LISTING 1: Sample T-SQL Script for Creating a Low-Privilege Runtime Account

/* Create login in master.dbo.syslogins. */
USE master
GO
EXEC sp_addlogin @loginame=N'joe_nobody', @passwd='S0meThingC0mplex', @defdb='pubs' 
GO
USE pubs
GO
/* Create user account in pubs.dbo.sysusers. */
EXEC sp_grantdbaccess N'joe_nobody', N'joe_nobody'
GO
/* Add user to the ddladmin role. Demo purposes only!! 
*/EXEC sp_addrolemember N'db_ddladmin', N'joe_nobody'
GO
/* Grant user rights to database objects. */
GRANT  EXECUTE  ON [dbo].[reptq3]  TO [joe_nobody]
GO
GRANT  EXECUTE  ON [dbo].[reptq2]  TO [joe_nobody]
GO
/* Repeat for the rest of your database objects.*/