Corrupt Public Role

  •  

    I have a production system where I have a user who has the roles Public and datareader. Up until yesterday they were able to connect to the system Now they cant and it seems that even though they have the public role they dont have the select privlages on the  master, msdb and temp dbs so they are blocked form connecting to the system.

    I have gotten around this by granting the user readonly on the table in those db's needed to connect. My question is how would the public role become corrupt and how can I recover it.

     

    Thanks...

     

    Hope this helps...

    Ford Fairlane
    Rock and Roll Detective

  • Has anything else been done in recent days? And is the only affected user. If the only one affected then I don't believ it has anything to do with public. If not then has someone messed with permissions of public possibly?

  • Nothing has happened as far as I can tell. Also if I create a new user and grant them the same roles, that new user is not able to connect until I explicitly grant them select on sysobjects in msdb and temp and to spt_values in master.

    Hope this helps...

    Ford Fairlane
    Rock and Roll Detective

  • See if this can help you out any.

    Had a sec of nothing else so take a look and see if this helps. I used the following SQL...

    ---------------------------BEGIN---------------------------

    select cast(object_name([id]) as varchar(40)) [object],

    (CASE [action]

     WHEN 26 THEN 'REFERENCES'

     WHEN 178 THEN 'CREATE FUNCTION'

     WHEN 193 THEN 'SELECT'

     WHEN 195 THEN 'INSERT'

     WHEN 196 THEN 'DELETE'

     WHEN 197 THEN 'UPDATE'

     WHEN 198 THEN 'CREATE TABLE'

     WHEN 203 THEN 'CREATE DATABASE'

     WHEN 207 THEN 'CREATE VIEW'

     WHEN 222 THEN 'CREATE PROCEDURE'

     WHEN 224 THEN 'EXECUTE'

     WHEN 228 THEN 'BACKUP DATABASE'

     WHEN 233 THEN 'CREATE DEFAULT'

     WHEN 235 THEN 'BACKUP LOG'

     WHEN 236 THEN 'CREATE RULE'

    END) [action],

    (CASE protecttype

     WHEN 204 THEN 'GRANT_W_GRANT'

     WHEN 205 THEN 'GRANT'

     WHEN 206 THEN 'DENY'

    END) protecttype,

    columns --only needed in master and reference was altered for better view below.

    from sysprotects where uid = 0 order by object

    ----------------------------END----------------------------

    These are the standard permissions for the public role by DB per object

    tempdb

    object               action           protecttype  

    -------------------- ---------------- -------------

    syscolumns           SELECT           GRANT

    syscomments          SELECT           GRANT

    sysconstraints       SELECT           GRANT

    sysdepends           SELECT           GRANT

    sysfilegroups        SELECT           GRANT

    sysfiles             SELECT           GRANT

    sysforeignkeys       SELECT           GRANT

    sysfulltextcatalogs  SELECT           GRANT

    sysindexes           SELECT           GRANT

    sysindexkeys         SELECT           GRANT

    sysmembers           SELECT           GRANT

    sysobjects           SELECT           GRANT

    syspermissions       SELECT           GRANT

    sysprotects          SELECT           GRANT

    sysreferences        SELECT           GRANT

    syssegments          SELECT           GRANT

    systypes             SELECT           GRANT

    sysusers             SELECT           GRANT

     

