Re: SQL Server 2005 Stored Procedure security annoyances



Hi
Can you grant an EXECUTE permission on stored procedure?



<sune42@xxxxxxxxxxx> wrote in message
news:1158486740.616143.183250@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
hi

I have came to the maturity level to stop using the sa account when I
run
my web-server.

So, I created a new account and added it to the DB_datareader/writer
role.
but I still can't execute my own stored procedures.

Are there no way to set per database the rights to execute non-system
stored proecedure on a database wide level?

I mean it is unrealistic to have to manually set for each SP the rights
because
I am sure I will forget some SP's and probably forget to set the rights
when
I add new SP's in the future. Sure , I can run some wierd query to set
the
rights to all SP's, but that's a pain to lookup as well.

I mean it must be possible to set the SP security settings with minimal
time/effort,
otherwise I can just as well continiue using a account with to broad
rights. db_owner?

We need a default DB_ExecuteSP role that each user can be associated
with!

any ideas?

/andy



.



Relevant Pages

  • Re: pass stored procedure parameters in asp
    ... In Management Studio, open a new query window, logging in with the bettys ... account and try to execute the procedure. ... procedure and properties) of voidTran stored procedure and other ...
    (microsoft.public.inetserver.asp.general)
  • Re: pass stored procedure parameters in asp
    ... Yes, I did log in as bettys and execute voidTran, no problem at all. ... account and try to execute the procedure. ... procedure and properties) of voidTran stored procedure and other ...
    (microsoft.public.inetserver.asp.general)
  • Re: pass stored procedure parameters in asp
    ... bettys account and try to execute the procedure. ... you can use the EXECUTE AS statement to test the ... procedure and properties) of voidTran stored procedure and other ... This email account is my spam trap ...
    (microsoft.public.inetserver.asp.general)
  • Re: SQL Server Agent jobs - The specified @job_name does not exist.
    ... > NETWORK SERVICE as the ASP.NET account. ... > a stored procedure in the database which attempts to use ... > The only way I can get the procedure to execute is by ... > login and cannot be selected as the job owner? ...
    (microsoft.public.sqlserver.security)
  • Re: installing mod_python -- sharing experiences
    ... rights are granted to whatever account the apache ... service is run under to read and execute not only in the ... import mod_python.apache`` in the apache errors log ... service account to administrator (provided you have the ...
    (comp.lang.python)