Re: User Role Permissions

From: Dan Guzman (guzmanda_at_nospam-online.sbcglobal.net)
Date: 11/25/04


Date: Thu, 25 Nov 2004 06:58:52 -0600

You can use DCL (data control language) statements to grant permissions to
your new role. Use GRANT to add permissions, REVOKE to remove permissions
and DENY to prevent granted permissions from being inherited. Note that
DENY is used only in special cases since a normal user/role will not have
any object permissions unless explicitly granted.

Sample script below. See the Books Online for more information.

GRANT SELECT ON MyView TO MyRole
GRANT ALL ON MyTable TO MyRole
GRANT EXECUTE ON MyProcedure TO MyRole

-- 
Hope this helps.
Dan Guzman
SQL Server MVP
"Bish" <Bish@discussions.microsoft.com> wrote in message 
news:C6B05E5D-07AB-4C11-AF1A-B44B478BE4E9@microsoft.com...
> sIs there a system stored proc that provide access to changing the
> permissions on a user role.
>
> I am using the sp_addrole to create a role and sp_addrolemember to add a
> member but wish also to script certain permissions in the new role.
>
> ....thanks 


Relevant Pages

  • Re: NTFS woes
    ... starting with a grant of Full and subtracting part of it ... gives it and it gets taken away by deny) but this Posix compliance ... On the parent folder I already had unchecked Take Ownership, ... Permissions and Delete. ...
    (microsoft.public.windows.server.security)
  • Re: NTFS woes
    ... An explicit deny overrules and explicit or inherited grant. ... no permissions on those things to delete them. ...
    (microsoft.public.windows.server.security)
  • Re: **Deny**
    ... usually done when permissions are inherited via role membership. ... GRANT and DENY have no affect on db_owner role members. ...
    (microsoft.public.sqlserver.security)
  • Re: USERS group has the ability to change security permissions???
    ... Please use the Advance view in the NTFS permissions dialog to ... When there is a generic grant and a special grant to the same entity ... the RESULT: user level access can change NTFS ...
    (microsoft.public.win2000.security)
  • Re: DCOM Event ID 10015
    ... Grant the user permissions to start the COM component ... Run the MPSRPT_DirSvc.exe on the server box. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)