May 24, 2016 at 10:06 am
Is it possible to give EXECUTE Permissions with out Write PERMISSIONS?
I am in a dispute with my SQL Provider and they claim this is not possible. I find it hard to believe a User group could not be created with such
abilities?
May 24, 2016 at 10:53 am
it is possible to give execute permissions without write permissions. But If the stored procedure includes insert\update statements, the user can insert\update the table by calling the stored procedure.
Even if you give db_denydatawriter role to the user, the user can insert\update the table by calling the stored procedure if he is having execute permission on that Stored procedure.
May 24, 2016 at 11:12 am
eldosepd (5/24/2016)
it is possible to give execute permissions without write permissions. But If the stored procedure includes insert\update statements, the user can insert\update the table by calling the stored procedure.Even if you give db_denydatawriter role to the user, the user can insert\update the table by calling the stored procedure if he is having execute permission on that Stored procedure.
+1
True. Although the owners are for the objects are different it still may need explicit write permission for the underlying objects
You can request execute permission for just the read only SPs. Most databases ideally should follow some naming conventions to quickly identify those.
In my place they all start with a 'Get'
May 24, 2016 at 11:24 am
Perhaps you want to explain what you want to do, or not want to happen. You can do this, but as noted above, this may not be what you expect. Or it may be.
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply