SQL: Stop using db_datareader and db_datawriter
SQL Server has a number of built-in database roles. The ones I see used the most are db_datareader and db_datawriter. They let you either read from all tables or read and write from all of them. Curiously, what has never been supplied is a db_procexecutor.
Developers and administrators who set up the use of these permissions think they are at least not using dbo or sa and while that’s true,
2025-12-16


