Re: most restrictive or least?

From: - Dan - (dan_at_domain.com)
Date: 04/01/04 

Date: Wed, 31 Mar 2004 17:27:07 -0500

makes sense as far as deny goes.
what I'm wondering about is this. The "domain users" group is a user in SQL
Server. This group is a member of the db_denydatawriter. This group is
also a member of a role I created called "domain readers" where this role
only has select on some tables.

So
1) domain users are deny write
2) domain users can SELECT some tables

now I want ONE of the domain users (who's NT account has been added to SQL
Server) to be just like the above but have UPDATE on one table. GRANTED him
UPDATE on this table but it still tells me that he can't update, so I figure
thats the db_denydatawriter issue

but my domain account is also added but i am sysadmin. so I can update
anything, I'm the dbo for everything.

wonder why he can't UPDATE but I can?

"Jasper Smith" <jasper_smith9@hotmail.com> wrote in message
news:OVIr7x2FEHA.3132@TK2MSFTNGP12.phx.gbl...
> The most restrictive permission (DENY) takes precedence
>
> --
> HTH
>
> Jasper Smith (SQL Server MVP)
>
> I support PASS - the definitive, global
> community for SQL Server professionals -
> http://www.sqlpass.org
>
>
> " - Dan -" <dan@domain.com> wrote in message
> news:406b3aa9$0$4559$39cecf19@news.twtelecom.net...
> > Are sql server 2k permissions most restrictive or least restrictive?
> >
> >
>
>

Relevant Pages

  • Re: most restrictive or least?
    ... >makes sense as far as deny goes. ... group is a user in SQL ... >2) domain users can SELECT some tables ... >Server) to be just like the above but have UPDATE on one ...
    (microsoft.public.sqlserver.security)
  • Unable to add domain users
    ... I have a new SQL 2000 server with Windows Server 2003 OS. ... I have only been able to add two domain users ...
    (microsoft.public.sqlserver.security)
  • Re: Least amount of privileges
    ... It depends on what the domain users group has for permissions. ... Does this third party program have a service account that runs the app for ... moving this app off of your sql server and put it on a seperate server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Access rights issue with Sharepoint - newbie question
    ... as the WSS server isn't running activedirectory. ... That I took the domain users out of the domain admins group on the WSS ... one that would be making all the site-changes to the SharePoint app as ... Administrators Group) - I believe it may be because the users are not ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Access rights issue with Sharepoint - newbie question
    ... as the WSS server isn't running activedirectory. ... That I took the domain users out of the domain admins group on the WSS ... one that would be making all the site-changes to the SharePoint app as ... Administrators Group) - I believe it may be because the users are not ...
    (microsoft.public.sharepoint.windowsservices)