Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 SQL Server Administration (2000)
 Revoking read access from stored procedures ...

Author  Topic 

nishithrn
Yak Posting Veteran

58 Posts

Posted - 2005-04-26 : 09:57:26
Hello All,
I have created a database role on a particular database which a READ access to 10 tables only within that database. Now, I added 5 logins (domain id) in sql server where tha said database is hosted and made them a part of the role mantioned above.

Somehow, these users are also able to read all the stored proc present in that database. Some stored procs contain sensitive logins and passwords and I want to revoke the read access form all the stored proces present.

I have a hunch that since by default every users added into a database becomes a part of public group, the stored proces are also accessed through the poblic role.

Can anybody pls suggest how to overcome this ..??

Regards
Nishith

mr_mist
Grunnio

1870 Posts

Posted - 2005-04-26 : 10:18:27
Script out your procedures, then edit the script to add in the WITH ENCRYPTION option to your create procedure statements, then drop and recreate them all using that script.

-------
Moo. :)
Go to Top of Page

scottpt
Posting Yak Master

186 Posts

Posted - 2005-04-26 : 10:26:04
Remove the read permissions from public to the syscomments table
Go to Top of Page
   

- Advertisement -