    msdb

    object                                   action           protecttype  

    ---------------------------------------- ---------------- -------------

    backupfile                               SELECT           GRANT

    backupmediafamily                        SELECT           GRANT

    backupmediaset                           SELECT           GRANT

    backupset                                SELECT           GRANT

    dt_addtosourcecontrol                    EXECUTE          GRANT

    dt_addtosourcecontrol_u                  EXECUTE          GRANT

    dt_adduserobject                         EXECUTE          GRANT

    dt_adduserobject_vcs                     EXECUTE          GRANT

    dt_checkinobject                         EXECUTE          GRANT

    dt_checkinobject_u                       EXECUTE          GRANT

    dt_checkoutobject                        EXECUTE          GRANT

    dt_checkoutobject_u                      EXECUTE          GRANT

    dt_displayoaerror                        EXECUTE          GRANT

    dt_displayoaerror_u                      EXECUTE          GRANT

    dt_droppropertiesbyid                    EXECUTE          GRANT

    dt_dropuserobjectbyid                    EXECUTE          GRANT

    dt_generateansiname                      EXECUTE          GRANT

    dt_getobjwithprop                        EXECUTE          GRANT

    dt_getobjwithprop_u                      EXECUTE          GRANT

    dt_getpropertiesbyid                     EXECUTE          GRANT

    dt_getpropertiesbyid_u                   EXECUTE          GRANT

    dt_getpropertiesbyid_vcs                 EXECUTE          GRANT

    dt_getpropertiesbyid_vcs_u               EXECUTE          GRANT

    dt_isundersourcecontrol                  EXECUTE          GRANT

    dt_isundersourcecontrol_u                EXECUTE          GRANT

    dt_removefromsourcecontrol               EXECUTE          GRANT

    dt_setpropertybyid                       EXECUTE          GRANT

    dt_setpropertybyid_u                     EXECUTE          GRANT

    dt_validateloginparams                   EXECUTE          GRANT

    dt_validateloginparams_u                 EXECUTE          GRANT

    dt_vcsenabled                            EXECUTE          GRANT

    dt_verstamp006                           EXECUTE          GRANT

    dt_whocheckedout                         EXECUTE          GRANT

    dt_whocheckedout_u                       EXECUTE          GRANT

    dtproperties                             REFERENCES       GRANT

    dtproperties                             SELECT           GRANT

    dtproperties                             INSERT           GRANT

    dtproperties                             DELETE           GRANT

    dtproperties                             UPDATE           GRANT

    logmarkhistory                           SELECT           GRANT

    mswebtasks                               SELECT           GRANT

    restorefile                              SELECT           GRANT

    restorefilegroup                         SELECT           GRANT

    restorehistory                           SELECT           GRANT

    sp_add_dtspackage                        EXECUTE          GRANT

    sp_add_job                               EXECUTE          GRANT

    sp_add_jobschedule                       EXECUTE          GRANT

    sp_add_jobserver                         EXECUTE          GRANT

    sp_add_jobstep                           EXECUTE          GRANT

    sp_addtask                               EXECUTE          GRANT

    sp_check_for_owned_jobs                  EXECUTE          GRANT

    sp_check_for_owned_jobsteps              EXECUTE          GRANT

    sp_delete_job                            EXECUTE          GRANT

    sp_delete_jobschedule                    EXECUTE          GRANT

    sp_delete_jobserver                      EXECUTE          GRANT

    sp_delete_jobstep                        EXECUTE          GRANT

    sp_drop_dtspackage                       EXECUTE          GRANT

    sp_droptask                              EXECUTE          GRANT

    sp_dump_dtslog_all                       EXECUTE          GRANT

    sp_dump_dtspackagelog                    EXECUTE          GRANT

    sp_dump_dtssteplog                       EXECUTE          GRANT

    sp_dump_dtstasklog                       EXECUTE          GRANT

    sp_enlist_tsx                            EXECUTE          GRANT

    sp_enum_dtspackagelog                    EXECUTE          GRANT

    sp_enum_dtspackages                      EXECUTE          GRANT

    sp_enum_dtssteplog                       EXECUTE          GRANT

    sp_enum_dtstasklog                       EXECUTE          GRANT

    sp_enum_sqlagent_subsystems              EXECUTE          GRANT

    sp_get_dtspackage                        EXECUTE          GRANT

    sp_get_dtsversion                        EXECUTE          GRANT

    sp_get_job_alerts                        EXECUTE          GRANT

    sp_get_jobstep_db_username               EXECUTE          GRANT

    sp_get_log_shipping_monitor_info         EXECUTE          GRANT

    sp_get_sqlagent_properties               EXECUTE          GRANT

    sp_help_category                         EXECUTE          GRANT

    sp_help_job                              EXECUTE          GRANT

    sp_help_jobhistory                       EXECUTE          GRANT

    sp_help_jobschedule                      EXECUTE          GRANT

    sp_help_jobserver                        EXECUTE          GRANT

    sp_help_jobstep                          EXECUTE          GRANT

    sp_helphistory                           EXECUTE          GRANT

    sp_helptask                              EXECUTE          GRANT

    sp_log_dtspackage_begin                  EXECUTE          GRANT

    sp_log_dtspackage_end                    EXECUTE          GRANT

    sp_log_dtsstep_begin                     EXECUTE          GRANT

    sp_log_dtsstep_end                       EXECUTE          GRANT

    sp_log_dtstask                           EXECUTE          GRANT

    sp_make_dtspackagename                   EXECUTE          GRANT

    sp_post_msx_operation                    EXECUTE          GRANT

    sp_purge_jobhistory                      EXECUTE          GRANT

    sp_purgehistory                          EXECUTE          GRANT

    sp_reassign_dtspackageowner              EXECUTE          GRANT

    sp_reassigntask                          EXECUTE          GRANT

    sp_start_job                             EXECUTE          GRANT

    sp_stop_job                              EXECUTE          GRANT

    sp_uniquetaskname                        EXECUTE          GRANT

    sp_update_job                            EXECUTE          GRANT

    sp_update_jobschedule                    EXECUTE          GRANT

    sp_update_jobstep                        EXECUTE          GRANT

    sp_updatetask                            EXECUTE          GRANT

    sp_verifytaskid                          EXECUTE          GRANT

    syscategories                            SELECT           GRANT

    syscolumns                               SELECT           GRANT

    syscomments                              SELECT           GRANT

    sysconstraints                           SELECT           GRANT

    sysdepends                               SELECT           GRANT

    sysfilegroups                            SELECT           GRANT

    sysfiles                                 SELECT           GRANT

    sysforeignkeys                           SELECT           GRANT

    sysfulltextcatalogs                      SELECT           GRANT

    sysindexes                               SELECT           GRANT

    sysindexkeys                             SELECT           GRANT

    sysjobs_view                             SELECT           GRANT

    sysmembers                               SELECT           GRANT

    sysobjects                               SELECT           GRANT

    syspermissions                           SELECT           GRANT

    sysprotects                              SELECT           GRANT

    sysreferences                            SELECT           GRANT

    syssegments                              SELECT           GRANT

    systasks_view                            SELECT           GRANT

    systypes                                 SELECT           GRANT

    sysusers                                 SELECT           GRANT

     

    model (just in case)

    object               action           protecttype  

    -------------------- ---------------- -------------

    syscolumns           SELECT           GRANT

    syscomments          SELECT           GRANT

    sysconstraints       SELECT           GRANT

    sysdepends           SELECT           GRANT

    sysfilegroups        SELECT           GRANT

    sysfiles             SELECT           GRANT

    sysforeignkeys       SELECT           GRANT

    sysfulltextcatalogs  SELECT           GRANT

    sysindexes           SELECT           GRANT

    sysindexkeys         SELECT           GRANT

    sysmembers           SELECT           GRANT

    sysobjects           SELECT           GRANT

    syspermissions       SELECT           GRANT

    sysprotects          SELECT           GRANT

    sysreferences        SELECT           GRANT

    syssegments          SELECT           GRANT

    systypes             SELECT           GRANT

    sysusers             SELECT           GRANT

     

    master

    object                                   action           protecttype   columns

    ---------------------------------------- ---------------- ------------- ----------------------------------------------------------------------------------

