SQL: Use elevated procedure permissions instead of elevated user permissions
Choosing the right database permission can be hard. I’ve lost count of the number of times I’ve heard a discussion like this:
I need to let Mary restore truncate one of the tables but I don’t want to give her permission to do it, in case she stuffs it up.
or
I need to let Paul restore this database but I don’t want him to be able to restore other databases, and I’m worried if I give him the permission, he might accidentally do something bad and I’ll be blamed for it.
2018-08-06
