I have a user whose role is db_datareader that needs to be able to execute a stored procedure which decrypts some data using our symmetric key and certificate. I've granted EXECUTE perms on the stored procedure itself for this user, but now it wants access to the symmetric key and certificate. I'm not sure how to grant perms for the key and the certificate while still keeping this user in a SELECT or read-only mode. Is this possible?
SQL Server 2008 R2 User Permissions
549 Views Asked by Code Maverick At
1
There are 1 best solutions below
Related Questions in SQL-SERVER-2008
- How to create separate rows for each unique value in source data
- How to Multiply all values within a column with SQL like SUM()
- Concatenated string in column alias
- Column value divided by row count in SQL Server
- MSSQL Bulk Insert CSV - Multiple columns include commas
- String to DATETIME with TimeZone
- Compare each records of same table in sql server and return duplicates
- 2008R2 SQL Code for case when using the SUM?
- Separate string into columns
- Pass parameters to sql agent job step (Transact-SQL Script)
- using Case get values from different table in sql server
- How to use Replace an unknown length of characters in SQL Server?
- Join Multiple table without using joins
- call an sql function by name returned by select
- How to create a check (Table A.Id and Table B.Id and TypeId = 1)?
Related Questions in PERMISSIONS
- Android M requesting permissions with permission_groups
- Is it possible to clone a private git repo without adding ssh keys
- Concrete5 5.7 Block permissions
- Unix not checking file permissions properly
- How to share home directory for different users of GUI desktop application?
- INTERNET permissions in Android M
- "restricted" folder/files in OS X El Capitan
- Magento list all products out of stock after showing all products in stock the day before
- Android Uses-Feature VS. Uses-Permision Optimization
- Cannot list device files in Ubuntu/Debian using QDir in Qt5
- How to use SFTP with PhpStorm to access server /var/www folder
- maven-rpm-plugin set folders permission differently from files when mapping
- Set Per-Model Permissions in Django
- Why rsAccessDenied error on SSRS when using Chrome but not in IE
- Where to apply domain level permissioning
Related Questions in CERTIFICATE
- Ruby on Windows XP: How to change directory of SSL certificates
- iOS CSR Certificate is not generating correctly
- Wrong vertificate signature algorithm in X509Certificate for SHA256withDSA using Java
- Migrate ClickOnce certificate from Sha1 to SHA256 and run on .NET 4.0 client machines
- How to create CSR with SANs using keytool
- Import cert in ApplicationPool identity Personal certificate store
- Application is not recognized by Game Center after iOS Certificate renewal
- Firefox automatically choose certificate, without ui dialog
- Do all ActiveMQ clients need a client certificate?
- Wildcard SSL - Which to chose and what is the key differences?
- Thread-6, RECV TLSv1 ALERT: fatal, handshake_failure
- How can i get Certificate issuer information in python?
- What certificates does 'curl' use by default?
- Android Client certificate 403
- C# : How can I retrieve the "personal" certificates installed on a remote computer
Related Questions in SYMMETRIC-KEY
- 32-character PHP AES Key for mcrypt_encrypt
- AES CBC - Have message input and output and IV and have to find key
- Alternative to using SecureRandom to generate AES key and IV
- How can I Decrypt using libsodiumWrapper library using a public and a private key?
- 3DES key exchange with RSA in Java
- Does it matter whether secured communication using symmetric/ pre-shared keys is happening over normal Socket or SSLSocket? How?
- Can I extract symmetric key in java SSLSocket class?
- SQL Server 2008 R2 User Permissions
- Symmetric key creation with CKA_SENSITIVE false and CKA_PRIVATE as true
- SQL Symmetric Key and opening it from C#
- When a transformation of the key is needed, how can the key be symmetric?
- SymmetricAlgorithm GenerateKey with 128 bit
- CryptoKit/Can not initialize SymmetricKey using SymmetricKey(data:)?
- C# AES-256 Unicode Key
- Node JS Symmetric key encryption
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
In the header of your stored procedure use
WITH EXECUTE AS 'somePrincipal', wheresomePrincipalhas the necessary permissions to access the symmetric key and certificate.