I have a new DB on an existing server and cannot figure out why the users are able to create their own stored procedures!
The users are not members of any server roles, and the only database roles they appear in is the public role. Apart from that they have select/insert etc permissions on varying numbers of tables/views and are able to create SP's.
The users are not granted the Create SP permission on the database level, although it has not been denied either..... Any ideas??