SQL Server 2005 Stored Procedure security annoyances



hi

I have came to the maturity level to stop using the sa account when I
run
my web-server.

So, I created a new account and added it to the DB_datareader/writer
role.
but I still can't execute my own stored procedures.

Are there no way to set per database the rights to execute non-system
stored proecedure on a database wide level?

I mean it is unrealistic to have to manually set for each SP the rights
because
I am sure I will forget some SP's and probably forget to set the rights
when
I add new SP's in the future. Sure , I can run some wierd query to set
the
rights to all SP's, but that's a pain to lookup as well.

I mean it must be possible to set the SP security settings with minimal
time/effort,
otherwise I can just as well continiue using a account with to broad
rights. db_owner?

We need a default DB_ExecuteSP role that each user can be associated
with!

any ideas?

/andy

.



Relevant Pages

  • Re: Unable to write to user profile...
    ... I've given the account rights to manage profile as well. ... On the database level, could you provide more information on the rights i need to grant the account? ... Microsoft Online Community Support ...
    (microsoft.public.sharepoint.portalserver.development)
  • Re: Cannot rebuild non-portal-content index
    ... > I added the content index account to the SQL database giving it rights ... create a log-in entry for the new SharePoint account for the SQL ... This is an entirely different task from giving the rights to ... read and write in a particular database. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Rights Issue
    ... The user has to be dbo in the config database. ... > to have more than just READ rights. ... >> i'm trying to configure a sharepoint admin account. ... >> sps servers and has read rights on the sql server, ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: DENY ALL on system SPs in a database
    ... Currently the user does not have rights to the master database and the account does not have any other rights other than dataread and datawrite. ... The Injection utilized the web account to read the sysobjects and syscolumns tables in one specific database and then utilize the results to update the data within the tables they found containing text datatypes. ...
    (microsoft.public.sqlserver.security)
  • Re: Error code: 18456
    ... This account doesn't have rights to create a database on ... the SQL server. ...
    (microsoft.public.sharepoint.windowsservices)