DTS secuirty issue - what option to prevent creation of packages

[swoodring]

I want to take away the ability to create new package from my SQLOPERATOR profile. Basically this profile is used just to logon to the sql server and run DTS loadup jobs for our datawarehouse. What do I need to take away so that they can not create packages. Is there some document that explains what each option is and what authority relates to it?
Stacy

 

[guest2]

Hello swoodring,

If you deny your user execute permissions on the sp_get_dtspackage stored procedure in the MSDB database, that user can no longer create, open, or execute a DTS package through Enterprise Manager. Furthermore, if the user has DTSRun and knows the name of the DTS package, they can still run it outside of EM.
I hope this helps.