Re: Execute DTS Package from non-privileged VB Client

In message <1114653004.772489.161780@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>, paul <dstickrod@xxxxxxxxx> writes 
Is there a way to execute a DTS package from a VB application without
the user having sysadmin privileges?  Is there a grant execute command
or other means?  We have a VB application that will be used by several
lower privileged customers.  We don't want clear-text passwords in any
code or ini file.

Thanks


There is no role required to execute a package, but when called from VB the package will execute on the users machine under the users security context, so they will need rights perform the actions inside the package. Using SQL security may abstract them from this somewhat, but any files for example will need to be available to them.

They may also need the public role in msdb, which all users get by default, to load the package if stored in SQL Server.

It may be better to devise an alternative process which means the job is executed on the server, which hopefully means another more privileged security context Perhaps it can be scheduled?

--
Darren Green (SQL Server MVP)
DTS - http://www.sqldts.com

PASS - the definitive, global community for SQL Server professionals
http://www.sqlpass.org

.

Relevant Pages

  • RE: exec sp_help_job user account rights
    ... Execute permissions default to the public role in the msdb database. ... who can execute this procedure and is a member of the sysadmin fixed role can ... the SQL Server service is running. ... impersonation and sp_help_job is always executed under the security context ...
    (microsoft.public.sqlserver.security)
  • Re: Msg Box and DTSRun
    ... runs on the machine which you execute it from. ... server you must executed it on the server, such as through a SQL Server ... It also runs under the security context of the user who calls ... the package, so from your desktop using Enterprise Manager or DTSRUN, ...
    (microsoft.public.sqlserver.dts)
  • Re: Execute Persmission denied on object sp_OACreate
    ... > SQL Server is creating a job behind the scenes. ... > permissions. ... > SA account password and gaining access to the database. ... >>> How can get a user permissions to execute these stored procedures ...
    (microsoft.public.sqlserver.security)
  • RE: exec sp_help_job user account rights
    ... wrapper in which u can call original stored procedure sp_help_job using “WITH ... EXECUTE AS “ clause and then give execute permission of external stored ... Database Administrator, SQL Server 2005 ... the sysadmin fixed role can use sp_help_job to view only the jobs he/she owns. ...
    (microsoft.public.sqlserver.security)
  • [NT] SQL Server 2000 Buffer Overflows and SQL Injection Vulnerabilities
    ... allow maintenance and other operations to be performed on a SQL Server, ... fixed database role can run this command. ... Buffer Overrun Vulnerability in Database Consistency Checkers: ... privileges, and only should be granted to trusted users. ...
    (Securiteam)