Exam 70-462 topic 1 question 23 discussion

Actual exam question from Microsoft's 70-462

Question #: 23
Topic #: 1

You administer a Microsoft SQL Server database. The database has a table named Customers owned by UserA and another table named Orders owned by
UserB. You also have a stored procedure named GetCustomerOrderInfo owned by UserB. GetCustomerOrderInfo selects data from both tables.
You create a new user named UserC.
You need to ensure that UserC can call the GetCustomerOrderInfo stored procedure. You also need to assign only the minimum required permissions to UserC.
Which permission or permissions should you assign to UserC? Each correct answer presents part of the solution.

A. The Select permission on Customers
B. The Execute permission on GetCustomerOrderInfo
C. The Take Ownership permission on Customers
D. The Control permission on GetCustomerOrderInfo
E. The Take Ownership permission on Orders
F. The Select permission on Orders

Show Suggested Answer

Suggested Answer: B 🗳️
Execute permission on the Stored procedure is the minimal permission that is required. Select permission is not necessary.
References:
http://msdn.microsoft.com/en-us/library/ms188676.aspx
http://stackoverflow.com/questions/2212044/sql-server-how-to-permission-schemas http://sqlservercentral.com/blogs/steve_jones/2012/03/14/ownership-chains-in-sql-server

by zeme at July 8, 2020, 10:57 p.m.

Comments

Submit Cancel

zeme

Highly Voted 4 years, 11 months ago

The answer must be A and B Since both GetCustomerOrderInfo and orders table are owned by UserB we don't need select permission on orders table but Customers table is owned by UserA, So we must have select permission on Customers table in order to execute GetCustomerOrderInfo

upvoted 6 times

...