Chip:
I have created a role in a Northwind database and added a login including the user in the database. I have granted INSERT UPDATE DELETE to all the 'U' xtype objects defined in sysobjects. (All user tables basically) I have added the user in the database role I have created to inherit all these permissions and decided to test if I can execute CustOrderHist store procedure in Northwind without giving explict exec rights to do so. Sure enough it worked , which I have looked up on BOL and found that public role defaults to exec all System store procedures and will not do so unless the user is in the role. I am puzzled on why User store procedures are able to do so. Worse, I took out the user from the database role and STILL able to exec the store procedure. Why Chip? Why? Why? Why?
Reshad |