Re: Column level security

From: Arzan (aratesh@hotmail.com)
Date: 12/13/02 

From: "Arzan" <aratesh@hotmail.com>
Date: Fri, 13 Dec 2002 02:19:13 -0800

What i am looking for is performing something like
"GRANT INSERT ON <TABLE_NAME>(COLUMN_NAME) TO
<SECURITY_ACCOUNT>" i.e. i want to grant insert permission
to a user on a specific column and not the entire row.

Can that be done. If yes how?

Regards,
Arzan
>-----Original Message-----
>An INSERT inserts a whole row, which must have a value
for every column. So
>if a user has insert permission, they can insert into
every column. If you
>want to make sure that a user only inserts default values
for particular
>columns, a trigger would work nicely, either an AFTER
trigger or an INSTEAD
>OF trigger.
>
>Constraints are a good thing. Why don't you want to use
them?
>
>You can create a view containing just the columns which
the user may supply
>values to, and give the user permission to insert into
the view. All the
>columns which aren't in the view need to have defaults
already defined, or
>to allow NULLs.
>
>HTH
>--
>Kalen Delaney
>SQL Server MVP
>
>
>"Arzan" <aratesh@hotmail.com> wrote in message
>news:05aa01c2a037$dfd55220$d7f82ecf@TK2MSFTNGXA14...
>> Hi,
>>
>> I would like to know if i can restrict a user from
>> inserting data into a column. SELECT and UPDATE can be
>> controlled however i would like to know if i could do it
>> for INSERTS. I dont want to use triggers or contraints.
>>
>> Regards
>> Arzan
>
>
>.
>

Relevant Pages

  • Re: Column level security
    ... "GRANT INSERT ON TO ... " i.e. i want to grant insert permission ... Regards, ... >columns, a trigger would work nicely, either an AFTER ...
    (microsoft.public.sqlserver.security)
  • RE: Access Denied After AD Migration
    ... Do you grant the permission to the individual user account or the group? ... Best regards, ...
    (microsoft.public.windows.server.migration)
  • Re: Allowing Anonymous write access only.
    ... need at least READ permission for login. ... > been set up so that anonymous FTP users have write access only, this> may seem insecure and we do get a certain ammount of hackers or> taggers testing the system by dropping test files and folders onto the> server, but because anonymous users do not have read access they soon> find that they cannot download anything they upload and go elsewhere. ... This is where my problems have started,> I initialy replicated all the IIS setting and NTFS permission from my> NT box on my 2003 box but so far have been unable to achive the same> result, it appaers that I can only grant anonymous write access if I ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Yukon schemas
    ... ALTER to the schema. ... you have to grant create permission to perform the action ... data and to create and alter stored procedures and views that they owned. ...
    (microsoft.public.sqlserver.security)
  • Re: Local admin right
    ... use Group Policy Restricted Groups to enforce membership of local computer ... > account to local admin group to run some applications. ... > used this permission to grant someone else to access that box too. ...
    (microsoft.public.security)