I need to grant execute permissions to some users on xp_cmdshell. I am
trying to avoid having to grant execute permission directly on
xp_cmdhell, but alternatively grant access indirectly through another
procedure. The idea will be to write another proc "Custom_cmdshell"
which will call xp_cmdshell.
I am familiar with ownership chains but haven't figured out a way to
work with it in this situation.
Regards,
KenOn Feb 26, 5:37=A0am, Ken <raid...@.yahoo.com> wrote:
> I need to grant execute permissions to some users on xp_cmdshell. I am
> trying to avoid having to grant execute permission directly on
> xp_cmdhell, but alternatively grant access indirectly through =A0another
> procedure. The idea will be to write another proc "Custom_cmdshell"
> which will call xp_cmdshell.
> I am familiar with ownership chains but haven't figured out a way to
> work with it in this situation.
> Regards,
> Ken
Please refere to below article .
http://support.microsoft.com/kb/890775/en-us
Thanks
Ajay Rengunthwar
MCTS|||I think that this article might contain valuable information and possibly options for you:
http://www.sommarskog.se/grantperm.html
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://sqlblog.com/blogs/tibor_karaszi
"Ken" <raidken@.yahoo.com> wrote in message
news:afad664c-55a0-4ffd-b1f1-0037373d258e@.q33g2000hsh.googlegroups.com...
>I need to grant execute permissions to some users on xp_cmdshell. I am
> trying to avoid having to grant execute permission directly on
> xp_cmdhell, but alternatively grant access indirectly through another
> procedure. The idea will be to write another proc "Custom_cmdshell"
> which will call xp_cmdshell.
> I am familiar with ownership chains but haven't figured out a way to
> work with it in this situation.
> Regards,
> Ken|||I should have mentioned that we are using SQL 2000. The article
mentioned applies to SQL 2005 only.
Ken
On Feb 26, 3:47=A0am, "Tibor Karaszi"
<tibor_please.no.email_kara...@.hotmail.nomail.com> wrote:
> I think that this article might contain valuable information and possibly =options for you:http://www.sommarskog.se/grantperm.html
> --
> Tibor Karaszi, SQL Server MVPhttp://www.karaszi.com/sqlserver/default.asph=
ttp://sqlblog.com/blogs/tibor_karaszi
>|||Check out the section "Cross-Database Access", which is applicable to 2000.
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://sqlblog.com/blogs/tibor_karaszi
"Ken" <raidken@.yahoo.com> wrote in message
news:0d244ac3-57ee-430e-a612-1d7dcc4d9d47@.e60g2000hsh.googlegroups.com...
I should have mentioned that we are using SQL 2000. The article
mentioned applies to SQL 2005 only.
Ken
On Feb 26, 3:47 am, "Tibor Karaszi"
<tibor_please.no.email_kara...@.hotmail.nomail.com> wrote:
> I think that this article might contain valuable information and possibly options for
> you:http://www.sommarskog.se/grantperm.html
> --
> Tibor Karaszi, SQL Server
> MVPhttp://www.karaszi.com/sqlserver/default.asphttp://sqlblog.com/blogs/tibor_karaszi
>sql
Monday, March 26, 2012
Grant execute on XP_CMDSHELL indirectly
Labels:
avoid,
database,
directly,
execute,
grant,
indirectly,
microsoft,
mysql,
oracle,
permission,
permissions,
server,
sql,
users,
xp_cmdhell,
xp_cmdshell
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment