Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
odubhgaill
Starting Member
2 Posts |
 Posted - 2008-08-28 : 06:53:02
|
| Hi,I have a web app which logs into a SQL Server backend. I am trying to make sure that the account which connects to the database has restricted access so as to avoid problems with SQL injection.I want to see exactly which stored procedures the account has access to and to make sure it has no direct table access.Is there a script I can run which will tell me exactly what objects/resources an account has access to?thanks |
|
|
sodeep
Master Smack Fu Yak Hacker
7174 Posts |
Posted - 2008-08-28 : 08:27:12
|
| sp_helprotect'loginname' |
 |
|
|
odubhgaill
Starting Member
2 Posts |
Posted - 2008-08-28 : 10:09:16
|
| Great thanks |
|
|
|
|
|
|
Finding account permissions