Protect table update using database role (server role is over) -
itemprop = "text">
I have a database role called app_user with the selection, updating, inserting and deleting of rights on all tables except 2 tables. Only correct has been selected in the role of AP_USER.
However, some users have the right to create database users (login-making, spad-aids, sp_androlemman). To be able to execute this process, they should be sysadmin server rolls. In this case the sysadmin role is on the database ap_user and they can update these 2 tables. Currently, I am giving them security admin rolls, but while making DB users only they can make a login.
In short, I want to update 2 tables for all users except my Sisäämin account, and I need something users are able to be able to create database users (my app has them Has implemented spam permitting DB for type users).
You can get better answers on the DBA site, but it seems that you can send 3 commands to the user You want to allow execution: According to the document, the minimum permission is required: Hence the Y does not require either the create login ,
CREATE USER and
sp_addrolemember (because
ALTER ROLE SQL Server 2008 Can not add a member to a role)
create login -
ALTER (ANY) LOGIN
create user -
any user optional
sp_addrolemember -
ALTER
sysadmin or
db_owner permission, if you give them the permissions listed above .
Comments
Post a Comment