December 10, 2003 at 5:04 am
Is it possible to deny a login with dbo rights to a database the right to create/edit/run DTS packages?
Daniel Mosmeyer
Edited by - mosmeyer on 12/10/2003 05:07:22 AM
Edited by - mosmeyer on 12/10/2003 05:09:36 AM
Daniel Mosmeyer
December 10, 2003 at 7:11 am
Yes, unless the login is a member of the sysadmin role for the server. Does the login only have dbo rights to a particulr database (or databases)?
K. Brian Kelley, GSEC
http://www.truthsolutions.com/
Author: Start to Finish Guide to SQL Server Performance Monitoring
K. Brian Kelley
@kbriankelley
December 11, 2003 at 4:46 am
Yes. The user only has rights (dbo) to one database. There are no other rights assigned within the SQL Server. Also, how granular are the rights to DTS? Can I grant execute or modify without granting create?
Daniel Mosmeyer
Daniel Mosmeyer
December 11, 2003 at 6:45 am
Daniel,
What you can to is to revoke execute permission to SP_ENUM_DTSPACKAGES stored procedure in the MSDB database. By doing this, the DTS packages will not be displayed in Enterprise Manager for this user, that pane will be blank.
Hope this helps.
CL-
December 11, 2003 at 2:33 pm
See this FAQ for a quick summary of your options:
http://www.sqlservercentral.com/faq/viewfaqanswer.asp?categoryid=6&faqid=252
I hope it helps,
-Al
Funny thing about people and their computers...
The computer is completing millions of processes every second, but the user still thinks it is too slow.
"I will not be taken alive!" - S. Hussein
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply