July 16, 2008 at 8:25 pm
I am trying to sort out the security on one of our databases (horse has bolted etc..) and have hit a problem with disable triggers...
I have created an AD group, set it up as a login and given it data_reader permissions. The group also needs update rights to some tables which I have given them. Everything looks fine except that one of our developers has used ALTER TABLE tbxxx DISABLE TRIGGER ALL and its friend ALTER TABLE tbxxx ENABLE TRIGGER ALL in one of the stored procs. When the users try to execute this proc it returns an error 'User does not have permission to perform this operation on table tbxxx'.
My question then is can you assign Alter Table permissions to a single table or is this assigned at the database level? I hope it is a table level thing but have a horrible feeling it is not...
Cheers,
Blair
July 16, 2008 at 8:39 pm
I think you need CONTROL permissions on the table (or all the tables) to do this.
I'm not sure how you can do this directly in SQL 2000. You could setup a job to read a table and then execute this as an SA level login with SQL Agent. Have the proc put a value in a table to trigger things, but it would be a every minute thing, not real time.
Viewing 2 posts - 1 through 1 (of 1 total)
You must be logged in to reply to this topic. Login to reply