Re: Security role problem



Tore
I have a security role that has the permission to run a stored procedure.
The stored procedure does a select and an update on a table. To make the
stored procedure run the security role have to be granted permission to do
select and update on the table.

Only if you use dynamic sql within a stored procedure, otherwise you need
grant EXECUTE permission on this SP

The problem occurs when I attach this role to the end user of the
database.
This means that the end user can use excel, access or any other tool to
access the table directly and do updates of the table. I do not want this.
I
would like the user to operate on the table via the stored procedure only,
not directly. How can this be fixed?

Access database has linked tables to SQL Server?


"Tore" <tgyl@xxxxxxxxxxxxx> wrote in message
news:ACA5801B-C93C-43E8-B5BE-954902E09D2F@xxxxxxxxxxxxxxxx
I have an SQL Server 2000 database with access project (.adp) front end.

I have a security role that has the permission to run a stored procedure.
The stored procedure does a select and an update on a table. To make the
stored procedure run the security role have to be granted permission to do
select and update on the table.

The problem occurs when I attach this role to the end user of the
database.
This means that the end user can use excel, access or any other tool to
access the table directly and do updates of the table. I do not want this.
I
would like the user to operate on the table via the stored procedure only,
not directly. How can this be fixed?

Regards

Tore



.



Relevant Pages

  • Security role problem
    ... I have an SQL Server 2000 database with access project front end ... I have a security role that has the permission to run a stored procedure. ...
    (microsoft.public.sqlserver.security)
  • Re: Extended Stored Procedure: Get the current db of the client
    ... with the caveat that you don't recommend it because Microsoft ... of a stored procedure versus umpteen of the same stored procedure spread ... I am not going after Gert Sue. ... the database context as a parameter if you need it, ...
    (microsoft.public.sqlserver.odbc)
  • Trying to set up a SQL Server Agent Account and I hit a wall....
    ... Our database is on SQL Server 2005, however it is set to compatibility mode ... You may need to set the compatibility level ... of the current database to a higher value to enable this feature. ... for the stored procedure sp_dbcmptlevel. ...
    (microsoft.public.sqlserver.security)
  • Re: Extended Stored Procedure: Get the current db of the client
    ... I am not going after Gert Sue. ... the database context as a parameter if you need it, ... Did you ever write an extended stored procedure? ... different than an extended stored procedure, so that is not giving you want ...
    (microsoft.public.sqlserver.odbc)
  • Re: Extended Stored Procedure: Get the current db of the client
    ... Thanks for the link Sue. ... I am not going after Gert Sue. ... the database context as a parameter if you need it, ... Did you ever write an extended stored procedure? ...
    (microsoft.public.sqlserver.odbc)