    CHECK_CONSTRAINTS                        SELECT           GRANT        

    COLUMN_DOMAIN_USAGE                      SELECT           GRANT        

    COLUMN_PRIVILEGES                        SELECT           GRANT        

    COLUMNS                                  SELECT           GRANT        

    CONSTRAINT_COLUMN_USAGE                  SELECT           GRANT        

    CONSTRAINT_TABLE_USAGE                   SELECT           GRANT        

    DOMAIN_CONSTRAINTS                       SELECT           GRANT        

    DOMAINS                                  SELECT           GRANT        

    fn_chariswhitespace                      EXECUTE          GRANT

    fn_escapecmdshellsymbols                 EXECUTE          GRANT

    fn_escapecmdshellsymbolsremovequotes     EXECUTE          GRANT

    fn_generateparameterpattern              EXECUTE          GRANT

    fn_helpcollations                        SELECT           GRANT        

    fn_isreplmergeagent                      EXECUTE          GRANT

    fn_listextendedproperty                  SELECT           GRANT        

    fn_MSFullText                            SELECT           GRANT        

    fn_MSgensqescstr                         EXECUTE          GRANT

    fn_removeparameterwithargument           EXECUTE          GRANT

    fn_repladjustcolumnmap                   EXECUTE          GRANT

    fn_replbitstringtoint                    EXECUTE          GRANT

    fn_replcomposepublicationsnapshotfolder  EXECUTE          GRANT

    fn_replgenerateshorterfilenameprefix     EXECUTE          GRANT

    fn_replgetbinary8lodword                 EXECUTE          GRANT

    fn_replinttobitstring                    EXECUTE          GRANT

    fn_replmakestringliteral                 EXECUTE          GRANT

    fn_replprepadbinary8                     EXECUTE          GRANT

    fn_replquotename                         EXECUTE          GRANT

    fn_replrotr                              EXECUTE          GRANT

    fn_repltrimleadingzerosinhexstr          EXECUTE          GRANT

    fn_repluniquename                        EXECUTE          GRANT

    fn_serverid                              EXECUTE          GRANT

    fn_servershareddrives                    SELECT           GRANT        

    fn_skipparameterargument                 EXECUTE          GRANT

    fn_sqlvarbasetostr                       EXECUTE          GRANT

    fn_updateparameterwithargument           EXECUTE          GRANT

    fn_varbintohexstr                        EXECUTE          GRANT

    fn_varbintohexsubstring                  EXECUTE          GRANT

    fn_virtualfilestats                      SELECT           GRANT        

    fn_virtualservernodes                    SELECT           GRANT        

    KEY_COLUMN_USAGE                         SELECT           GRANT        

    MS_sqlctrs_users                         EXECUTE          GRANT

    PARAMETERS                               SELECT           GRANT        

    REFERENTIAL_CONSTRAINTS                  SELECT           GRANT        

    ROUTINE_COLUMNS                          SELECT           GRANT        

    ROUTINES                                 SELECT           GRANT        

    SCHEMATA                                 SELECT           GRANT        

    sp_ActiveDirectory_Obj                   EXECUTE          GRANT

    sp_ActiveDirectory_SCP                   EXECUTE          GRANT

    sp_ActiveDirectory_Start                 EXECUTE          GRANT

    sp_addalias                              EXECUTE          GRANT

    sp_addapprole                            EXECUTE          GRANT

    sp_addarticle                            EXECUTE          GRANT

    sp_addextendedproperty                   EXECUTE          GRANT

    sp_addgroup                              EXECUTE          GRANT

    sp_addlinkedserver                       EXECUTE          GRANT

    sp_addlinkedsrvlogin                     EXECUTE          GRANT

    sp_addlogin                              EXECUTE          GRANT

    sp_addmergealternatepublisher            EXECUTE          GRANT

    sp_addmergearticle                       EXECUTE          GRANT

    sp_addmergefilter                        EXECUTE          GRANT

    sp_addmergepublication                   EXECUTE          GRANT

    sp_addmergepullsubscription              EXECUTE          GRANT

    sp_addmergepullsubscription_agent        EXECUTE          GRANT

    sp_addmergesubscription                  EXECUTE          GRANT

    sp_addmessage                            EXECUTE          GRANT

    sp_addpublication                        EXECUTE          GRANT

    sp_addpublication_snapshot               EXECUTE          GRANT

    sp_addpullsubscription                   EXECUTE          GRANT

    sp_addpullsubscription_agent             EXECUTE          GRANT

    sp_addqueued_artinfo                     EXECUTE          GRANT

    sp_addremotelogin                        EXECUTE          GRANT

    sp_addrole                               EXECUTE          GRANT

    sp_addrolemember                         EXECUTE          GRANT

    sp_addscriptexec                         EXECUTE          GRANT

    sp_addserver                             EXECUTE          GRANT

    sp_addsrvrolemember                      EXECUTE          GRANT

    sp_addsubscription                       EXECUTE          GRANT

    sp_addsynctriggers                       EXECUTE          GRANT

    sp_addtabletocontents                    EXECUTE          GRANT

    sp_addtype                               EXECUTE          GRANT

    sp_addumpdevice                          EXECUTE          GRANT

    sp_adduser                               EXECUTE          GRANT

    sp_adjustpublisheridentityrange          EXECUTE          GRANT

    sp_altermessage                          EXECUTE          GRANT

    sp_approlepassword                       EXECUTE          GRANT

    sp_article_validation                    EXECUTE          GRANT

    sp_articlecolumn                         EXECUTE          GRANT

    sp_articlefilter                         EXECUTE          GRANT

    sp_articleview                           EXECUTE          GRANT

    sp_attach_db                             EXECUTE          GRANT

    sp_attach_single_file_db                 EXECUTE          GRANT

    sp_attachsubscription                    EXECUTE          GRANT

    sp_autostats                             EXECUTE          GRANT

    sp_bcp_dbcmptlevel                       EXECUTE          GRANT

    sp_bindefault                            EXECUTE          GRANT

    sp_bindrule                              EXECUTE          GRANT

    sp_bindsession                           EXECUTE          GRANT

    sp_blockcnt                              EXECUTE          GRANT

    sp_browsemergesnapshotfolder             EXECUTE          GRANT

    sp_browsesnapshotfolder                  EXECUTE          GRANT

    sp_catalogs                              EXECUTE          GRANT

    sp_catalogs_rowset                       EXECUTE          GRANT

    sp_change_subscription_properties        EXECUTE          GRANT

    sp_change_users_login                    EXECUTE          GRANT

    sp_changearticle                         EXECUTE          GRANT

    sp_changedbowner                         EXECUTE          GRANT

    sp_changegroup                           EXECUTE          GRANT

    sp_changemergearticle                    EXECUTE          GRANT

    sp_changemergefilter                     EXECUTE          GRANT

    sp_changemergepublication                EXECUTE          GRANT

    sp_changemergepullsubscription           EXECUTE          GRANT

    sp_changemergesubscription               EXECUTE          GRANT

    sp_changeobjectowner                     EXECUTE          GRANT

    sp_changepublication                     EXECUTE          GRANT

    sp_changesubscription                    EXECUTE          GRANT

    sp_changesubscriptiondtsinfo             EXECUTE          GRANT

    sp_changesubstatus                       EXECUTE          GRANT

    sp_check_constbytable_rowset             EXECUTE          GRANT

    sp_check_constraints_rowset              EXECUTE          GRANT

    sp_check_for_sync_trigger                EXECUTE          GRANT

    sp_check_publication_access              EXECUTE          GRANT

    sp_check_sync_trigger                    EXECUTE          GRANT

    sp_checknames                            EXECUTE          GRANT

    sp_cleanupdbreplication                  EXECUTE          GRANT

    sp_column_privileges                     EXECUTE          GRANT

    sp_column_privileges_ex                  EXECUTE          GRANT

    sp_column_privileges_rowset              EXECUTE          GRANT

    sp_columns                               EXECUTE          GRANT

    sp_columns_ex                            EXECUTE          GRANT

    sp_columns_rowset                        EXECUTE          GRANT

    sp_configure                             EXECUTE          GRANT

    sp_convertwebtasks                       EXECUTE          GRANT

    sp_copymergesnapshot                     EXECUTE          GRANT

    sp_copysnapshot                          EXECUTE          GRANT

    sp_copysubscription                      EXECUTE          GRANT

