Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 General SQL Server Forums
 New to SQL Server Administration
 regarding sp_OACreate (et al) permissions/grants

Author  Topic 

bulump
Starting Member

6 Posts

Posted - 2011-04-28 : 13:09:10
The BOL says that a users needs to be a part of the sysadmin group in order to execute this/these system stored permissions, yet I can grant EXECUTE on these to a single user not inside the sysadmin role.

Am I missing something here?

This is the query I am using to check the permissions of these stored procs:

SELECT so.name,
dp.class_desc,
user_name(dp.grantee_principal_id) 'GranteePrincipalName',
user_name(dp.grantor_principal_id) 'GrantorPrincipalName',
dp.permission_name
FROM master.sys.database_permissions AS dp
JOIN sys.system_objects AS so
ON dp.major_id = so.object_id
WHERE dp.class = 1 AND so.parent_object_id = 0
AND so.name like 'sp_OA%'

Output:
sp_OACreate OBJECT_OR_COLUMN joe dbo EXECUTE
sp_OACreate OBJECT_OR_COLUMN testuser dbo EXECUTE


I'v been staring at this for a while so I may be missing something. Any help would be appreciated.

TIA!
   

- Advertisement -