Re: Restricting access to rows of table(s)+WRITE rights in SQLsrvr2k
From: Wayne Snyder (wsnyder@computeredservices.com)
Date: 08/21/02
- Next message: Joseph Schultz: "Integrated Security for Different User"
- Previous message: Wayne Snyder: "Re: Strange things with logins"
- In reply to: Ivan: "Urg: Restricting access to rows of table(s)+WRITE rights in SQLsrvr2k"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Wayne Snyder" <wsnyder@computeredservices.com> Date: Wed, 21 Aug 2002 10:57:57 -0700
If a view satisified your requirements, perhaps you could create 2 views,
one with select permissions and another with select, insert, update, delete
permissions.
-- Wayne Snyder, MCDBA, SQL Server MVP Computer Education Services Corporation (CESC), Charlotte, NC www.computeredservices.com (Please respond only to the newsgroups.) I support the Professional Association of SQL Server (PASS) and it community of SQL Server professionals. www.sqlpass.org "Ivan" <imalakov@yahoo.com> wrote in message news:4ccf01c24860$2d6f89e0$3aef2ecf@TKMSFTNGXA09... > The recent days I asked how to restrict the access of > users by records(to table, which includes a field/column, > indicating the group of users(ROLE),having access to the > record/row. > I am grateful to the guys, that responded. According to > the answers it could be done by view, checking the Role of > the current user and then returning the allowed records. > I understood this, but then it came to my mind, that this > is not enough for users with rights also to Write the > allowed records, not only to read them. > I supposed, there should be some kind of temporary table > or cursor to store the results(for updating) of the query > (for each connection), but then synchronisation problems > will occur.. > So it's better if it could be done directly(by UPDATE > statement?) > The actual situation is: > -in the old database (on SQLserver2000), having no access > restrictions(especially on rows), there is a big table > (about 5000 rows incl. many fields +pictures ),to which > the access shold be restricted(on rows) by a view?, > replacing the table. SO there won't be PROBLEMS(changes > needed) with the many other Forms,Views and tables, > previously querying the old table > -There should be 2 kinds of Roles- 1 only with Read right > and the other-with Read+WRITE(Update+Delete+Insert) rights. > > Thank you for your attention! > Can s.b answer me on the additional question? > >
- Next message: Joseph Schultz: "Integrated Security for Different User"
- Previous message: Wayne Snyder: "Re: Strange things with logins"
- In reply to: Ivan: "Urg: Restricting access to rows of table(s)+WRITE rights in SQLsrvr2k"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
