Re: What commands can a user execute

Thanks for your follow-up. I think you understand what I'm looking for -
simple security query rather than BOL. It appears I've asked a more
difficult question that I first imagined. Well, I don't give up easily.
I'll crunch on it and figure it somehow.
Thanks again. Appreciate the help.
-CqlBoy

"Erland Sommarskog" wrote:

Cqlboy (Cqlboy@xxxxxxxxxxxxxxxxxxxxxxxxx) writes:
Thanks. This is helpful - but I'm still missing something. When
executing the query - yes, I'm aware of it - either at the Server or
Database scope, no where do I find the permission for DROP TABLE or DROP
DATABASE but I do find CREATE TABLE and CREATE DATABASE. Another
example would be the command UPDATE STATISTICS. BOL states you need
ALTER permissions on the table or view. OK, understood. So, how do I
query the system to tell me all the commands a specific user can execute
without referencing BOL for every command ? Incidently, this is a
question my manager asked and auditors are expected to ask the same. I
thought it would be fairly easy to compile a full list of SQL commands
that a user can execute but, so far, it has not. Any help would be
appreciated. Thanks again. -CqlBoy

What you can see are the permissions, and then you are supposed to know
what the permissions entitles you to.

Given the large number of commands, I can agree that it would be nice if
you could retrieve this with a query from SQL Server rather than Books
Online. If would be fairly simple to provide a view that answers
"what permission do I need for TRUNCATE TABLE", as the view could have
two columns: the command and an explaining text. To show it the other way
around, and that is really what you are asking for, would take more effort
I guess.

Anyway, http://connect.microsoft.com/SqlServer/Feedback is the place
for good ideas like this.


--
Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx

Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx
SQL 2000: http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx


.

Relevant Pages

  • Re: Object permissions
    ... Who is the owner of the query? ... permissions does the owner have on the underlying tables? ... does the user have on the query; ... to 'owners' in the sql statement each time the code runs, ...
    (microsoft.public.access.security)
  • help
    ... You can do this with an Access update query object or ... attach the SQL to the form through AccessVB. ... you create your query and then add a button to the form ... string that has your SQL command and use the command ...
    (microsoft.public.access.forms)
  • Re: Pass Through Query Question
    ... I did some more searching and found the answer from Joan Wild on the ... security group - The users need to have write permissions to the pass ... >I am using VBA code to update teh SQL of a pass through query to SQL ...
    (microsoft.public.access.modulesdaovba)
  • Re: What commands can a user execute
    ... example would be the command UPDATE STATISTICS. ... ALTER permissions on the table or view. ... you could retrieve this with a query from SQL Server rather than Books ...
    (microsoft.public.sqlserver.security)
  • Re: Group Permissions and SQL
    ... "FROM tblLocPicker WITH OWNERACCESS OPTION" ... The SQL looks strange. ... table but qrysfrmLocPicker would be the name of a query. ... no read permissions on 'tblLocPicker'", ...
    (microsoft.public.access.security)