Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion Groups
DB Engine
SQL ServerMSDESQL Server CE
Services
Analysis (Data Mining)Analysis (OLAP)DTSIntegration ServicesNotification ServicesReporting Services
Programming
CLRConnectivitySQLXML
Other Technologies
ClusteringEnglish QueryFull-Text SearchReplicationService Broker
General
Data WarehousingPerformanceSecuritySetupSQL Server ToolsOther SQL Server Topics
DirectoryUser Groups
Related Topics
MS AccessOther DB ProductsMS Server Products.NET DevelopmentVB DevelopmentJava DevelopmentMore Topics ...

SQL Server Forum / General / Security / October 2005

Tip: Looking for answers? Try searching our database.

SQL Server Permission Question

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
bluefish - 11 Oct 2005 16:42 GMT
Hi,
I am a junior DBA for SQL Server. I have some tables in the production that
want to give update access to group of data management personals, but without
giving them access to update the table directly. If I create an update-stored
procedure, and grant the sp execute write, they cannot execute it without
update permission to the table.

If create a different login to execute this procedure, I still have to give
that login the permission to update, and the users will have update access to
the table.

Is there is work around to this.. ?

I want to prevent the data management personals from running ad-hoc update
queries, that cost us some valuable data. Just want to make it so that they
can only update this through the sp.

Let me know if you know something.

Thank you
Blue Fish
Jens - 11 Oct 2005 18:36 GMT
If they both have the same owner, a technique named ownership chain
applies which means, that if they have access to the stored procedure
and the owner of the store procedure and the underlying table are the
same, they will also have access to the table.

Read more in BOL under Ownership chain.

HTH, jens Suessmeyer.
bluefish - 11 Oct 2005 18:42 GMT
Thank you.

> If they both have the same owner, a technique named ownership chain
> applies which means, that if they have access to the stored procedure
[quoted text clipped - 4 lines]
>
> HTH, jens Suessmeyer.
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.