    sp_createmergepalrole                    EXECUTE          GRANT

    sp_createorphan                          EXECUTE          GRANT

    sp_createstats                           EXECUTE          GRANT

    sp_cursor                                EXECUTE          GRANT

    sp_cursor_list                           EXECUTE          GRANT

    sp_cursorclose                           EXECUTE          GRANT

    sp_cursorexecute                         EXECUTE          GRANT

    sp_cursorfetch                           EXECUTE          GRANT

    sp_cursoropen                            EXECUTE          GRANT

    sp_cursoroption                          EXECUTE          GRANT

    sp_cursorprepare                         EXECUTE          GRANT

    sp_cursorprepexec                        EXECUTE          GRANT

    sp_cursorunprepare                       EXECUTE          GRANT

    sp_databases                             EXECUTE          GRANT

    sp_datatype_info                         EXECUTE          GRANT

    sp_dbcmptlevel                           EXECUTE          GRANT

    sp_dbfixedrolepermission                 EXECUTE          GRANT

    sp_dboption                              EXECUTE          GRANT

    sp_ddopen                                EXECUTE          GRANT

    sp_defaultdb                             EXECUTE          GRANT

    sp_defaultlanguage                       EXECUTE          GRANT

    sp_deletemergeconflictrow                EXECUTE          GRANT

    sp_denylogin                             EXECUTE          GRANT

    sp_depends                               EXECUTE          GRANT

    sp_describe_cursor                       EXECUTE          GRANT

    sp_describe_cursor_columns               EXECUTE          GRANT

    sp_describe_cursor_tables                EXECUTE          GRANT

    sp_disableagentoffload                   EXECUTE          GRANT

    sp_diskdefault                           EXECUTE          GRANT

    sp_distcounters                          EXECUTE          GRANT

    sp_dropalias                             EXECUTE          GRANT

    sp_dropanonymousagent                    EXECUTE          GRANT

    sp_dropapprole                           EXECUTE          GRANT

    sp_droparticle                           EXECUTE          GRANT

    sp_dropdevice                            EXECUTE          GRANT

    sp_dropextendedproperty                  EXECUTE          GRANT

    sp_dropgroup                             EXECUTE          GRANT

    sp_droplinkedsrvlogin                    EXECUTE          GRANT

    sp_droplogin                             EXECUTE          GRANT

    sp_dropmergealternatepublisher           EXECUTE          GRANT

    sp_dropmergearticle                      EXECUTE          GRANT

    sp_dropmergefilter                       EXECUTE          GRANT

    sp_dropmergepublication                  EXECUTE          GRANT

    sp_dropmergepullsubscription             EXECUTE          GRANT

    sp_dropmergesubscription                 EXECUTE          GRANT

    sp_dropmessage                           EXECUTE          GRANT

    sp_droporphans                           EXECUTE          GRANT

    sp_droppublication                       EXECUTE          GRANT

    sp_droppullsubscription                  EXECUTE          GRANT

    sp_dropremotelogin                       EXECUTE          GRANT

    sp_droprole                              EXECUTE          GRANT

    sp_droprolemember                        EXECUTE          GRANT

    sp_dropserver                            EXECUTE          GRANT

    sp_dropsrvrolemember                     EXECUTE          GRANT

    sp_dropsubscription                      EXECUTE          GRANT

    sp_droptype                              EXECUTE          GRANT

    sp_dropuser                              EXECUTE          GRANT

    sp_enableagentoffload                    EXECUTE          GRANT

    sp_enum_oledb_providers                  EXECUTE          GRANT

    sp_enumcodepages                         EXECUTE          GRANT

    sp_enumcustomresolvers                   EXECUTE          GRANT

    sp_enumdsn                               EXECUTE          GRANT

    sp_enumerrorlogs                         EXECUTE          GRANT

    sp_enumfullsubscribers                   EXECUTE          GRANT

    sp_eventlog                              EXECUTE          GRANT

    sp_execute                               EXECUTE          GRANT

    sp_executesql                            EXECUTE          GRANT

    sp_expired_subscription_cleanup          EXECUTE          GRANT

    sp_fallback_MS_sel_fb_svr                EXECUTE          GRANT

    sp_fkeys                                 EXECUTE          GRANT

    sp_foreign_keys_rowset                   EXECUTE          GRANT

    sp_foreignkeys                           EXECUTE          GRANT

    sp_fulltext_catalog                      EXECUTE          GRANT

    sp_fulltext_column                       EXECUTE          GRANT

    sp_fulltext_database                     EXECUTE          GRANT

    sp_fulltext_service                      EXECUTE          GRANT

    sp_fulltext_table                        EXECUTE          GRANT

    sp_generatefilters                       EXECUTE          GRANT

    sp_get_distributor                       EXECUTE          GRANT

    sp_getagentoffloadinfo                   EXECUTE          GRANT

    sp_getapplock                            EXECUTE          GRANT

    sp_getbindtoken                          EXECUTE          GRANT

    sp_GetMBCSCharLen                        EXECUTE          GRANT

    sp_getmergedeletetype                    EXECUTE          GRANT

    sp_getqueuedarticlesynctraninfo          EXECUTE          GRANT

    sp_getqueuedrows                         EXECUTE          GRANT

    sp_getschemalock                         EXECUTE          GRANT

    sp_getsqlqueueversion                    EXECUTE          GRANT

    sp_getsubscriptiondtspackagename         EXECUTE          GRANT

    sp_grant_publication_access              EXECUTE          GRANT

    sp_grantdbaccess                         EXECUTE          GRANT

    sp_grantlogin                            EXECUTE          GRANT

    sp_help                                  EXECUTE          GRANT

    sp_help_agent_default                    EXECUTE          GRANT

    sp_help_agent_parameter                  EXECUTE          GRANT

    sp_help_agent_profile                    EXECUTE          GRANT

    sp_help_fulltext_catalogs                EXECUTE          GRANT

    sp_help_fulltext_catalogs_cursor         EXECUTE          GRANT

    sp_help_fulltext_columns                 EXECUTE          GRANT

    sp_help_fulltext_columns_cursor          EXECUTE          GRANT

    sp_help_fulltext_tables                  EXECUTE          GRANT

    sp_help_fulltext_tables_cursor           EXECUTE          GRANT

    sp_help_publication_access               EXECUTE          GRANT

    sp_helparticle                           EXECUTE          GRANT

    sp_helparticlecolumns                    EXECUTE          GRANT

    sp_helparticledts                        EXECUTE          GRANT

    sp_helpconstraint                        EXECUTE          GRANT

    sp_helpdb                                EXECUTE          GRANT

    sp_helpdbfixedrole                       EXECUTE          GRANT

    sp_helpdevice                            EXECUTE          GRANT

    sp_helpdistpublisher                     EXECUTE          GRANT

    sp_helpdistributiondb                    EXECUTE          GRANT

    sp_helpdistributor                       EXECUTE          GRANT

    sp_helpdistributor_properties            EXECUTE          GRANT

    sp_helpextendedproc                      EXECUTE          GRANT

    sp_helpfile                              EXECUTE          GRANT

    sp_helpfilegroup                         EXECUTE          GRANT

    sp_helpgroup                             EXECUTE          GRANT

    sp_helpindex                             EXECUTE          GRANT

    sp_helplanguage                          EXECUTE          GRANT

    sp_helplinkedsrvlogin                    EXECUTE          GRANT

    sp_helplog                               EXECUTE          GRANT

    sp_helplogins                            EXECUTE          GRANT

    sp_helpmergealternatepublisher           EXECUTE          GRANT

    sp_helpmergearticle                      EXECUTE          GRANT

    sp_helpmergearticlecolumn                EXECUTE          GRANT

    sp_helpmergearticleconflicts             EXECUTE          GRANT

    sp_helpmergecleanupwait                  EXECUTE          GRANT

    sp_helpmergeconflictrows                 EXECUTE          GRANT

    sp_helpmergedeleteconflictrows           EXECUTE          GRANT

    sp_helpmergefilter                       EXECUTE          GRANT

    sp_helpmergepublication                  EXECUTE          GRANT

    sp_helpmergepullsubscription             EXECUTE          GRANT

    sp_helpmergesubscription                 EXECUTE          GRANT

    sp_helpntgroup                           EXECUTE          GRANT

    sp_helppublication                       EXECUTE          GRANT

    sp_helppullsubscription                  EXECUTE          GRANT

