Re: New user with no permissions can see and execute system stored procedures...

Hi Uri
Thanks for answering
I did this in the database:
deny view definition to [MyUser]

But I can still see system views and stored procedures (though not system
tables)

Am I doing anything wrong?



"Uri Dimant" <urid@xxxxxxxxxxx> wrote in message
news:e87y2yaAHHA.2328@xxxxxxxxxxxxxxxxxxxxxxx
Jan
Perhaps this may help you
ms-help://MS.SQLCC.v9/MS.SQLSVR.v9.en/udb9/html/151b7a2e-ab97-42ba-baf0-6929c5334e29.htm





"Jan Nielsen" <jan_a_bilinfo.dk> wrote in message
news:ugldrlaAHHA.5060@xxxxxxxxxxxxxxxxxxxxxxx
Hi all
Using SQL Server 2005, I create a new server login (logged in as sa) and
map it to a database user and set its default schema to dbo.

Now when I open the database the newly created user is able to see (in
SQL Server Management Studio GUI) and execute _system_ stored procedures.
All user created stored procedures can neither be seen nor executed.
I have only tried to execute sys.sp_catalogs, but in my opinion a new
user should only have the right to connect and nothing else.

Does anyone know how to remove the permssion to see and execute system
stored procedures?

(I tried to delete the guest account but got an error saying that it
could not be deleted but it was disabled in the database).

Best regards

Jan Nielsen





.

Relevant Pages

  • Re: Execute Persmission denied on object sp_OACreate
    ... > SQL Server is creating a job behind the scenes. ... > permissions. ... > SA account password and gaining access to the database. ... >>> How can get a user permissions to execute these stored procedures ...
    (microsoft.public.sqlserver.security)
  • Re: Execute Persmission denied on object sp_OACreate
    ... SQL Server doesn't check permissions on indirectly referenced objects as ... You can prevent ad-hoc execution of powerful master database procs while ... >I have a user who has execute permissions on a store procedure in a>database> which in turns executes 4 stored procedures in the master database. ...
    (microsoft.public.sqlserver.security)
  • RE: xp_cmdshell, ownership chaining, sql 2000
    ... Cross database ownership chaining enabled ... The procedure is called by a crystal report. ... If I log in to SQL Server through SSMS 2005 using the same user as the ... I get the following error when attempting to execute ...
    (microsoft.public.sqlserver.programming)
  • xp_cmdshell, ownership chaining, sql 2000
    ... Cross database ownership chaining enabled ... The procedure is called by a crystal report. ... If I log in to SQL Server through SSMS 2005 using the same user as the ... I get the following error when attempting to execute ...
    (microsoft.public.sqlserver.programming)
  • Re: Data migration questions?
    ... Use SSIS or the SqlBulkCopy class to import the data into SQL Server. ... Anyone who has read my books knows that I'm not in favor of including BLOBs in the database. ... "Mervin Williams" wrote in message ... should I use a DataSet to bring the data down to the local machine that will run the code and execute the transformation logic from it. ...
    (microsoft.public.dotnet.framework.adonet)