Re: Sql Server - Basic Permissions Question

It is possible to allow a user to have EXECUTE permissions on the sp's,
but deny everything else? E.g. If id did denyreader and allowed
EXECUTE on the sp's, would the command fail because the sp's have
SELECT and WHERE statements?

Yes , it will work. an User will be able to execute a SELECT statement even
he/she is a memeber of db_denydatareader database role




"Ranginald" <davidwank@xxxxxxxxx> wrote in message
news:1156718450.101845.48600@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I have a SQL Server database and I want a user to be able to execute
stored procedures only. These stored procedures use SELECT and WHERE
statements and return integers.

I have set EXECUTE permissions to the sp's as needed for the user.

It is possible to allow a user to have EXECUTE permissions on the sp's,
but deny everything else? E.g. If id did denyreader and allowed
EXECUTE on the sp's, would the command fail because the sp's have
SELECT and WHERE statements?

Thanks!
-Ranginald



.

Relevant Pages

  • FIle and Folder Security
    ... So far we have changed the WINDOWS directory to "Deny" ... We made a public folder but we keep getting "The file ... directory above set to allow Read & Execute, List, Read ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Setting Program Privileges
    ... First a user needs to have proper ntfs permissions to ... By giving a user deny or no permissions to the ... Keep in mind that event though a user can not execute Internet Explorer, ...
    (microsoft.public.win2000.security)
  • IIS Security - some advice please
    ... The permissions for the each directory are the same and they are as follows: ... Allow: Read Execute ... Web Anonymous Users: ... Deny: Write ...
    (microsoft.public.win2000.security)
  • Re: FIle and Folder Security
    ... The way NT permissions work is that it denies first, ... don't think you want to use the deny permission setting. ... > directory above set to allow Read & Execute, List, Read ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Create table rights
    ... Then it's likely related to a deny that the user has ... inherited through group or role membership. ... picked up when you execute sp_helprotect for a user name. ... >as you can see this user, who is not part of any group has grant for ...
    (microsoft.public.sqlserver.security)