Skip to content Skip to sidebar Skip to footer

SQL Server 2005 - Granting Permission To Create Stored Procedures (but No Other Objects)

I want to grant a user permission to create, alter, and execute stored procedures, but without the ability to create other database objects. I excluded them from the role db_ddlad

Solution 1:

A user can create procedures in a schema that they own. So you can set up a schema for the user to do development work. Then, if it needs to be dbo, the admin can put it there when development is done.


Solution 2:

If you can create (or alter) and execute a stored procedure, you can do anything.

Execute on a stored procedure implies all other permissions within the context of that procedure. So if you can change a procedure and run it, there's no point in restricting anything else. You could just make the procedure act as a proxy on your behalf.


Post a Comment for "SQL Server 2005 - Granting Permission To Create Stored Procedures (but No Other Objects)"