    sp_helpremotelogin                       EXECUTE          GRANT

    sp_helpreplfailovermode                  EXECUTE          GRANT

    sp_helpreplicationdb                     EXECUTE          GRANT

    sp_helpreplicationdboption               EXECUTE          GRANT

    sp_helpreplicationoption                 EXECUTE          GRANT

    sp_helprole                              EXECUTE          GRANT

    sp_helprolemember                        EXECUTE          GRANT

    sp_helprotect                            EXECUTE          GRANT

    sp_helpserver                            EXECUTE          GRANT

    sp_helpsort                              EXECUTE          GRANT

    sp_helpsql                               EXECUTE          GRANT

    sp_helpsrvrole                           EXECUTE          GRANT

    sp_helpsrvrolemember                     EXECUTE          GRANT

    sp_helpstats                             EXECUTE          GRANT

    sp_helpsubscriberinfo                    EXECUTE          GRANT

    sp_helpsubscription                      EXECUTE          GRANT

    sp_helpsubscription_properties           EXECUTE          GRANT

    sp_helptext                              EXECUTE          GRANT

    sp_helptrigger                           EXECUTE          GRANT

    sp_helpuser                              EXECUTE          GRANT

    sp_indexes                               EXECUTE          GRANT

    sp_indexes_rowset                        EXECUTE          GRANT

    sp_indexoption                           EXECUTE          GRANT

    sp_invalidate_textptr                    EXECUTE          GRANT

    sp_IsMBCSLeadByte                        EXECUTE          GRANT

    sp_ivindexhasnullcols                    EXECUTE          GRANT

    sp_link_publication                      EXECUTE          GRANT

    sp_linkedservers                         EXECUTE          GRANT

    sp_linkedservers_rowset                  EXECUTE          GRANT

    sp_lock                                  EXECUTE          GRANT

    sp_marksubscriptionvalidation            EXECUTE          GRANT

    sp_mergearticlecolumn                    EXECUTE          GRANT

    sp_mergecleanupmetadata                  EXECUTE          GRANT

    sp_mergecompletecleanup                  EXECUTE          GRANT

    sp_mergedummyupdate                      EXECUTE          GRANT

    sp_mergemetadataretentioncleanup         EXECUTE          GRANT

    sp_mergepreparecleanup                   EXECUTE          GRANT

    sp_mergesubscription_cleanup             EXECUTE          GRANT

    sp_MSacquireHeadofQueueLock              EXECUTE          GRANT

    sp_MSacquireserverresourcefordynamicsnap EXECUTE          GRANT

    sp_MSacquireSlotLock                     EXECUTE          GRANT

    sp_MSactivate_auto_sub                   EXECUTE          GRANT

    sp_MSadd_compensating_cmd                EXECUTE          GRANT

    sp_MSadd_mergereplcommand                EXECUTE          GRANT

    sp_MSaddanonymousreplica                 EXECUTE          GRANT

    sp_MSaddguidcolumn                       EXECUTE          GRANT

    sp_MSaddguidindex                        EXECUTE          GRANT

    sp_MSaddinitialarticle                   EXECUTE          GRANT

    sp_MSaddinitialpublication               EXECUTE          GRANT

    sp_MSaddinitialschemaarticle             EXECUTE          GRANT

    sp_MSaddinitialsubscription              EXECUTE          GRANT

    sp_MSaddmergedynamicsnapshotjob          EXECUTE          GRANT

    sp_MSaddmergetriggers                    EXECUTE          GRANT

    sp_MSaddpubtocontents                    EXECUTE          GRANT

    sp_MSalreadyhavegeneration               EXECUTE          GRANT

    sp_MSarticlecleanup                      EXECUTE          GRANT

    sp_MSchange_mergearticle                 EXECUTE          GRANT

    sp_MSchange_priority                     EXECUTE          GRANT

    sp_MSchange_retention                    EXECUTE          GRANT

    sp_MSchangeobjectowner                   EXECUTE          GRANT

    sp_MScheck_agent_instance                EXECUTE          GRANT

    sp_MScheck_subscription                  EXECUTE          GRANT

    sp_MScheckexistsgeneration               EXECUTE          GRANT

    sp_MScheckidentityrange                  EXECUTE          GRANT

    sp_MScheckmetadatamatch                  EXECUTE          GRANT

    sp_MSchecksnapshotstatus                 EXECUTE          GRANT

    sp_MSchunkgeneration                     EXECUTE          GRANT

    sp_MScleanup_metadata                    EXECUTE          GRANT

    sp_MScleanup_publication_ADinfo          EXECUTE          GRANT

    sp_MScleanupdynsnapshotvws               EXECUTE          GRANT

    sp_MSCleanupForPullReinit                EXECUTE          GRANT

    sp_MScleanuptask                         EXECUTE          GRANT

    sp_MScomputearticlescreationorder        EXECUTE          GRANT

    sp_MScomputemergearticlescreationorder   EXECUTE          GRANT

    sp_MScomputemergeunresolvedrefs          EXECUTE          GRANT

    sp_MScomputeunresolvedrefs               EXECUTE          GRANT

    sp_MScreate_sub_tables                   EXECUTE          GRANT

    sp_MScreateglobalreplica                 EXECUTE          GRANT

    sp_MScreateretry                         EXECUTE          GRANT

    sp_MSdbuseraccess                        EXECUTE          GRANT

    sp_MSdbuserpriv                          EXECUTE          GRANT

    sp_MSdefer_check                         EXECUTE          GRANT

    sp_MSdeletepushagent                     EXECUTE          GRANT

    sp_MSdeleteretry                         EXECUTE          GRANT

    sp_MSdeletetranconflictrow               EXECUTE          GRANT

    sp_MSdelgenzero                          EXECUTE          GRANT

    sp_MSdelrow                              EXECUTE          GRANT

    sp_MSdelsubrows                          EXECUTE          GRANT

    sp_MSdelsubrowsbatch                     EXECUTE          GRANT

    sp_MSdependencies                        EXECUTE          GRANT

    sp_MSdroparticleconstraints              EXECUTE          GRANT

    sp_MSdroparticletombstones               EXECUTE          GRANT

    sp_MSdropconstraints                     EXECUTE          GRANT

    sp_MSdropdynsnapshotvws                  EXECUTE          GRANT

    sp_MSdropfkreferencingarticle            EXECUTE          GRANT

    sp_MSdropmergedynamicsnapshotjob         EXECUTE          GRANT

    sp_MSdropretry                           EXECUTE          GRANT

    sp_MSdroptemptable                       EXECUTE          GRANT

    sp_MSdummyupdate                         EXECUTE          GRANT

    sp_MSenum_replication_agents             EXECUTE          GRANT

    sp_MSenum_replication_job                EXECUTE          GRANT

    sp_MSenum_replqueues                     EXECUTE          GRANT

    sp_MSenum_replsqlqueues                  EXECUTE          GRANT

    sp_MSenumallpublications                 EXECUTE          GRANT

    sp_MSenumallsubscriptions                EXECUTE          GRANT

    sp_MSenumchanges                         EXECUTE          GRANT

    sp_MSenumcolumns                         EXECUTE          GRANT

    sp_MSenumdeletesmetadata                 EXECUTE          GRANT

    sp_MSenumgenerations                     EXECUTE          GRANT

    sp_MSenumpartialchanges                  EXECUTE          GRANT

    sp_MSenumpartialdeletes                  EXECUTE          GRANT

    sp_MSenumpubreferences                   EXECUTE          GRANT

    sp_MSenumreplicas                        EXECUTE          GRANT

    sp_MSenumretries                         EXECUTE          GRANT

    sp_MSenumschemachange                    EXECUTE          GRANT

    sp_MSenumsubscriptions                   EXECUTE          GRANT

    sp_MSenumthirdpartypublicationvendorname EXECUTE          GRANT

    sp_MSestimatemergesnapshotworkload       EXECUTE          GRANT

    sp_MSestimatesnapshotworkload            EXECUTE          GRANT

    sp_MSevalsubscriberinfo                  EXECUTE          GRANT

    sp_MSexternalfkreferences                EXECUTE          GRANT

    sp_MSfetchidentityrange                  EXECUTE          GRANT

    sp_MSfillupmissingcols                   EXECUTE          GRANT

    sp_MSfilterclause                        EXECUTE          GRANT

    sp_MSfixlineageversions                  EXECUTE          GRANT

    sp_MSfixupbeforeimagetables              EXECUTE          GRANT

    sp_MSforeach_worker                      EXECUTE          GRANT

    sp_MSforeachdb                           EXECUTE          GRANT

    sp_MSforeachtable                        EXECUTE          GRANT

    sp_MSgenreplnickname                     EXECUTE          GRANT

    sp_MSget_agent_names                     EXECUTE          GRANT

    sp_MSget_attach_state                    EXECUTE          GRANT

    sp_MSget_current_activity                EXECUTE          GRANT

    sp_MSget_jobstate                        EXECUTE          GRANT

    sp_MSget_load_hint                       EXECUTE          GRANT

    sp_MSget_publisher_rpc                   EXECUTE          GRANT

    sp_MSget_shared_agent                    EXECUTE          GRANT

    sp_MSget_synctran_commands               EXECUTE          GRANT

