Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
AskSQLTeam
Ask SQLTeam Question
0 Posts |
 Posted - 2003-08-18 : 07:26:38
|
| Child writes "How to stop Dynamic SQL in an existing system." |
|
|
Merkin
Funky Drop Bear Fearing SQL Dude!
4970 Posts |
Posted - 2003-08-18 : 07:36:43
|
| Deny read and write access to the tables but grant execute on the stored procs.Damian |
 |
|
|
Frank Kalis
Constraint Violating Yak Guru
413 Posts |
Posted - 2003-08-18 : 07:41:29
|
and wait for flaming telefone calls.  In addition, what about deleting sp_executesql?Cheers,Frank |
|
|
|
robvolk
Most Valuable Yak
15732 Posts |
Posted - 2003-08-18 : 08:09:40
|
| Deleting system procedures IS NOT a good idea, nor does it prevent people from using EXECUTE(@sqlstring). |
|
|
|
Merkin
Funky Drop Bear Fearing SQL Dude!
4970 Posts |
Posted - 2003-08-18 : 08:10:19
|
Delete the users  Damian |
|
|
|
Frank Kalis
Constraint Violating Yak Guru
413 Posts |
Posted - 2003-08-18 : 08:12:20
|
Hi Rob,quote:
Deleting system procedures IS NOT a good idea, nor does it prevent people from using EXECUTE(@sqlstring).
I know, but in addition to the deletion you get rid of those nasty reusable executions plans Cheers,Frank |
|
|
|
|
|
|
STOP Dynamic SQL