Re: datareader doing updates
- From: "David Browne" <davidbaxterbrowne no potted meat@xxxxxxxxxxx>
- Date: Mon, 22 May 2006 09:41:52 -0500
"Randy" <Randy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0EA38A7F-70DF-44D3-91C0-6555FB42A4FA@xxxxxxxxxxxxxxxx
We created a Role (Alpha) and made it a member of the datareader Role.
Our
hope was that members of this role would only be able to preform data
reads.
On a test we granted Alpha exec rights to an update Stored Procedure. The
members of Alpha are now able to run the Stored Procedure and do updates
even
thought they are NOT members of datawriter. Further testing showed the
same
for insert and delete stored procedures.
Does this sound right?
Yes. Look up "ownership chains" in BOL. If the user can run the
procedure, then permission checks on all objects owned by the owner of the
stored procedure are supressed.
David
.
- Prev by Date: I need backup Master data base?
- Next by Date: login 101..
- Previous by thread: I need backup Master data base?
- Next by thread: login 101..
- Index(es):
Relevant Pages
|
|
