Re: Granting Roles

From: Jonathan Gennick <gennick_at_worldnet.att.net>
Date: Fri, 01 May 1998 03:06:22 GMT
Message-ID: <6ibe7a$14u@bgtnsc03.worldnet.att.net>

On Thu, 30 Apr 1998 12:13:01 -0600, bongiov_at_eglin.af.mil wrote:

> I don't want to
>use the grant any role privlege because this gives the account too mach power.
>
>Any ideas?

I once had a similiar situation where I wanted a user to be able to change passwords for other users, but not to have the priviliges that usually entails. I wrote a stored procedure under another user-id, and granted execute access on it to a nonpriviliged user. The nonpriviliged user could then call the stored procedure to change someone's password. This works because stored procedures execute with the owner's priviliges, not the executor's priviliges. Your stored procedure could have code to check that only specific roles are granted.

If you decide to try this, and need more help, let me know.

regards,

Jonathan Received on Thu Apr 30 1998 - 22:06:22 CDT