September 24, 2003 at 8:14 am
Hi!
What permissions/roles I need to give to a user, so to allow running extended SPs like sp_OACreate?
/* I am fighting again not to give them sa role */
Thanks.
September 24, 2003 at 9:54 am
no choice. Only sysadmins can run sp_oacreate.
What are you wanting to allow them to do?
Steve Jones
http://www.sqlservercentral.com/columnists/sjones
The Best of SQL Server Central.com 2002 - http://www.sqlservercentral.com/bestof/
September 24, 2003 at 10:30 am
Developers guys need it to send a message to MSMQ.
September 24, 2003 at 4:50 pm
I might be tempted to build some app or job that will read the msg from a table and then send it to MSMQ. Slightly delayed from immedate send, but avoids the need for the app or user to have sa rights.
Steve Jones
http://www.sqlservercentral.com/columnists/sjones
The Best of SQL Server Central.com 2002 - http://www.sqlservercentral.com/bestof/
September 24, 2003 at 11:27 pm
quote:
I might be tempted to build some app or job that will read the msg from a table and then send it to MSMQ. Slightly delayed from immedate send, but avoids the need for the app or user to have sa rights.
They need many users to utilize such feature, so a job solution may be not a better one, since you can't give out permissions to run it without giving sa role or digging into system tables/views. As for the app it is hard for me to argument this, because I know little about development. Though I will try to convince them to avoid using extended SPs.
September 25, 2003 at 2:02 am
In fact using sp_OACreate and its sp_OA*** brothers
can be very dangerous.
The second argument that you can use against your developers,
is that in YUKON sp_OA*** procedures will not exist.
I'm developer so sometimes I have used sp_OA Create,
But some guru sql administrators strongly recommend deleting sp_OACreate procedure.
September 25, 2003 at 2:10 am
2s_popovski:
Greate args. Thanks!
September 25, 2003 at 4:10 am
hi all!
hey steve! may your site is more valuable than you know, because there's been something called xp_msmq.dll up for a couple of months already, it's been working perfectly for us (using it since august 2002 in a production system)! vote for that guy, that stuff is pretty good:
http://www.sqlservercentral.com/products/xp_msmq/
so no need of using sp_oa* stuff to send to MSMQ!
best regards,
chris.
September 26, 2003 at 7:13 am
quote:
hey steve! may your site is more valuable than you know, because there's been something called xp_msmq.dll up for a couple of months already, it's been working perfectly for us (using it since august 2002 in a production system)! vote for that guy, that stuff is pretty good:http://www.sqlservercentral.com/products/xp_msmq/
so no need of using sp_oa* stuff to send to MSMQ!
What about permissions to run xp_msmq? Do I need to give out sa role for it?
Viewing 9 posts - 1 through 8 (of 8 total)
You must be logged in to reply to this topic. Login to reply