Posted by Terri on 11/10/05 23:40

I have a stored procedure that creates an xml file. It executes a SELECT
statement with the FOR XML clause and then writes the xml file using bcp and
xp_cmdshell. I am calling this procedure by passing it a parameter via ADO.
I have configured the SQL Server Agent with a proxy account so non-SysAdmin
can execute xp_cmdshell.

I'm concerned about giving non-SysAdmins execute on xp_cmdshell. I'm also
concerned about having to maintain the password on my proxy account when
that users' password changes.

Is there a better, more secure way to generate this xml file.

Thanks

• Next in forum: Re: Default charset in sqlserver 2000? / jtds
• Prev in forum: Re: Linking a table
• Thread view: Need security advice on xp_cmdshell, bcp, xml procedure

[Reply to this message]