对象权限-TSQL

Question

我需要做以下事情:

1. 检查是否Public或被guest授予对象的任何权限(数据库角色和服务器角色)
2. 检查是否有任何用户被授予对象而不是角色的权限.
3. 检查用户是否with grant具有对象的权限
4. 检查谁有权访问扩展存储过程(我从中获取select name from sysobjects where xtype='X')

我认为他们都是相互关联的(但不知道如何).

对此可以有任何建议吗？
或者用有用的表格指导我？

任何帮助将非常感谢.

Answer 1

像这样:

Create View vwObjectPermissions AS
select schema_name(o.schema_id) as [Schema_Name]
, o.name as [object_name]
, u.name as [principal_name]
, u.type_desc as [principal_type]
, r.minor_id, r.permission_name, r.state_desc
, o.schema_id, o.principal_id as [alt_owner], o.type_desc
 from sys.database_permissions r
  Left Join sys.database_Principals u
    ON r.grantee_principal_id = u.principal_id
  Left Join sys.all_objects o
    ON o.object_id = r.major_id
 Where class_desc NOT IN ('database')
GO

--1. Check if Public or guest is granted any permission on an object (database role and server role)
Select * from  vwObjectPermissions
 Where principal_name IN ('Public','Guest')

--2. Check if any user is granted permissions on an object rather than roles.
Select * from vwObjectPermissions
 Where principal_type NOT LIKE '%ROLE%'

--3. Check if a user has "with grant" previliges on an object
Select * from vwObjectPermissions
 Where state_desc = 'WITH GRANT'        --check the spelling on this one

--4. Check who has access to extended stored procedures (which I get from select name from sysobjects where xtype='X')
Select * from  vwObjectPermissions
 Where type_desc LIKE '%X%Proc%'

GO
drop view vwObjectPermissions;