April 1, 2009 at 7:05 am
I have an instance of SQL Server 2000, sp4 running on Win2003. There are 40 databases of with 5 to 20 database roles. I am trying to script, by database what object and permissions are assigned to the database role.
Like
USE DB1
go
--------------------
Result
--------------------
Role Object_Type Object_Name Permission
ANY help would be appricated, under a time crunch by external audit.
Joseph
April 1, 2009 at 7:28 am
Check out this article[/url]. It doesn't have a script, but it does have a link to a utility that you may find useful. You can also check out this script[/url] in the Scripts[/url] section of SSC.
Jack Corbett
Consultant - Straight Path Solutions
Check out these links on how to get faster and more accurate answers:
Forum Etiquette: How to post data/code on a forum to get the best help
Need an Answer? Actually, No ... You Need a Question
April 1, 2009 at 7:44 am
thank you.
I just found out that my script that I made is working and was right all along.
The vendor of this product created roles and assigned them to the users. The application uses the roles to limit what parts of the application the user can use. Instead of assigning the objects/permissions to the roles, they assigned S/I/U/D or Execute on all objects to Public.
Problem? You think? Once you assign the user to the database, they can do ANYTHING!
Security by ingornance is NOT security.
Joseph
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply