Re: Create table & deny delete table

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 10/30/03


Date: Thu, 30 Oct 2003 13:19:54 -0700

If you gave the user just create table permissions (no other
roles involved) then the table can't be created as being
owned by dbo. The user needs to be a member of db_owner or
db_ddladmin roles (or sysadmin) to create a table owned by
dbo. And then users of db_owner and db_ddladmin have the
ability to do more than just create tables but they also can
drop tables.

-Sue

On Thu, 30 Oct 2003 11:23:05 -0800, "hrhoe"
<hrhoe@hotmail.com> wrote:

>Hi,
>I'm trying to create a new login that has the following:
>- This user need to create a table.
>- The created table should have name like
><db_name>.dbo.<table_name> (not like
><db_name>.<User>.<table_name>
>- This user should not be allowed to delete a table does
>not belong to he or she.
>
>Can I create a user login like this?
>
>Thank you,
>
>- Hyung -
>



Relevant Pages

  • Problem is w/ .ADP..Re: SQL db Permissions for users not working
    ... You do not have SELECT permissions on the ... SysObjects system table in the database. ... figured out that qualifying the database owner (dbo in my ... >> I feel that the object owner is not dbo, ...
    (microsoft.public.sqlserver.security)
  • Re: public role question
    ... If 'select user' is returning DBO, it means you are connecting AS DBO, and ... testing the permissions the new user has. ... Are you saying that the permissions to create the stored procedure are ... Dan D. ...
    (microsoft.public.sqlserver.security)
  • Re: How to prevent DELETEs in a table
    ... What you say about dbo is true, but it is even MORE true about someone who ... is in the sysadmin role. ... No permissions are ever checked for someone in the ... the deny is not applied. ...
    (microsoft.public.sqlserver.server)
  • Re: How to prevent DELETEs in a table
    ... It is the dbo database USER, not server-level groups, that determins ... It has implicit permissions that can not be denied. ... SQL Server just skips any permission validation for sysadmins. ...
    (microsoft.public.sqlserver.server)
  • Re: Control over creation of procs & views owned by dbo
    ... To add on to Jasper's response, you could also change object ownership to ... 'dbo' with sp_changeobjectowner. ... security context of the invoking user, not the object owner. ... need permissions on only directly referenced objects. ...
    (microsoft.public.sqlserver.security)