Question

如何为SQL Server2008添加登录账户并配置权限

Answer 1

--新增用户
USE [master]
GO
CREATE LOGIN [reader] WITH PASSWORD=N'123456abcdef', DEFAULT_DATABASE=[master], CHECK_EXPIRATION=OFF, CHECK_POLICY=OFF
GO
--ALTER TRACE 是用在SQL Server Profiler运行权限。仅在master中执行一次即可。
USE [master]
GO
GRANT ALTER TRACE TO[reader]
GO
--查看进程权限
GRANT VIEW SERVER STATE TO [reader]
GO

USE [DATABASE] --在指定的资料库中执行

IF EXISTS (SELECT * FROM sys.database_principals WHERE name = N'reader')
DROP USER [reader]
GO
CREATE USER [reader] FOR LOGIN [reader] --资料库可读权限
GO
EXEC sp_addrolemember N'db_datareader', N'reader'
GO
GRANT DELETE ON SCHEMA::[dbo] TO [reader] --数据表数据删除
GO
GRANT UPDATE ON SCHEMA::[dbo] TO [reader] --数据表数据更新
GO
GRANT INSERT ON SCHEMA::[dbo] TO [reader] --数据表数据插入
GO
GRANT EXECUTE ON SCHEMA::[dbo] TO [reader] --exec执行存储过程
GO
GRANT VIEW DEFINITION ON SCHEMA::[dbo] TO [reader] --查看视图、存储过程脚本定义内容
GO
GRANT ALTER ON SCHEMA::[dbo] TO [reader] --对象更改ALTER、卸载DROP
GO
GRANT CREATE VIEW TO [reader] --创建视图
GO
GRANT CREATE PROCEDURE TO [reader] --创建存储过程
GO

--取消 ALTER TRACE权限
USE [master]
GO
REVOKE ALTER TRACE TO[reader]
GO
--取消 查看进程权限
REVOKE VIEW SERVER STATE TO [reader]
GO

USE [DATABASE]
GO
REVOKE DELETE ON SCHEMA::[dbo] TO [reader] --取消数据表数据删除
GO
REVOKE UPDATE ON SCHEMA::[dbo] TO [reader] --取消数据表数据更新
GO
REVOKE INSERT ON SCHEMA::[dbo] TO [reader] --取消数据表数据插入
GO
REVOKE EXECUTE ON SCHEMA::[dbo] TO [reader] --取消exec执行存储过程
GO
REVOKE VIEW DEFINITION ON SCHEMA::[dbo] TO [reader] --取消查看视图、存储过程脚本定义内容
GO
REVOKE ALTER ON SCHEMA::[dbo] TO [reader] --取消对象更改ALTER、卸载DROP
GO
REVOKE CREATE VIEW TO [reader] --取消创建视图
GO
REVOKE CREATE PROCEDURE TO [reader] --取消创建存储过程
GO

--删除登入用户
USE [master]
GO
DROP LOGIN [reader]
GO
--删除指定资料库中的用户
USE [DATABASE]
GO
DROP USER [reader]
GO
--需要什么，自行增删