    sp_MSgetalertinfo                        EXECUTE          GRANT

    sp_MSgetarticlereinitvalue               EXECUTE          GRANT

    sp_MSgetchangecount                      EXECUTE          GRANT

    sp_MSgetconflictinsertproc               EXECUTE          GRANT

    sp_MSgetconflicttablename                EXECUTE          GRANT

    sp_MSgetlastrecgen                       EXECUTE          GRANT

    sp_MSgetlastsentgen                      EXECUTE          GRANT

    sp_MSgetlastsentrecgens                  EXECUTE          GRANT

    sp_MSgetlastupdatedtime                  EXECUTE          GRANT

    sp_MSgetmakegenerationapplock            EXECUTE          GRANT

    sp_MSgetmetadatabatch                    EXECUTE          GRANT

    sp_MSgetonerow                           EXECUTE          GRANT

    sp_MSgetpubinfo                          EXECUTE          GRANT

    sp_MSgetreplicainfo                      EXECUTE          GRANT

    sp_MSgetreplnick                         EXECUTE          GRANT

    sp_MSgetrowmetadata                      EXECUTE          GRANT

    sp_MSGetServerProperties                 EXECUTE          GRANT

    sp_MSgetsubscriberinfo                   EXECUTE          GRANT

    sp_MSgettools_path                       EXECUTE          GRANT

    sp_MSgettrancftsrcrow                    EXECUTE          GRANT

    sp_MSgettranconflictrow                  EXECUTE          GRANT

    sp_MSgetversion                          EXECUTE          GRANT

    sp_MShasdbaccess                         EXECUTE          GRANT

    sp_MShelp_distdb                         EXECUTE          GRANT

    sp_MShelp_identity_property              EXECUTE          GRANT

    sp_MShelp_replication_status             EXECUTE          GRANT

    sp_MShelp_replication_table              EXECUTE          GRANT

    sp_MShelpcolumns                         EXECUTE          GRANT

    sp_MShelpconflictpublications            EXECUTE          GRANT

    sp_MShelpcreatebeforetable               EXECUTE          GRANT

    sp_MShelpdestowner                       EXECUTE          GRANT

    sp_MShelpfulltextindex                   EXECUTE          GRANT

    sp_MShelpfulltextscript                  EXECUTE          GRANT

    sp_MShelpindex                           EXECUTE          GRANT

    sp_MShelpmergearticles                   EXECUTE          GRANT

    sp_MShelpmergeconflictcounts             EXECUTE          GRANT

    sp_MShelpmergeconflictpublications       EXECUTE          GRANT

    sp_MShelpmergedynamicsnapshotjob         EXECUTE          GRANT

    sp_MShelpmergeidentity                   EXECUTE          GRANT

    sp_MShelpmergeschemaarticles             EXECUTE          GRANT

    sp_MShelpobjectpublications              EXECUTE          GRANT

    sp_MShelptranconflictcounts              EXECUTE          GRANT

    sp_MShelptranconflictpublications        EXECUTE          GRANT

    sp_MShelptype                            EXECUTE          GRANT

    sp_MSindexspace                          EXECUTE          GRANT

    sp_MSinit_subscription_agent             EXECUTE          GRANT

    sp_MSinitdynamicsubscriber               EXECUTE          GRANT

    sp_MSinsertdeleteconflict                EXECUTE          GRANT

    sp_MSinserterrorlineage                  EXECUTE          GRANT

    sp_MSinsertgenerationschemachanges       EXECUTE          GRANT

    sp_MSinsertgenhistory                    EXECUTE          GRANT

    sp_MSinsertschemachange                  EXECUTE          GRANT

    sp_MSkilldb                              EXECUTE          GRANT

    sp_MSlocktable                           EXECUTE          GRANT

    sp_MSloginmappings                       EXECUTE          GRANT

    sp_MSmakearticleprocs                    EXECUTE          GRANT

    sp_MSmakeconflictinsertproc              EXECUTE          GRANT

    sp_MSmakectsview                         EXECUTE          GRANT

    sp_MSmakedynsnapshotvws                  EXECUTE          GRANT

    sp_MSmakeexpandproc                      EXECUTE          GRANT

    sp_MSmakegeneration                      EXECUTE          GRANT

    sp_MSmakeinsertproc                      EXECUTE          GRANT

    sp_MSmakeselectproc                      EXECUTE          GRANT

    sp_MSmakesystableviews                   EXECUTE          GRANT

    sp_MSmakeupdateproc                      EXECUTE          GRANT

    sp_MSmatchkey                            EXECUTE          GRANT

    sp_MSmergesubscribedb                    EXECUTE          GRANT

    sp_MSmergeupdatelastsyncinfo             EXECUTE          GRANT

    sp_MSobjectprivs                         EXECUTE          GRANT

    sp_MSobjsearch                           EXECUTE          GRANT

    sp_MSpost_auto_proc                      EXECUTE          GRANT

    sp_MSprep_exclusive                      EXECUTE          GRANT

    sp_MSprepare_mergearticle                EXECUTE          GRANT

    sp_MSpreparecleanup                      EXECUTE          GRANT

    sp_MSproxiedmetadata                     EXECUTE          GRANT

    sp_MSpub_adjust_identity                 EXECUTE          GRANT

    sp_MSpublicationcleanup                  EXECUTE          GRANT

    sp_MSpublicationview                     EXECUTE          GRANT

    sp_MSquerysubtype                        EXECUTE          GRANT

    sp_MSquiesceforcleanup                   EXECUTE          GRANT

    sp_MSreenable_check                      EXECUTE          GRANT

    sp_MSreinit_hub                          EXECUTE          GRANT

    sp_MSreleasemakegenerationapplock        EXECUTE          GRANT

    sp_MSreleaseSlotLock                     EXECUTE          GRANT

    sp_MSremove_mergereplcommand             EXECUTE          GRANT

    sp_MSrepl_gettype_mappings               EXECUTE          GRANT

    sp_MSrepl_isdbowner                      EXECUTE          GRANT

    sp_MSrepl_linkedservers_rowset           EXECUTE          GRANT

    sp_MSrepl_PAL_rolecheck                  EXECUTE          GRANT

    sp_MSrepl_schema                         EXECUTE          GRANT

    sp_MSreplcheck_connection                EXECUTE          GRANT

    sp_MSreplcheck_permission                EXECUTE          GRANT

    sp_MSreplcheck_pull                      EXECUTE          GRANT

    sp_MSreplcheck_qv                        EXECUTE          GRANT

    sp_MSreplcheck_subscribe                 EXECUTE          GRANT

    sp_MSreplraiserror                       EXECUTE          GRANT

    sp_MSreplupdateschema                    EXECUTE          GRANT

    sp_MSreset_attach_state                  EXECUTE          GRANT

    sp_MSreset_queued_reinit                 EXECUTE          GRANT

    sp_MSreset_synctran_bit                  EXECUTE          GRANT

    sp_MSretrieve_publication_attributes     EXECUTE          GRANT

    sp_MSscript_article_view                 EXECUTE          GRANT

    sp_MSscript_dri                          EXECUTE          GRANT

    sp_MSscript_pub_upd_trig                 EXECUTE          GRANT

    sp_MSscript_sync_del_proc                EXECUTE          GRANT

    sp_MSscript_sync_del_trig                EXECUTE          GRANT

    sp_MSscript_sync_ins_proc                EXECUTE          GRANT

    sp_MSscript_sync_ins_trig                EXECUTE          GRANT

    sp_MSscript_sync_upd_proc                EXECUTE          GRANT

    sp_MSscript_sync_upd_trig                EXECUTE          GRANT

    sp_MSscriptdatabase                      EXECUTE          GRANT

    sp_MSscriptdb_worker                     EXECUTE          GRANT

    sp_MSscriptmvastable                     EXECUTE          GRANT

    sp_MSscriptmvastableidx                  EXECUTE          GRANT

    sp_MSscriptmvastablenci                  EXECUTE          GRANT

    sp_MSscriptmvastablepkc                  EXECUTE          GRANT

    sp_MSscriptviewproc                      EXECUTE          GRANT

    sp_MSsendtosqlqueue                      EXECUTE          GRANT

    sp_MSset_current_activity                EXECUTE          GRANT

    sp_MSset_sub_guid                        EXECUTE          GRANT

    sp_MSset_subscription_properties         EXECUTE          GRANT

    sp_MSsetaccesslist                       EXECUTE          GRANT

    sp_MSsetartprocs                         EXECUTE          GRANT

    sp_MSsetbit                              EXECUTE          GRANT

    sp_MSsetconflictscript                   EXECUTE          GRANT

    sp_MSsetconflicttable                    EXECUTE          GRANT

    sp_MSsetcontext_replagent                EXECUTE          GRANT

    sp_MSsetlastrecgen                       EXECUTE          GRANT

    sp_MSsetlastsentgen                      EXECUTE          GRANT

    sp_MSsetreplicainfo                      EXECUTE          GRANT

    sp_MSsetreplicastatus                    EXECUTE          GRANT

    sp_MSsetrowmetadata                      EXECUTE          GRANT

    sp_MSsetsubscriberinfo                   EXECUTE          GRANT

    sp_MSsettopology                         EXECUTE          GRANT

    sp_MSsetupbelongs                        EXECUTE          GRANT

    sp_MSSharedFixedDisk                     EXECUTE          GRANT

    sp_MSSQLDMO70_version                    EXECUTE          GRANT

