SCHEMA rights

  • Hello all,

    If a user has no SELECT rights on a schema (it's denied) he can't perform a SELECT statement on a table belonging to that particular schema. Oké, but how is it possible that that same user can perform an export task on a table belonging to that schema? :unsure:

    Any ideas?

    Thanks

  • You mean with the Export wizard?

    Maybe another account is used to run the SSIS package behind the scenes?

    Need an answer? No, you need a question
    My blog at https://sqlkover.com.
    MCSE Business Intelligence - Microsoft Data Platform MVP

  • Yes, inderdeed the export wizard. Is it possible that that wizard uses another user than the user that has logged in?

  • jos.haemers (9/26/2013)


    Yes, inderdeed the export wizard. Is it possible that that wizard uses another user than the user that has logged in?

    According to the documentation, the user should have SELECT permissions.

    SQL Server Import and Export Wizard

    Strange issue...

    Need an answer? No, you need a question
    My blog at https://sqlkover.com.
    MCSE Business Intelligence - Microsoft Data Platform MVP

  • Hi

    If a user has no permissions on the tables, he cannot even see them in the wizard.

    No way he can export data.

    I cannot imagine a bug this big.

    Remember, when running the export wizard, one is asked for (new) credentials.

    Check again which user was really active when the export was done, and the permissions.

    SA or dbo would not get denied anything, but I suspect you'd excluded that.

    Andreas

    ---------------------------------------------------
    MVP SQL Server
    Microsoft Certified Master SQL Server 2008
    Microsoft Certified Solutions Master Data Platform, SQL Server 2012
    www.insidesql.org/blogs/andreaswolter
    www.andreas-wolter.com

  • Hi Andreas, you're right. We weren't aware of the fact that we used the export wizard with our own credentials.

    Thanks!!

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply