extended stored procedure catch 22

From: Neil W. (neilw_at_netlib.com)
Date: 02/15/05

  • Next message: Dan Guzman: "Re: extended stored procedure catch 22" 
    Date: Tue, 15 Feb 2005 17:58:33 -0500

    How does a stored procedure call an extended stored procedure, when the
    stored procedure is not in master? (I dont want to give direct permission
    to the underlying extended stored procedure).

    It seems you have to turn on database chaining, yet there are articles all
    over the place saying database chaining is a security risk. "That's quite a
    catch, our Catch-22".

    Any suggestions for the best approach?

    Thanks.

  • Next message: Dan Guzman: "Re: extended stored procedure catch 22"

    Relevant Pages

    • Re: xplog70.dll
      ... What extended stored procedure are you calling from ... >I have a job that executes a DTS-package which in turn call a store procedure ...
      (microsoft.public.sqlserver.security)
    • Re: Logging within User_Defined Functions (UDF)
      ... Despite its name, xp_execresultset is an ordinary stored procedure, not an extended stored procedure. ... Ultimately you can only execute ... > DECLARE @cmdstr nvarchar ...
      (microsoft.public.sqlserver.programming)
    • Re: Sql Server Trigger that calls Win32.SetEvent
      ... actions outside of SQL Server (or external information) can be ... triggered and returned to SQL Server with an extended stored procedure. ...
      (microsoft.public.sqlserver.server)
    • Re: Rename xp_cmdshell
      ... The person who advised this is completely wrong, you can not rename an ... extended stored procedure, because the name of an extended stored procedure ... is the physical entrypoint of the function inside the DLL. ...
      (microsoft.public.sqlserver.security)
    • Re: Extended SP
      ... a normal stored procedure is created using T-SQL. ... An extended stored procedure is created using C/C++ and then registered with ... "Ramesh" wrote in message ...
      (microsoft.public.sqlserver.programming)