Question

I have a stored procedure that updates data in a table for a specific record. I have several users who will be making use of this stored procedure however I only want to them to be able to update records that are assigned to them.

Each record that is to be updated by the stored procedure has a field named “UserID” which define who has control over the record. I also have a mapping table that maps active directory logins to the UserID’s.

I am using Active Directory so SQL Server knows who is attempting to execute the stored procedure. Is there a way within the stored procedure to look-up the users active directory login in another table and then determine if they have access to the records attempting to be updated?

Answer 1

You can find out who the current user is in the proc by calling SYSTEM_USER and incorporating that into the query that updates the rows.