January 28, 2014 at 7:23 pm
I want to prove to my colleagues that with SQLAgentReaderRole, a user can elevate their rights. I want to do this quickly before we open the door to developers and then have a hard time closing it. Anyone have any ideas? This is proof of concept people. Not a legitimate hack.
Jared
CE - Microsoft
January 29, 2014 at 1:27 pm
I guess it is not that bad a role to grant.
Jared
CE - Microsoft
January 29, 2014 at 9:27 pm
I dint get your question clearly, what do you think SQLAgentReaderRole can do to the users.
Regards
Durai Nagarajan
January 29, 2014 at 9:30 pm
if you are slightly unhappy with changing user owned jobs and schedules , change the same to ta sysadmin user and give permission.
Regards
Durai Nagarajan
January 29, 2014 at 9:50 pm
durai nagarajan (1/29/2014)
I dint get your question clearly, what do you think SQLAgentReaderRole can do to the users.
The role allows users to create jobs;I.e. not just a reader role.
Jared
CE - Microsoft
January 31, 2014 at 12:09 am
yes i understand, how about a self made report with history details. i dont tink any such reader role available by default.
Regards
Durai Nagarajan
January 31, 2014 at 3:59 am
the reader role allows multi server job access over the user role, do they need this?
The users will only be able to edit jobs\schedules that they own, what is it you're concerned about?
-----------------------------------------------------------------------------------------------------------
"Ya can't make an omelette without breaking just a few eggs" 😉
Viewing 7 posts - 1 through 6 (of 6 total)
You must be logged in to reply to this topic. Login to reply