OLE Automation Extended SPs - Permissions

  • From BOL

    _________________________________________

    Permissions

    Only members of the sysadmin fixed server role can execute sp_OACreate.

    __________________________________________

    In fact I create one user (dbo) for one test database and try to execute this store procedure and received “EXECUTE permission denied on object 'sp_OACreate', database 'master', owner 'dbo'.”

    After this within this user schema I create one store procedure that call the sp_OACrete and work perfectly.

    Then I went to master extend store procedures and revoke this sp to everyone (even public), but the same user still was able to execute (throw is sp) the sp_OACreate.

    So this lead me to this two question:

    How can we restrict the use of these extend store procedures?

    And what are the implications of drop theses extend store procedures?

  • You must deny the execution permission, not revoking

  • That's what I have done.

    Sorry about the mistake, one should read deny instead of revoke in my previous post!!!

  • Wich permissions that the user you created has? Is a member of the sysadmin role?

  • No, he isn't sysadmin. He is dbowner of test database. He don't have any permission on master.

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply