Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
Author |
Topic |
laddu
Constraint Violating Yak Guru
332 Posts |
Posted - 2010-10-06 : 10:13:49
|
Hi,In our development server, I want to give only read and execute permissions to developers. I was checking below two database roles. But I don't want my developers to change the data in tables. Please advice on giving access(read and execute)db_datawriter Members of the db_datawriter fixed database role can add, delete, or change data in all user tables. db_datareader Members of the db_datareader fixed database role can read all data from all user tables. |
|
Transact Charlie
Master Smack Fu Yak Hacker
3451 Posts |
Posted - 2010-10-06 : 11:41:01
|
urm -- you want to give your developers only read and execute permission on the *development* server.What if they have to design an UPDATE or INSERT?Charlie===============================================================Msg 3903, Level 16, State 1, Line 1736The ROLLBACK TRANSACTION request has no corresponding BEGIN TRANSACTION |
 |
|
tkizer
Almighty SQL Goddess
38200 Posts |
|
jeffw8713
Aged Yak Warrior
819 Posts |
Posted - 2010-10-06 : 16:17:49
|
To answer your question without regard to the environment you are doing this in (I agree with the others, developers should have full access in a development environment), you can do the following on SQL Server 2005 and greater:Add the users to the db_datareader role (read permissions)Then, grant execute access to the user:GRANT EXECUTE ON SCHEMA::dbo TO {user/role};If they need to be able to execute procedures in other schemas, grant those also. If there are a lot of developers, I would probably create a role and add the users to the role instead of granting to each individual.Jeff |
 |
|
|
|
|
|
|