    sp_MSSQLDMO80_version                    EXECUTE          GRANT

    sp_MSSQLOLE_version                      EXECUTE          GRANT

    sp_MSSQLOLE65_version                    EXECUTE          GRANT

    sp_MSsub_check_identity                  EXECUTE          GRANT

    sp_MSsub_set_identity                    EXECUTE          GRANT

    sp_MSsubscriptionvalidated               EXECUTE          GRANT

    sp_MStablechecks                         EXECUTE          GRANT

    sp_MStablekeys                           EXECUTE          GRANT

    sp_MStablerefs                           EXECUTE          GRANT

    sp_MStablespace                          EXECUTE          GRANT

    sp_MStestbit                             EXECUTE          GRANT

    sp_MSuniquename                          EXECUTE          GRANT

    sp_MSunmarkifneeded                      EXECUTE          GRANT

    sp_MSunmarkreplinfo                      EXECUTE          GRANT

    sp_MSunmarkschemaobject                  EXECUTE          GRANT

    sp_MSupdategenhistory                    EXECUTE          GRANT

    sp_MSupdatelastsyncinfo                  EXECUTE          GRANT

    sp_MSupdatesysmergearticles              EXECUTE          GRANT

    sp_msupg_createcatalogcomputedcols       EXECUTE          DENY

    sp_msupg_dosystabcatalogupgrades         EXECUTE          DENY

    sp_msupg_dropcatalogcomputedcols         EXECUTE          DENY

    sp_msupg_recreatecatalogfaketables       EXECUTE          DENY

    sp_msupg_recreatesystemviews             EXECUTE          DENY

    sp_msupg_removesystemcomputedcolumns     EXECUTE          DENY

    sp_msupg_upgradecatalog                  EXECUTE          GRANT

    sp_MSuplineageversion                    EXECUTE          GRANT

    sp_MSvalidate_subscription               EXECUTE          GRANT

    sp_MSvalidatearticle                     EXECUTE          GRANT

    sp_objectfilegroup                       EXECUTE          GRANT

    sp_oledb_column_constraints              EXECUTE          GRANT

    sp_oledb_database                        EXECUTE          GRANT

    sp_oledb_defdb                           EXECUTE          GRANT

    sp_oledb_deflang                         EXECUTE          GRANT

    sp_oledb_indexinfo                       EXECUTE          GRANT

    sp_oledb_language                        EXECUTE          GRANT

    sp_oledb_ro_usrname                      EXECUTE          GRANT

    sp_password                              EXECUTE          GRANT

    sp_pkeys                                 EXECUTE          GRANT

    sp_prepare                               EXECUTE          GRANT

    sp_prepexec                              EXECUTE          GRANT

    sp_prepexecrpc                           EXECUTE          GRANT

    sp_primary_keys_rowset                   EXECUTE          GRANT

    sp_primarykeys                           EXECUTE          GRANT

    sp_procedure_params_rowset               EXECUTE          GRANT

    sp_procedures_rowset                     EXECUTE          GRANT

    sp_procoption                            EXECUTE          GRANT

    sp_prop_oledb_provider                   EXECUTE          GRANT

    sp_provider_types_rowset                 EXECUTE          GRANT

    sp_publication_validation                EXECUTE          GRANT

    sp_readerrorlog                          EXECUTE          GRANT

    sp_readwebtask                           EXECUTE          GRANT

    sp_recompile                             EXECUTE          GRANT

    sp_refreshsubscriptions                  EXECUTE          GRANT

    sp_refreshview                           EXECUTE          GRANT

    sp_reinitmergepullsubscription           EXECUTE          GRANT

    sp_reinitmergesubscription               EXECUTE          GRANT

    sp_reinitpullsubscription                EXECUTE          GRANT

    sp_reinitsubscription                    EXECUTE          GRANT

    sp_releaseapplock                        EXECUTE          GRANT

    sp_releaseschemalock                     EXECUTE          GRANT

    sp_remoteoption                          EXECUTE          GRANT

    sp_rename                                EXECUTE          GRANT

    sp_renamedb                              EXECUTE          GRANT

    sp_repladdcolumn                         EXECUTE          GRANT

    sp_replcmds                              EXECUTE          GRANT

    sp_replcounters                          EXECUTE          GRANT

    sp_repldeletequeuedtran                  EXECUTE          GRANT

    sp_repldone                              EXECUTE          GRANT

    sp_repldropcolumn                        EXECUTE          GRANT

    sp_replica                               EXECUTE          GRANT

    sp_replicationoption                     EXECUTE          GRANT

    sp_replincrementlsn                      EXECUTE          GRANT

    sp_replpostschema                        EXECUTE          GRANT

    sp_replpostsyncstatus                    EXECUTE          GRANT

    sp_replproberemoteserver                 EXECUTE          GRANT

    sp_replrestart                           EXECUTE          GRANT

    sp_replsendtoqueue                       EXECUTE          GRANT

    sp_replsetoriginator                     EXECUTE          GRANT

    sp_replsetoriginator_pal                 EXECUTE          GRANT

    sp_replsetsyncstatus                     EXECUTE          GRANT

    sp_replsqlqgetrows                       EXECUTE          GRANT

    sp_repltrans                             EXECUTE          GRANT

    sp_replwritetovarbin                     EXECUTE          GRANT

    sp_reset_connection                      EXECUTE          GRANT

    sp_resyncexecute                         EXECUTE          GRANT

    sp_resyncexecutesql                      EXECUTE          GRANT

    sp_resyncmergesubscription               EXECUTE          GRANT

    sp_resyncprepare                         EXECUTE          GRANT

    sp_resyncuniquetable                     EXECUTE          GRANT

    sp_revoke_publication_access             EXECUTE          GRANT

    sp_revokedbaccess                        EXECUTE          GRANT

    sp_revokelogin                           EXECUTE          GRANT

    sp_runwebtask                            EXECUTE          GRANT

    sp_schemata_rowset                       EXECUTE          GRANT

    sp_script_reconciliation_delproc         EXECUTE          GRANT

    sp_script_reconciliation_insproc         EXECUTE          GRANT

    sp_script_reconciliation_xdelproc        EXECUTE          GRANT

    sp_script_synctran_commands              EXECUTE          GRANT

    sp_scriptdelproc                         EXECUTE          GRANT

    sp_scriptdynamicupdproc                  EXECUTE          GRANT

    sp_scriptinsproc                         EXECUTE          GRANT

    sp_scriptmappedupdproc                   EXECUTE          GRANT

    sp_scriptpublicationcustomprocs          EXECUTE          GRANT

    sp_scriptsubconflicttable                EXECUTE          GRANT

    sp_scriptupdproc                         EXECUTE          GRANT

    sp_scriptxdelproc                        EXECUTE          GRANT

    sp_scriptxupdproc                        EXECUTE          GRANT

    sp_server_info                           EXECUTE          GRANT

    sp_serveroption                          EXECUTE          GRANT

    sp_setapprole                            EXECUTE          GRANT

    sp_setnetname                            EXECUTE          GRANT

    sp_setreplfailovermode                   EXECUTE          GRANT

    sp_settriggerorder                       EXECUTE          GRANT

    sp_setuserbylogin                        EXECUTE          GRANT

    sp_showrowreplicainfo                    EXECUTE          GRANT

    sp_spaceused                             EXECUTE          GRANT

    sp_special_columns                       EXECUTE          GRANT

    sp_sproc_columns                         EXECUTE          GRANT

    sp_sqlexec                               EXECUTE          GRANT

    sp_srvrolepermission                     EXECUTE          GRANT

    sp_statistics                            EXECUTE          GRANT

    sp_statistics_rowset                     EXECUTE          GRANT

    sp_stored_procedures                     EXECUTE          GRANT

    sp_subscribe                             EXECUTE          GRANT

    sp_table_constraints_rowset              EXECUTE          GRANT

    sp_table_privileges                      EXECUTE          GRANT

    sp_table_privileges_ex                   EXECUTE          GRANT

    sp_table_privileges_rowset               EXECUTE          GRANT

    sp_table_statistics_rowset               EXECUTE          GRANT

    sp_table_validation                      EXECUTE          GRANT

    sp_tablecollations                       EXECUTE          GRANT

    sp_tableoption                           EXECUTE          GRANT

    sp_tables                                EXECUTE          GRANT

    sp_tables_ex                             EXECUTE          GRANT

    sp_tables_info_rowset                    EXECUTE          GRANT

    sp_tables_info_rowset_64                 EXECUTE          GRANT

    sp_tables_rowset                         EXECUTE          GRANT

