Re: most restrictive or least?
From: keene (anonymous_at_discussions.microsoft.com)
Date: 04/01/04
- Next message: Nicole: "This page cannot be displayed...DNS Error....cannot find server"
- Previous message: Eric Sabine: "Re: xp_regread"
- In reply to: - Dan -: "Re: most restrictive or least?"
- Next in thread: Stephen Strong: "Re: most restrictive or least?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 31 Mar 2004 14:58:46 -0800
I think sysadmin can do anything he wants. nothing can
stop him.
>-----Original Message-----
>makes sense as far as deny goes.
>what I'm wondering about is this. The "domain users"
group is a user in SQL
>Server. This group is a member of the
db_denydatawriter. This group is
>also a member of a role I created called "domain
readers" where this role
>only has select on some tables.
>
>So
>1) domain users are deny write
>2) domain users can SELECT some tables
>
>now I want ONE of the domain users (who's NT account has
been added to SQL
>Server) to be just like the above but have UPDATE on one
table. GRANTED him
>UPDATE on this table but it still tells me that he can't
update, so I figure
>thats the db_denydatawriter issue
>
>but my domain account is also added but i am sysadmin.
so I can update
>anything, I'm the dbo for everything.
>
>wonder why he can't UPDATE but I can?
>
>
>
>
>"Jasper Smith" <jasper_smith9@hotmail.com> wrote in
message
>news:OVIr7x2FEHA.3132@TK2MSFTNGP12.phx.gbl...
>> The most restrictive permission (DENY) takes precedence
>>
>> --
>> HTH
>>
>> Jasper Smith (SQL Server MVP)
>>
>> I support PASS - the definitive, global
>> community for SQL Server professionals -
>> http://www.sqlpass.org
>>
>>
>> " - Dan -" <dan@domain.com> wrote in message
>> news:406b3aa9$0$4559$39cecf19@news.twtelecom.net...
>> > Are sql server 2k permissions most restrictive or
least restrictive?
>> >
>> >
>>
>>
>
>
>.
>
- Next message: Nicole: "This page cannot be displayed...DNS Error....cannot find server"
- Previous message: Eric Sabine: "Re: xp_regread"
- In reply to: - Dan -: "Re: most restrictive or least?"
- Next in thread: Stephen Strong: "Re: most restrictive or least?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
