October 10, 2005 at 10:51 am
Hi,
Wonder if you could help understand this:
say if I don't have permission to a table (mary.table1), but I have a permission to execute a stored procedure (say sp_gettable1). The stored procedure has a line:
select * from mary.table1
It seems to me that I could access to the table without any problem. I would think I should have got an error. Thanks.
Chris
October 10, 2005 at 11:05 am
The table is the lowest level. To avoind granting access directly thru a table permissions can be granted to stored procedures which can limit the amount of data viewed.
Check it out in books online.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/architec/8_ar_da_2s4z.asp
This is all described when you talk about ownership chains
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adminsql/ad_security_4iyb.asp
Viewing 2 posts - 1 through 1 (of 1 total)
You must be logged in to reply to this topic. Login to reply