Re: How to set Readonly for a user?

From: CurtM (
Date: 03/12/03

From: "CurtM" <>
Date: Tue, 11 Mar 2003 16:13:52 -0800

Changing object ownership of stored procs can definitely
have an impact. The original owner can no longer execute
unless you grant permissions. But if these stored procs
are only run by one application or one user, that may not
be a big deal. Also: if you go this route, check inside
the stored proc to see if they're stored as "create
procedure as user1.nameofstoredproc..." You may have to
manually alter scripts that are like this - you'd have to
test in this case.
>-----Original Message-----
>Thanks for the tip.
>Regarding the sp_changeobjectowner, I don't know how this
would work and
>would it effect anyone else?
>"CurtM" <> wrote in message
>> 1. There is a db_datareader role that will allow that
>> to read everything in the database if that's acceptable.
>> 2. Can you do an sp_changeobjectowner on the stored
>> and change them to the login's ownership? Then of
>> that login can execute those stored procs w/o granting
>> permissions.
>> >-----Original Message-----
>> >Hi All,
>> >
>> >I'm new to this and would like some help understanding
>> how to set a user to
>> >have only read only access.
>> >I added an account and gave the account access to three
>> databases.
>> >Currently the only way they can get in, via a VB.NET
>> program, is to belong
>> >to the db_owner group. I would like to only allow
>> only access but also
>> >need to allow for stored procs to EXEC. Do I have to
>> each individual
>> >attribute per database object?
>> >
>> >Thanks,
>> >John.
>> >
>> >
>> >.
>> >

Relevant Pages

  • Dynamic SQL in Stored Proc
    ... I have a database setup so that NO users have READ, ... Dynamic SQL and they have stopped working. ... error message when executing one of the stored procs. ...
  • Re: Confused about proc vs. dynamic SQL vs LINQ
    ... where people create stored procs which *just* call normal CRUD ... for no reasons other than dogma. ... theoretical "change the database and the procs implementation, ... It depends on the database server, but I believe that using a cached ...
  • Question: How to pass ADS username from C# to trigger
    ... lot more auditing and the database seems like the place to do it. ... not want to modify all our stored procs to add username to it. ... We do have a centralized data access ...
  • Re: But a fool with a tool is still a fool
    ... You did say you were going to keep moving your logic into the database. ... You always need some business logic in the app, therefore also putting it in the database is to be avoided. ... You were advocating moving your business logic into stored procs. ... Jim Cooper jcooper@xxxxxxxxxxxxx ...
  • Re: major security concern - any sql user with minimal permission can see code for all stored procs
    ... remove select access (and execute access on selected stored procs in the ... things - and hence has enterprise manager - then this approach won't work. ... If you just want to lock down a database, then I'd try my approace - lock ... >> connected from a remote location to my SQL server at port 1433, ...