Stored Procedure security

From: JWOL <chairleg@xxxxxxxxx>
Date: Wed, 31 Oct 2007 10:33:02 -0700

Hi,

I have a stored procedure which inserts some data into a table and
then runs a select on the table. I have granted execute permissions
on the stored procedure to a user x. Although user x has no select or
insert permissions on the table the stored procedure will run, as I
expected. However, when I introduce a truncate table command into the
stored procedure the user can no longer execute it. It only works if
I grant ALTER permissions on the table to the user. What are the
rules for which permissions are inherited from stored procedures and
which aren't?

Thanks.

.

Follow-Ups:
- Re: Stored Procedure security
  - From: Russell Fields

Prev by Date: Re: Access 2003 App and SA Account
Next by Date: Stored Procedure Security Problem
Previous by thread: Integrated Security by any LDAP solution other than Active Directory?
Next by thread: Re: Stored Procedure security
Index(es):
- Date
- Thread

Relevant Pages

Re: Deny access to all users (including Administrator and DomainAd
... permissions on stored procedure override ... applictaion's user account permissions to the stored procedure which will ... Will try to deny access through the query for SQL Server 2005 and 2000. ... Remove everyone that you don't want rom an Administrator Groups ...
(microsoft.public.sqlserver.security)
Re: public role question
... I didn't understand what Dan was asking me to do. ... Then I am able to create a stored procedure. ... system tables with select permissions. ... You ARE the special DBO user, and not the new user, which is why you have ...
(microsoft.public.sqlserver.security)
Re: public role question
... I logged on to the database through QA as dantest. ... "Dan Guzman" wrote: ... Windows group and thereby get sysadmin permissions. ... Then I am able to create a stored procedure. ...
(microsoft.public.sqlserver.security)
Re: public role question
... Who is the owner of the database? ... "Dan Guzman" wrote: ... Windows group and thereby get sysadmin permissions. ... Then I am able to create a stored procedure. ...
(microsoft.public.sqlserver.security)
Re: With in a SP Truncate dbo.table table-name permissions..
... TRUNCATE TABLE permissions default to the table owner, ... According to sql server ... If a user who creates a stored procedure does ...
(microsoft.public.sqlserver.security)