Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
Blastrix
Posting Yak Master
208 Posts |
Posted - 2003-04-21 : 22:26:16
|
| I am currently working on a fairly large database with a large number of revisiting users(approximately 800 unique/day). The way security is setup right now, is that these user's login to the system via ASP pages, and then for the rest of their session, use a connection string that best fits their user category. In order to track more of who does what in the DB, I would like to give each user their own login, and then assign them to groups(maybe even have the group name be the same as the user category login names right now). The only problem is that permissions are set throughout the DB based off of the current logins. Is there a way to create the groups I need, and then "transfer" the permissions settings to them that are applicable in an automated fashion? I really don't want to go through and set perms on 500 stored procedures by hand.Thanks,Steve |
|
|
efelito
Constraint Violating Yak Guru
478 Posts |
Posted - 2003-04-22 : 10:16:04
|
| Look into sp_setapprole in BOL. You could setup some application roles with the appropriate permissions, determine which approle the user should belong to when after they connect and then use it to give them the appropriate permissions.Jeff Banschbach, MCDBA |
 |
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
Posted - 2003-04-22 : 12:57:47
|
| Yes there is an easy way. Do a search in the forums for isp_Grant_Permissions. It is a stored procedure that can easily be modified to do what you want. I'm not sure that you want to go with application roles though as efelito mentioned. Regular roles is most likely what you want.Tara |
 |
|
|
|
|
|