|
sql
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
sql 2005 - which role allows to read ddl but not to modify it?hi,
I need to grand enough permissions to a user to read database ddl (table, sp, function, etc... definitions ) but not to change them. to which role shall I assign the user to? Thanks AFAIK there is no built in role that supports that (someone correct me if I'm
wrong), but you can grant the user the VIEW DEFINITION permission. ML --- Matija Lah, SQL Server MVP http://milambda.blogspot.com/ By adding the user to the db_datareader database role you will give both
access to the data and to the definitions of the data (metadata). If you want to give access to the metadata but not to the data use the new VIEW DEFINITION permission at the database level. Hope this helps, Ben Nevarez Senior Database Administrator AIG SunAmerica Show quote "newToSql" wrote: > hi, > I need to grand enough permissions to a user to read database ddl (table, > sp, function, etc... definitions ) but not to change them. > to which role shall I assign the user to? > Thanks > > > the issue was that when I granted the user db_dataReader (as we used to do
in sql2000) they could not access tables/stored procedures... ie. they could not see them listed in the Management Studio, I am not sure what was the issue. granting them the View Definition worked fine. Thank you Ben and Matija Show quote "Ben Nevarez" <BenNeva***@discussions.microsoft.com> wrote in message news:E1979554-A909-45D6-A8B2-9FCB4473DA0D@microsoft.com... > > By adding the user to the db_datareader database role you will give both > access to the data and to the definitions of the data (metadata). If you > want > to give access to the metadata but not to the data use the new VIEW > DEFINITION permission at the database level. > > Hope this helps, > > Ben Nevarez > Senior Database Administrator > AIG SunAmerica > > > > "newToSql" wrote: > >> hi, >> I need to grand enough permissions to a user to read database ddl (table, >> sp, function, etc... definitions ) but not to change them. >> to which role shall I assign the user to? >> Thanks >> >> >>  |
|||||||||||||||||||||||
Other interesting topics