Registry Procedure 권한 제한

1
2
3
4
5
6
7

-- public에게 부여된 Registry Procedure 권한 확인
SELECT USER_NAME(p.grantee_principal_id) AS principal_name,
    p.class_desc, p.permission_name
FROM sys.database_permissions p
INNER JOIN sys.database_principals d ON p.major_id = d.principal_id
WHERE d.name IN ('xp_regread', 'xp_regwrite', 'xp_regdeletekey')
AND USER_NAME(p.grantee_principal_id) = 'public';

1
2
3
4
5
6
7
8

-- public 권한 회수
REVOKE EXECUTE ON master.dbo.xp_regread FROM public;
REVOKE EXECUTE ON master.dbo.xp_regwrite FROM public;
REVOKE EXECUTE ON master.dbo.xp_regdeletekey FROM public;
REVOKE EXECUTE ON master.dbo.xp_regdeletestring FROM public;
REVOKE EXECUTE ON master.dbo.xp_regdeletevalue FROM public;
REVOKE EXECUTE ON master.dbo.xp_regaddmultistring FROM public;
REVOKE EXECUTE ON master.dbo.xp_regremovemultistring FROM public;