如何找到自定义角色具有执行权限的存储过程？ SQL SEVER

Posted 2021-03-29

我试图通过查询确定自定义角色具有执行权限的存储过程。我尝试使用has_perms_by_name，但我没理解并使用它。

答案

this应该给你的目标：

DECLARE @Obj_sql VARCHAR(2000)
DECLARE @Obj_table TABLE (DBName VARCHAR(200), UserName VARCHAR(250), ObjectName VARCHAR(500), Permission VARCHAR(200), objecttype varchar(200))
SET @Obj_sql='select ''?'' as DBName,U.name as username, O.name as object,  permission_name as permission, o.type from ?.sys.database_permissions
join ?.sys.sysusers U on grantee_principal_id = uid join ?.sys.sysobjects O on major_id = id WHERE ''?'' NOT IN (''master'',''msdb'',''model'',''tempdb'') order by U.name '

INSERT @Obj_table
EXEC sp_msforeachdb @command1=@Obj_sql

SELECT * FROM @Obj_table
where UserName = 'RSExecRole' --edit with username you're looking for
and objecttype = 'P'

另一答案

假设您只关心哪些存储过程已明确授予该角色执行权限：

DECLARE @role SYSNAME = 'MyRole';

SELECT o.[name]
FROM sys.database_permissions p
JOIN sys.objects o ON p.major_id = o.[object_id]
JOIN sys.database_principals pr ON p.grantee_principal_id = pr.principal_id
WHERE pr.[name] = @role
    AND p.[state] = 'G' -- GRANT
    AND p.[type] = 'EX' -- EXECUTE
    AND o.[type] = 'P' -- PROCEDURE

这不包括角色被赋予全球GRANT EXECUTE的（不太常见）情况。