Re: What commands can a user execute

Cqlboy (Cqlboy@xxxxxxxxxxxxxxxxxxxxxxxxx) writes:
Thanks. This is helpful - but I'm still missing something. When
executing the query - yes, I'm aware of it - either at the Server or
Database scope, no where do I find the permission for DROP TABLE or DROP
DATABASE but I do find CREATE TABLE and CREATE DATABASE. Another
example would be the command UPDATE STATISTICS. BOL states you need
ALTER permissions on the table or view. OK, understood. So, how do I
query the system to tell me all the commands a specific user can execute
without referencing BOL for every command ? Incidently, this is a
question my manager asked and auditors are expected to ask the same. I
thought it would be fairly easy to compile a full list of SQL commands
that a user can execute but, so far, it has not. Any help would be
appreciated. Thanks again. -CqlBoy

What you can see are the permissions, and then you are supposed to know
what the permissions entitles you to.

Given the large number of commands, I can agree that it would be nice if
you could retrieve this with a query from SQL Server rather than Books
Online. If would be fairly simple to provide a view that answers
"what permission do I need for TRUNCATE TABLE", as the view could have
two columns: the command and an explaining text. To show it the other way
around, and that is really what you are asking for, would take more effort
I guess.

Anyway, http://connect.microsoft.com/SqlServer/Feedback is the place
for good ideas like this.


--
Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx

Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx
SQL 2000: http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx

.

Relevant Pages

  • Re: SQL CE Synching Problems
    ... Have you granted IUSER_ServerName access to your publication within SQL ... It looks like the permissions problem is getting access to the publication. ... so the issue has to be between the server tools and the publisher. ... > A request to send data to the computer running IIS has failed. ...
    (microsoft.public.sqlserver.ce)
  • Re: SQL CE Synching Problems
    ... install location of SQL CE instead of under Inetpub like I had done before. ... > so the issue has to be between the server tools and the publisher. ... >>I ran the wizard again to check all the permissions and this is what it ... >> A request to send data to the computer running IIS has failed. ...
    (microsoft.public.sqlserver.ce)
  • Re: Server Unavailable - ASP.NET 2.0 on Windows XP
    ... Please review the permissions outlined in this article. ... Make sure that the HOME-WKSTATION\ASPNET account has been assigned NTFS ... So I switched to that directory in Command Prompt and tried the following... ... I'm still getting the "Server Unavailable" error... ...
    (microsoft.public.dotnet.framework.aspnet)
  • IBM INFORMIX ODBC DRIVER 3.00.00.13223 - ICLIT09B.DLL EXCEPTION_AC
    ... then use a link server – Microsoft OLE DB Provider for ODBC Driver. ... and Linked server test connection successfully and I can return most records ... A severe error occurred on the current command. ... Here's my SQL and ERRORS ...
    (microsoft.public.sqlserver.odbc)
  • EXCEPTION_ACCESS_VIOLATION Error: 17310, Severity: 20, State: 1.
    ... then use a link server – Microsoft OLE DB Provider for ODBC Driver. ... and Linked server test connection successfully and I can return most records ... A severe error occurred on the current command. ... Here's my SQL and ERRORS ...
    (microsoft.public.sqlserver.datamining)