Subject | Granting permissions to users and stored procedures |
---|---|
Author | shann0n110yd |
Post date | 2004-12-14T03:18:05Z |
I have a stored procedure which executes another stored procedure. The
second stored procedure inserts a record into a particular table. The
user who is to execute the first stored procedure has execute
permissions on it (via permissions on a role), and the first stored
procedure has execute permissions on the second SP. Finally, the
second SP has insert permissions on the table. Is this sufficient to
allow this user to get data into this table via the first SP? If not,
what am I missing? If it is sufficient, it isn't working. The error
message I'm getting back from IBExpert tells me that the user does not
have permission for read/select access to the table in question. If I
grant the user's role select access on the table, then it complains
about them not having insert access. If I grant insert access, it all
works. But why should the user/role need insert access on the table if
the SP has that access already and the user is granted permission to
execute the SP? I'd rather the user not have any direct access to the
table itself.
Thanks,
Shannon
second stored procedure inserts a record into a particular table. The
user who is to execute the first stored procedure has execute
permissions on it (via permissions on a role), and the first stored
procedure has execute permissions on the second SP. Finally, the
second SP has insert permissions on the table. Is this sufficient to
allow this user to get data into this table via the first SP? If not,
what am I missing? If it is sufficient, it isn't working. The error
message I'm getting back from IBExpert tells me that the user does not
have permission for read/select access to the table in question. If I
grant the user's role select access on the table, then it complains
about them not having insert access. If I grant insert access, it all
works. But why should the user/role need insert access on the table if
the SP has that access already and the user is granted permission to
execute the SP? I'd rather the user not have any direct access to the
table itself.
Thanks,
Shannon