Security Best Practices

• John Burchel

  Hall of Fame

  Points: 3611

  More actions

  August 18, 2006 at 5:42 am

  #62105

  Hi All,

   

  When it comes to managing security on a SQL box, in a per table situation.

  I would like to share your experiences,

  i.e do you store all tables, stored procedures users have access to in a table, and tun a cursor to loop through that table in order to grant permissions ?

  etc

  Let me know

   

  ---

  Kindest Regards,

  John Burchel (Trainee Developer)
  

• Greg Charles

  SSC-Forever

  Points: 45403

  More actions

  August 18, 2006 at 11:04 am

  #655717

  In dev and test, I tend to use the fixed database roles db_datareader & db_datawriter rather than granting permissions on tables.

  In production, all table access is through stored procedures and users are only granted execute permission to stored procedures.

  Greg

   

  Greg