Protect table update using database role (server role is over) -


itemprop = "text">

I have a database role called app_user with the selection, updating, inserting and deleting of rights on all tables except 2 tables. Only correct has been selected in the role of AP_USER.

However, some users have the right to create database users (login-making, spad-aids, sp_androlemman). To be able to execute this process, they should be sysadmin server rolls. In this case the sysadmin role is on the database ap_user and they can update these 2 tables. Currently, I am giving them security admin rolls, but while making DB users only they can make a login.

In short, I want to update 2 tables for all users except my Sisäämin account, and I need something users are able to be able to create database users (my app has them Has implemented spam permitting DB for type users).

You can get better answers on the DBA site, but it seems that you can send 3 commands to the user You want to allow execution: create login , CREATE USER and sp_addrolemember (because ALTER ROLE SQL Server 2008 Can not add a member to a role)

According to the document, the minimum permission is required:

  • create login - ALTER (ANY) LOGIN
  • create user - any user optional
  • sp_addrolemember - ALTER

    Hence the Y does not require either the sysadmin or db_owner permission, if you give them the permissions listed above .

Comments

Popular posts from this blog

excel vba - How to delete Solver(SOLVER.XLAM) code -

github - Teamcity & Git - PR merge builds - anyway to get HEAD commit hash? -

ios - Replace text in UITextView run slowly -