Re: Create table rights

From: Kalen Delaney (replies_at_public_newsgroups.com)
Date: 08/30/05 

Date: Tue, 30 Aug 2005 08:40:10 -0700

 
Hi Hari

Which case are you talking about that GRANT will overrule a DENY?

Thanks
Kalen Delaney

"Hari Prasad" <hari_prasad_k@hotmail.com> wrote in message
news:Od%237RfPrFHA.528@TK2MSFTNGP09.phx.gbl...
>
> Hi,
>
> Looks like some one DENY the create table previlage for that user. But in
> this case a GRANT command will over rule the DENY.
> Could you post the exact error you are getting after running the GRANT
> statement.
>
> Thanks
> Hari
> SQL Server MVP
>
>
>
>
> "jaylou" <jaylou@discussions.microsoft.com> wrote in message
> news:8DF5770F-4D14-4ADE-A3F1-2A47AFB3AAD4@microsoft.com...
>> hi All,
>> I have given a user ddladmin to a database, but this user still can't
>> create
>> tables. I tried to "grant create tables to username" that ran
>> sucessfully
>> but still can't create a table in my DB.
>>
>> Can anyone tell me what I missed for this user? he can drop tables but
>> not
>> create them.
>> Thanks,
>> Joe
>>
>
>
>

Relevant Pages

  • Re: do allowed perrmisions override denyed permissions?
    ... I thought deny access was more of a useful way to do things *TO* them! ... only grant permissions. ... | Explicit Grant ACEs for Object | ... to sort that out is with hierarchical precedence of the inheritance ...
    (microsoft.public.windows.server.security)
  • Re: do allowed perrmisions override denyed permissions?
    ... >> override the deny. ... But consider if you have the Deny on L1 and the Grant on L2... ... The only way to sort that out is with hierarchical precedence of the inheritance which is represented by the ordering of the ACEs in the ACL. ... The categories are inherited or explicit. ...
    (microsoft.public.windows.server.security)
  • Re: Denny SYNCHRONIZE to IUSR_%COMPUTERNAME% causes remote access to prompt for username
    ... [Ramon...on behalf of Luis García] ... If I deny write access from xcacls.vbs and after I grant read access, ... SYNCHRONIZE is still dennied, and IIS doesn't work. ...
    (microsoft.public.inetserver.iis.security)
  • Re: NTFS woes
    ... An explicit deny overrules and explicit or inherited grant. ... no permissions on those things to delete them. ...
    (microsoft.public.windows.server.security)
  • Re: controlling deleting of files with NTFS
    ... Hence when on this dir you deny delete to a group, ... grant delete to a user that is in the denied group, ... have (i.e. remove delete in the advanced view in the NTFS permissions ... On the top most folder I am trying to set the ntfs security on, ...
    (microsoft.public.security)