I need to lock down access to a specific database for a user - they should only have access to execute a couple of stored procedures.
However, by default the user gets everything in the "public" role. I took a look at the various permissions and it appears that public still gives them WAY too much access. However, I'm afraid if I revoke these permissions something unexpected will break.
Are there any default or open source scripts that lock public down safely? And if not, is there at least a list of "bare minimum" permissions I'd need to leave as-is? Additionally, is there any easier way to create the scripts than me manually walking through every securable, looking at the access, then writing a line of script to remove it?