October 1, 2004 at 9:27 am
Some time ago I designed a series of intranet pages which could query any object in a database and display information about it (column, parameters, privileges), etc.
We are about to restructure our development team and as a result, programmers will no longer have any access to the live server. As a result I thought it would be handy to give them this intranet site.
The downside is that the pages are freely available to them, and as I query the sysobjects tables and the likes, they could get to the credentials allowing them access to the server again.
Easy, I thought, alter the site to use the schema views, except that I've hit a problem.
I can't find any view that will give the the privileges for stored procedure and functions.
Can anyone shed any light on this or help in any way?
---------------------------------------
It is by caffeine alone I set my mind in motion.
It is by the Beans of Java that thoughts acquire speed,
the hands acquire shaking, the shaking becomes a warning.
It is by caffeine alone I set my mind in motion.
October 1, 2004 at 11:54 pm
It seems that there is no INFORMATION_SCHEMA view for routine privileges. Other ways to retrieve this information are: using the sysprotects table or using the sp_helprotect stored procedure.
Razvan
October 4, 2004 at 1:47 am
I had a horrible feeling this was the case.
Masny thanks.
---------------------------------------
It is by caffeine alone I set my mind in motion.
It is by the Beans of Java that thoughts acquire speed,
the hands acquire shaking, the shaking becomes a warning.
It is by caffeine alone I set my mind in motion.
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply