Re: Stored procedure to drop and create table for end user

From: Tom Moreau (tom_at_dont.spam.me.cips.ca)
Date: 06/09/04


Date: Wed, 9 Jun 2004 15:41:00 -0400

By default, anyone can create a temp table, as long as its name begins with
# (local) or ## (global). Could you please post the code that's giving you
trouble?

-- 
Tom
---------------------------------------------------------------
Thomas A. Moreau, BSc, PhD, MCSE, MCDBA
SQL Server MVP
Columnist, SQL Server Professional
Toronto, ON Canada
www.pinnaclepublishing.com/sql
"Brian Henry" <brianiupmsdn@newsgroups.nospam> wrote in message
news:%238BHAllTEHA.3016@tk2msftngp13.phx.gbl...
Hi,
I am using stored procedures in my application to keep the end users from
having permission on the database that they should not (like delete rows and
such) so the only thing the end user has access to is execute permission on
the stored procedures... BUT the problem is it sometimes (not always) comes
back with select permission not granted on a table the stored procedure is
trying to access... so i had to go through and give select access to the
tables (which i dont like doing considering some of them have sensative data
in them) i thought a stored procedure is independent of end users table
permissions? as long as they had execute permissions only the data returned
is what they should get... regardless of the table permissions (thought
stored proces ran as DBO or SA...) anyways, we need to give a single stored
procedure drop and create table access... which we dont want to grant it
wide open across the user base that would be bad... but a temp table needs
to be created and droped when its done with in the stored procedure... well
right now we get permission errors on it when this happens... what can i do
about this?! i dont want to give everyone SA access....


Relevant Pages

  • Re: Stored Procedure Security/Permissions
    ... Cross-Database Ownership Chaining Behavior Changes in SQL Server 2000 ... > permission to read either table; ... > permission to execute the stored procedure, ...
    (microsoft.public.sqlserver.security)
  • Re: pass stored procedure parameters in asp
    ... procedure and properties) of voidTran stored procedure and other ... I believe it is the permission issue. ... This email account is my spam trap ...
    (microsoft.public.inetserver.asp.general)
  • Re: Table Type Permissions
    ... SQL Server DBA ... to pass table-valued parameters to a stored procedure. ... permission on the type is needed for a user to create a stored procedure ... REFERENCES ON TYPE::MyType? ...
    (microsoft.public.sqlserver.server)
  • Re: Stored procedure to drop and create table for end user
    ... > having permission on the database that they should not (like delete rows and ... > such) so the only thing the end user has access to is execute permission on ... > back with select permission not granted on a table the stored procedure is ... > tables (which i dont like doing considering some of them have sensative data ...
    (microsoft.public.sqlserver.programming)
  • Re: EXECUTE permission denied on object... uh?
    ... connecting with doesn't have permission to execute the Stored Procedure ... runBehavior, SqlCommand cmdHandler, SqlDataReader ...
    (microsoft.public.dotnet.framework.aspnet)