August 10, 2015 at 2:36 am
Dear,
I want that I will allow a user only to select data from any object and only to alter an existing stored procedure or view. That user can not drop and create any stored procedure and view.
I can assign that user db_datareader role, grant view definition but if I grant alter permission, that user can create, alter and drop any stored procedure and view. But I don't want that.
Please guide me the way to solve it out.
Thank you for your help.
August 10, 2015 at 6:24 am
to prevent drop and recreate, but allow alter, I don't believe normal permissions don't go that granular, so you'd have to create a DDL trigger to rollback the commands you want to take away, i think.
complicated to do, but possible; i did something similar with allowing a user with ddl_admin to only create views in another thread;
Lowell
Viewing 2 posts - 1 through 1 (of 1 total)
You must be logged in to reply to this topic. Login to reply