经典ASP-哪些用户需要授予存储过程的执行权限

Question

I have a classic ASP application running under IIS (v8.5.9600) on Windows Server 2012R2. One of the pages makes use of a file upload control that allows a user to upload a data file to be processed by the system. Once the file is uploaded a stored procedure is executed that takes the name of the file uploaded and inserts it into a table.

Some of my users have been receiving an error message after uploading the file. Checking the IIS log I see the error is the following ...

244|80040e09|[Microsoft][ODBC_SQL_Server_Driver][SQL_Server]The_EXECUTE_permission_was_denied_on_the_object_'myStoredProcedureName'__database_'myDatabaseName'__schema_'dbo'.,

From reading other articles it seems as though I need to grant execute permissions to this specific stored procedure. My question is this ..

1. Which user needs the execute permissions? Is it the user that the database connection specifies or is it the user that the website runs under via IIS?
2. This error does not occur with most users. It only seems to be occurring with a few of the users that upload files. If the issue were permissions shouldn't it be occurring with all users?

Answer 1

webworm - many thanks.

The execute permission needs to be given to the user in the connection string.

The user manipulating the database is the one that is mentioned in the connection string. It is possible to use multiple connection strings, of course, for different parts on the application, linking to many different databases, though this can become a nightmare to manage. I recommend creating all of the connection strings in the global.asa and limiting the SQL user accounts to as few as possible. It's easier to give the same account access to multiple databases on the same server...