Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.databases.ms-sqlserver > #1635

Re: Extended property permissions

From Erland Sommarskog <esquel@sommarskog.se>
Newsgroups comp.databases.ms-sqlserver
Subject Re: Extended property permissions
Date 2013-12-21 00:01 +0100
Organization Erland Sommarskog
Message-ID <XnsA29D51FF7CFYazorman@127.0.0.1> (permalink)
References <l91ve1$4cs$1@news.albasani.net> <XnsA29CEA25865ADYazorman@127.0.0.1> <l92g75$6lr$1@news.albasani.net>

Show all headers | View raw


Marco (noreply@no.reply) writes:
> Yes I know that, thanks.  But I'm wondering if there is a way, 
> perhaps through a stored procedure or a view, to give a user 
> read and update permissions to one specific extended property only.
> 

Yes, you could create a procedure that performs the operations you
want to expose. Then you create a certificate and sign that procedure 
with the certificate. Then you create a user from that certificate 
and grant that user ALTER on the object in question. (This user is 
not a real user that log in or anything.)

For a detailed discussion of this technique, please see this article
on my web site: http://www.sommarskog.se/grantperm.html


-- 
Erland Sommarskog, Stockholm, esquel@sommarskog.se

Back to comp.databases.ms-sqlserver | Previous | NextPrevious in thread | Find similar


Thread

Extended property permissions Marco <noreply@no.reply> - 2013-12-20 09:40 -0800
  Re: Extended property permissions Erland Sommarskog <esquel@sommarskog.se> - 2013-12-20 23:01 +0100
    Re: Extended property permissions Marco <noreply@no.reply> - 2013-12-20 14:26 -0800
      Re: Extended property permissions Erland Sommarskog <esquel@sommarskog.se> - 2013-12-21 00:01 +0100

csiph-web