sp_OA

[qberta01]

Hello, I need to run a DTS package through a stored proc that gets executed through a web application. The web user permissions must not be sysadmin. So I used the sp_OA procs to circumvent this problem. However, I am concerned about it being a security risk. Are the sp_OA procs a security risk even if they are not called directly form the web app?

I am using SQL 2000

Thx,

Q.

 

[Will192]

What are you doing in the DTS package? Is there any chance that you can convert the DTS package to just using T-SQL?

What exactly is the DTS job doing that you can't do in T-SQL?

I think I have another way around this, but let me know what your DTS job does.

All of the other ways that I can think of doing this would be security risk also.

Only members of the sysadmin fixed server role can execute the create of sp_OA. (from SQL Server Books Online)

Live to Throw
Throw to Live