sql server - Role for read-only access to execute SP/get result set, without indirectly modifying db? -

For example

If a SQL Server user account is given only The ability to perform a stored procedure that modifies dataReader role and in any one way, can the modification be caused by that user's execution of that stored procedure?

Overall , I want to read only the ability of a whole syntax for a user that uses SQL syntax, views and executes any store process. Which sets the results. But I should not have any side effects because the database changes. Therefore, in the above stored procedure example, attempts to fulfill my need will ideally be an error, and all the same situations where a side effect may cause change, I want to make sure that my database is against those people Secured

Is it only at the level of the role?

Products : SQL Server 2005 and above

You can do this. Just play the role of a database at the database level, and read it on the table to read that role and execute only on stored procedures (such as reading). Then, add the desired user to the role of your database.

However, if you are using stored procedures to read data, consider all things, do it completely and do not let users read tables on any level stored procedures (and Idea) to drive all data access.

Edit: Just saw that you mentioned SQL 2005 "and above." If you are using SQL Server 2008, see application roles instead of traditional database roles.