    sp_tableswc                              EXECUTE          GRANT

    sp_tempdbspace                           EXECUTE          GRANT

    sp_unbindefault                          EXECUTE          GRANT

    sp_unbindrule                            EXECUTE          GRANT

    sp_unprepare                             EXECUTE          GRANT

    sp_unsubscribe                           EXECUTE          GRANT

    sp_updateextendedproperty                EXECUTE          GRANT

    sp_updatestats                           EXECUTE          GRANT

    sp_user_counter1                         EXECUTE          GRANT

    sp_user_counter10                        EXECUTE          GRANT

    sp_user_counter2                         EXECUTE          GRANT

    sp_user_counter3                         EXECUTE          GRANT

    sp_user_counter4                         EXECUTE          GRANT

    sp_user_counter5                         EXECUTE          GRANT

    sp_user_counter6                         EXECUTE          GRANT

    sp_user_counter7                         EXECUTE          GRANT

    sp_user_counter8                         EXECUTE          GRANT

    sp_user_counter9                         EXECUTE          GRANT

    sp_validatelogins                        EXECUTE          GRANT

    sp_validatemergepublication              EXECUTE          GRANT

    sp_validatemergepullsubscription         EXECUTE          GRANT

    sp_validatemergesubscription             EXECUTE          GRANT

    sp_validlang                             EXECUTE          GRANT

    sp_validname                             EXECUTE          GRANT

    sp_who                                   EXECUTE          GRANT

    sp_who2                                  EXECUTE          GRANT

    sp_xml_preparedocument                   EXECUTE          GRANT

    sp_xml_removedocument                    EXECUTE          GRANT

    spt_datatype_info                        SELECT           GRANT        

    spt_datatype_info_ext                    SELECT           GRANT        

    spt_fallback_db                          SELECT           GRANT        

    spt_fallback_dev                         SELECT           GRANT        

    spt_fallback_usg                         SELECT           GRANT        

    spt_monitor                              SELECT           GRANT        

    spt_provider_types                       SELECT           GRANT        

    spt_server_info                          SELECT           GRANT        

    spt_values                               SELECT           GRANT        

    syscharsets                              SELECT           GRANT        

    syscolumns                               SELECT           GRANT        

    syscomments                              SELECT           GRANT        

    sysconfigures                            SELECT           GRANT        

    sysconstraints                           SELECT           GRANT        

    syscurconfigs                            SELECT           GRANT        

    sysdatabases                             SELECT           GRANT        

    sysdepends                               SELECT           GRANT        

    sysdevices                               SELECT           GRANT        

    sysfilegroups                            SELECT           GRANT        

    sysfiles                                 SELECT           GRANT        

    sysforeignkeys                           SELECT           GRANT        

    sysfulltextcatalogs                      SELECT           GRANT        

    sysindexes                               SELECT           GRANT        

    sysindexkeys                             SELECT           GRANT        

    syslanguages                             SELECT           GRANT        

    syslockinfo                              SELECT           GRANT        

    syslocks                                 SELECT           GRANT        

    syslogins                                SELECT           DENY          password (note this is a column deny only no other permissions for view syslogins)

    sysmembers                               SELECT           GRANT        

    sysmessages                              SELECT           GRANT        

    sysobjects                               SELECT           GRANT        

    sysoledbusers                            SELECT           DENY          mtpassword (note this is a deny only not other permissions for view sysoledbusers)

    sysopentapes                             SELECT           GRANT        

    syspermissions                           SELECT           GRANT        

    sysprocesses                             SELECT           GRANT        

    sysprotects                              SELECT           GRANT        

    sysreferences                            SELECT           GRANT        

    sysremotelogins                          SELECT           GRANT        

    syssegments                              SELECT           GRANT        

    sysservers                               SELECT           GRANT         Select granted for entire table.

    sysservers                               SELECT           DENY          provider string column is denied.

    systypes                                 SELECT           GRANT        

    sysusers                                 SELECT           GRANT        

    TABLE_CONSTRAINTS                        SELECT           GRANT        

    TABLE_PRIVILEGES                         SELECT           GRANT        

    TABLES                                   SELECT           GRANT        

    VIEW_COLUMN_USAGE                        SELECT           GRANT        

    VIEW_TABLE_USAGE                         SELECT           GRANT        

    VIEWS                                    SELECT           GRANT        

    xp_dirtree                               EXECUTE          GRANT

    xp_enum_activescriptengines              EXECUTE          GRANT

    xp_fileexist                             EXECUTE          GRANT

    xp_fixeddrives                           EXECUTE          GRANT

    xp_GetAdminGroupName                     EXECUTE          GRANT

    xp_getfiledetails                        EXECUTE          GRANT

    xp_getnetname                            EXECUTE          GRANT

    xp_grantlogin                            EXECUTE          GRANT

    xp_instance_regread                      EXECUTE          GRANT

    xp_IsNTAdmin                             EXECUTE          GRANT

    xp_mapdown_bitmap                        EXECUTE          GRANT

    xp_mergexpusage                          EXECUTE          GRANT

    xp_MSADEnabled                           EXECUTE          GRANT

    xp_MSFullText                            EXECUTE          GRANT

    xp_MSLocalSystem                         EXECUTE          GRANT

    xp_MSnt2000                              EXECUTE          GRANT

    xp_MSplatform                            EXECUTE          GRANT

    xp_msver                                 EXECUTE          GRANT

    xp_ntsec_enumdomains                     EXECUTE          GRANT

    xp_qv                                    EXECUTE          GRANT

    xp_regread                               EXECUTE          GRANT

    xp_revokelogin                           EXECUTE          GRANT

    xp_showcolv                              EXECUTE          GRANT

    xp_showlineage                           EXECUTE          GRANT

    xp_sprintf                               EXECUTE          GRANT

    xp_sscanf                                EXECUTE          GRANT

    xp_unc_to_drive                          EXECUTE          GRANT

  • Thanks for that..nice little script. It seems that the public role has all the required permissions. However unless I explicitly grant them to the user, they do not have access via public....

    Hope this helps...

    Ford Fairlane
    Rock and Roll Detective

  • I am having the exact same problem but elsewhere in the Management Studio.  When in the object browser, and I try to see my jobs in SQL Agent , I was getting error unable to select from sysjobs_view unless I specifically granted select right to my user.  I think this is strange behavior because I thought everyone could select from the view.  It is in the list as stated above.  Another thing, I am supposed to be able to add the public role to a sql agent role and system would not allow me to do so.

  • I have a slightly different Public Role corruption problem. Using SQL Server Management Studio Server Roles, I opened the Public properties, and foolishly tried to add a Login object to the Securables section of the Permissions. It let me do it, but now, whenever I click on Permissions, I see a nasty critical error message: Value does not fall within the expected range. (SqlMgmt). No Permissions or Securables show. Anyone have a clue how to fix this?

  • Did anybody find the answer for this issue?

    I unchecked the "Grant" next to the "sa" under the "Permissions" for the public server role. Now everytime I click on Permissions, I get the error "Value does not fall within the expected range. (Microsoft.SqlServer.Express.SqlMgmt)" and I the endpoints don't show anymore.

    Any idea?

    Thanks,

Viewing 8 posts - 1 through 7 (of 7 total)

You must be logged in to reply to this topic. Login to reply