
| access that application needs to have the select,
| delete..etc permissions on tempdb. We are not using the
| guest account for this due to the security concerns.
|
| You have really been a great help to me and I want to
| thank you for all your help.
|
| Jason
| >-----Original Message-----
| >I've lost track of the reasons for this but the guest
| acount
| >exists in tempdb so all users have access to tempdb
| through
| >the guest account.
| >Tempdb is meant for more of a temporary work area so I'm
| not
| >sure what permissions need to be granted but if this
| >involves objects and such, they may be better off in
| another
| >database which would avoid some of this.
| >
| >-Sue
| >
| >On Mon, 22 Jul 2002 11:40:34 -0700, "Jason Tai"
| ><jastai@hotmail.com> wrote:
| >
| >>Hi! Sue:
| >>
| >>I eventually got it to work! However there are some
| >>things I did not do exactly what you specified because
| of
| >>the following reason
| >>
| >>* It is impossible (at least according to the syntax
| >>check) to grant permissions from one database to
| >>another. As a result, the grant select on tempdb will
| >>not work if the store procedure is in master database.
| >>
| >>The way I did it is to create the store procedure in
| the
| >>model database so tempdb will have that store procedure
| >>everytime the server restarts. After that I created a
| >>store procedure in Master Database to call the store
| >>procedure everytime the server restarts. It worked
| that
| >>way.
| >>
| >>If you have an alternative please let me know. Thanks.
| >>
| >>Jason
| >>>-----Original Message-----
| >>>Jason,
| >>>Yes...you can include the grant statements in the
| stored
| >>>procedure, e.g.
| >>>grant select on tempdb..SomeTable to SomeUser
| >>>Also, you don't have to start a new message when you
| >>have a
| >>>follow up question on a reply. You can just reply to
| the
| >>>response you received and then it keeps all the follow-
| up
| >>>messages and postings on the topic together in one
| >>thread.
| >>>
| >>>-Sue
| >>>
| >>>On Mon, 22 Jul 2002 09:33:57 -0700, "Jason Tai"
| >>><jastai@hotmail.com> wrote:
| >>>
| >>>>Hi! Sue:
| >>>>
| >>>>Thanks a lot! It worked. However I need to grant
| >>>>permissions to the users on two tables. Can I
| include
| >>>>that in the store procedures? (i.e. They reference
| to
| >>>>the same database - tempdb). Thanks again for your
| >>help.
| >>>>
| >>>>Jason
| >>>
| >>>.
| >>>
| >
| >.
| >
|
- Next message: Chris Wood: "Re: SQL2K and AS2K SP3"
- Previous message: Donna Lambert [MS]: "Re: Roles"
- In reply to: Jason Tai: "Re: Thank you very much...again"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
