Re: Exec permissions on Stored Procedure

On Aug 5, 11:14 am, "gv" <viator.ge...@xxxxxxxxx> wrote:
Hi all,

SQL2000 sp4

If I grant EXEC permissions on a Stored Procedure to a Domain User
shouldn't they be able to Execute that stored procedure reguardless if they
have Select permissions
on a table that the Stored Procedure uses?

thanks,
gv

gv,

Interesting timing. I was just about to make a post concerning the
same thing. On my SQL2000 system (not sure which sp), If I grant
execute permission on a stored procedure, that's all that needs to be
done. I'm working on another system that has SQO2005 and it's
requiring me to also grant select permission to the underlying table.
This seems like a gaping security hole to me. I hope someone out there
has an answer for this.

Mark B
.

Relevant Pages

  • Re: Logon failed for user ". but only for membership tables in same database that other request wor
    ... I was able to log on to computer b and execute the stored procedure. ... was no error after I corrected the permissions for the user. ... I can access the stored procedure but I can not use membership.validateuser. ... You may use the GRANT statement to grant the EXECUTE permission for a ...
    (microsoft.public.sqlserver.security)
  • Re: Executing dynamic select statement in a SP
    ... EXECUTE permissions for a stored procedure default to the owner of the ... the statementwithin the EXECUTE string are checked at the time EXECUTE ... > everything works just fine but with dynamic SQLs when I ...
    (microsoft.public.sqlserver.security)
  • With in a SP Truncate dbo.table table-name permissions..
    ... If i give execute permission to this ... truncate table permissions on the table. ... If a user who creates a stored procedure does ... not qualify the name of the tables referenced in SELECT, ...
    (microsoft.public.sqlserver.security)
  • Re: SET IDENTITY_INSERT Privileges?
    ... on the stored procedure to get around this. ... stored procedure and the user has execute permissions on the ... How do I grant permission to a SET Statement?? ...
    (microsoft.public.sqlserver.security)
  • Re: app role has exec permission but still cant execute sp
    ... that the stored procedure references in it's code. ... ADO connection sometimes opens a new connection to the server if the first ... > The stored procedure which I can't execute is below, ... >>> well as some users with no permissions. ...
    (microsoft.public.sqlserver.security)