Alexander Kuznetsov : SQL Server security, Transact SQLhttp://sqlblog.com/blogs/alexander_kuznetsov/archive/tags/SQL+Server+security/Transact+SQL/default.aspxTags: SQL Server security, Transact SQLenCommunityServer 2.1 SP2 (Build: 61129.1)Preventing Bob from sales from selecting other people's messageshttp://sqlblog.com/blogs/alexander_kuznetsov/archive/2011/08/18/preventing-bob-from-sales-from-selecting-other-people-s-messages.aspxThu, 18 Aug 2011 19:22:00 GMT21093a07-8b3d-42db-8cbf-3350fcbf5496:37913Alexander Kuznetsov3http://sqlblog.com/blogs/alexander_kuznetsov/comments/37913.aspxhttp://sqlblog.com/blogs/alexander_kuznetsov/commentrss.aspx?PostID=37913Suppose that Bob can retrieve all messages, as follows, and we are not happy with it: EXEC Exchange.ShowAllMessages ; Suppose that we don't want him to read anything related to messages, so our knee-jerk reaction is this: REVOKE EXECUTE ON Exchange.ShowAllMessages...(<a href="http://sqlblog.com/blogs/alexander_kuznetsov/archive/2011/08/18/preventing-bob-from-sales-from-selecting-other-people-s-messages.aspx">read more</a>)<img src="http://sqlblog.com/aggbug.aspx?PostID=37913" width="1" height="1">SQL Server securityTransact SQL