Permission to execute jobs but nothing else

From: Mike M. (mike@kressa.com)
Date: 04/04/03 

From: "Mike M." <mike@kressa.com>
Date: Fri, 4 Apr 2003 06:49:21 -0800

I have built some maintenance vb-scripts that perform
repetitive tasks such as integrity checks and backups.
This script is executed by a scheduled SQL job which
executes a CSCRIPT command pointing to this script on the
hard drive.

Performing these tasks requires you to obviously open a
connection to SQL Server. Since this script is a plain
ascii file there is no security from viewing it.
Embedding the connection string with UID and PWD is safe
to me as long as I can setup a weak Login ID that can do
nothing more then execute jobs.

PROBLEM: I can't figure out how to setup a Login with
this limited authority. The best I found was to give
the "JobRunner" login a server role of "dbcreator". It
works fairly well to prevent users from viewing table
data (our main concern) but they can still obviously
perform serious damage with permission to ALTER and DROP
tables.

I've tried setting up the job owner to be "JobRunner" and
giving the Login no rights other then "Public". However,
it didn't work.

Any suggestions? Thanks in advance.

Relevant Pages

  • Re: automatic change default working directory after graphical login
    ... do not know why is .login NOT executed if the $USER login into the ... World' script above. ... 'shebang' executes.cshrc by default. ...
    (linux.redhat.misc)
  • Re: automatic change default working directory after graphical login
    ... do not know why is .login NOT executed if the $USER login into the ... World' script above. ... 'shebang' executes.cshrc by default. ...
    (linux.redhat.misc)
  • Re: Permission to execute jobs but nothing else
    ... Since this is being run on the server and kicked off by SQLAgent ... to run your script, no need for user name or password. ... > executes a CSCRIPT command pointing to this script on the ... > to me as long as I can setup a weak Login ID that can do ...
    (microsoft.public.sqlserver.security)
  • Re: automatic change default working directory after graphical login
    ... sript will NOT create the test_file in the current working directory. ... do not know why is .login NOT executed if the $USER login into the ... World' script above. ... 'shebang' executes.cshrc by default. ...
    (linux.redhat.misc)
  • Re: John Resig Video
    ... that it should only be used on script resources where it ... That fulfills the "doesn't matter when it executes" statement. ... And in environments were defer is not implemented that same script is going to processed inline and so be executed before the DOM is complete, which could still happen even if defer is implemented as "can continue ...
    (comp.lang.javascript)