Re: Is there cascading permission?



So, as long as a user has permissions to execute a stored procedure, the
stored procedure will execute correctly even if the user does not have
explicit permissions defined for the objects consumed within the stored
procedure?

yes, it will , unless you have dynamic sql within a stored procedure , then
you'll have to grant permision on undelaying tables

If the user has permissions to execute a stored procedure but that the
user
is explicitly denied permissions to objects consumed by the stored
procedure
will the stored procedure still execute correctly?

Yes , it will







"michael" <howlinghound@xxxxxxxxxxxxx> wrote in message
news:2DF71CC1-0FAF-4D82-A396-782AC53757C9@xxxxxxxxxxxxxxxx
So, as long as a user has permissions to execute a stored procedure, the
stored procedure will execute correctly even if the user does not have
explicit permissions defined for the objects consumed within the stored
procedure?

If the user has permissions to execute a stored procedure but that the
user
is explicitly denied permissions to objects consumed by the stored
procedure
will the stored procedure still execute correctly?
--
Michael Hockstein


"Uri Dimant" wrote:

Yes, it is.

"michael" <howlinghound@xxxxxxxxxxxxx> wrote in message
news:CAB858A0-22F5-410C-842E-A0FE19C84343@xxxxxxxxxxxxxxxx
Let's say that I have a view that has no explicit permissions defined
for
users. Let's also say that I write a stored procedure which uses this
view.

Now, if I give explicit permissions to a user to EXEC the stored
procedure,
will the procedure execute correctly even if I don't explicitily give
permissions (such as SELECT) for the user to the view?


--
Michael Hockstein





.



Relevant Pages

  • Re: Deny access to all users (including Administrator and DomainAd
    ... permissions on stored procedure override ... applictaion's user account permissions to the stored procedure which will ... Will try to deny access through the query for SQL Server 2005 and 2000. ... Remove everyone that you don't want rom an Administrator Groups ...
    (microsoft.public.sqlserver.security)
  • Re: Is there cascading permission?
    ... Michael Hockstein ... Security -Giving Permissions through Stored Procedures ... if a user has permission to execute a stored procedure which in turn ...
    (microsoft.public.sqlserver.security)
  • Re: public role question
    ... I didn't understand what Dan was asking me to do. ... Then I am able to create a stored procedure. ... system tables with select permissions. ... You ARE the special DBO user, and not the new user, which is why you have ...
    (microsoft.public.sqlserver.security)
  • Re: public role question
    ... I logged on to the database through QA as dantest. ... "Dan Guzman" wrote: ... Windows group and thereby get sysadmin permissions. ... Then I am able to create a stored procedure. ...
    (microsoft.public.sqlserver.security)
  • Re: public role question
    ... Who is the owner of the database? ... "Dan Guzman" wrote: ... Windows group and thereby get sysadmin permissions. ... Then I am able to create a stored procedure. ...
    (microsoft.public.sqlserver.security)