Re: Is there cascading permission?

Thanks. I'll look at the reference. BTW, your tag line is one of my favorite
all time sayings.

--
Michael Hockstein


"Arnie Rowland" wrote:

See:

Security -Giving Permissions through Stored Procedures
http://www.sommarskog.se/grantperm.html


--
Arnie Rowland, Ph.D.
Westwood Consulting, Inc

Most good judgment comes from experience.
Most experience comes from bad judgment.
- Anonymous


"michael" <howlinghound@xxxxxxxxxxxxx> wrote in message
news:F84CE2FB-8709-4B68-BB3C-9F86722B9A8E@xxxxxxxxxxxxxxxx
So, if a user has permission to execute a stored procedure which in turn
consumes objects that the same user does not have explicit permissions
defined, the stored procedure will execute without security issues?

And, if a user has permission to execute a stored procedure which in turn
consumes objects that the same user is explicitly denied permisions, will
the
stored procedure still execute without security issues?

Where can I find documentation on how this security cascades?


--
Michael Hockstein


"Uri Dimant" wrote:

Yes, it is.

"michael" <howlinghound@xxxxxxxxxxxxx> wrote in message
news:CAB858A0-22F5-410C-842E-A0FE19C84343@xxxxxxxxxxxxxxxx
Let's say that I have a view that has no explicit permissions defined
for
users. Let's also say that I write a stored procedure which uses this
view.

Now, if I give explicit permissions to a user to EXEC the stored
procedure,
will the procedure execute correctly even if I don't explicitily give
permissions (such as SELECT) for the user to the view?


--
Michael Hockstein






.

Relevant Pages

  • Multiple Database Security - How to handle
    ... The problems are security maintenance. ... to the store procedure and permissions to the DM for the ... a stored procedure that accesses DM to get employee info. ... has execute permissions then the procedure is executed as ...
    (microsoft.public.sqlserver.security)
  • Re: Is there cascading permission?
    ... Security -Giving Permissions through Stored Procedures ... if a user has permission to execute a stored procedure which in turn ...
    (microsoft.public.sqlserver.security)
  • Re: Is there cascading permission?
    ... explicit permissions defined for the objects consumed within the stored ... yes, it will, unless you have dynamic sql within a stored procedure, then ... Michael Hockstein ...
    (microsoft.public.sqlserver.security)
  • RE: What server hardening are you doing these days?
    ... permissions on their data, and Microsoft encourages ISVs to minimize ... I've been able to discuss ACLs and other security issues in Windows with ... Control or DAC (which is what you're referring to by the "stupid ...
    (Focus-Microsoft)
  • Re: Windows Firewall Wont Stay On
    ... I have come up with a solution that does not disable Security Center, ... By changing the Permissions of that key, ... settings from being changed again. ... the firewall alert settings in Security Center get ...
    (microsoft.public.windowsxp.help_and_support)