Re: Create table rights

From: jaylou (jaylou_at_discussions.microsoft.com)
Date: 08/30/05 

Date: Tue, 30 Aug 2005 13:19:07 -0700

Kalen,
>From my understanding Grant will override the exsisting deny as well as a
deny staement will override the exsisting Grant. I may be wrong since I cant
seem to get my user create table rights in my DB without giving DB_Owner
rights.

"Kalen Delaney" wrote:

>
> Hi Hari
>
> Which case are you talking about that GRANT will overrule a DENY?
>
> Thanks
> Kalen Delaney
>
> "Hari Prasad" <hari_prasad_k@hotmail.com> wrote in message
> news:Od%237RfPrFHA.528@TK2MSFTNGP09.phx.gbl...
> >
> > Hi,
> >
> > Looks like some one DENY the create table previlage for that user. But in
> > this case a GRANT command will over rule the DENY.
> > Could you post the exact error you are getting after running the GRANT
> > statement.
> >
> > Thanks
> > Hari
> > SQL Server MVP
> >
> >
> >
> >
> > "jaylou" <jaylou@discussions.microsoft.com> wrote in message
> > news:8DF5770F-4D14-4ADE-A3F1-2A47AFB3AAD4@microsoft.com...
> >> hi All,
> >> I have given a user ddladmin to a database, but this user still can't
> >> create
> >> tables. I tried to "grant create tables to username" that ran
> >> sucessfully
> >> but still can't create a table in my DB.
> >>
> >> Can anyone tell me what I missed for this user? he can drop tables but
> >> not
> >> create them.
> >> Thanks,
> >> Joe
> >>
> >
> >
> >
>
>
>
>

Relevant Pages

  • Re: do allowed perrmisions override denyed permissions?
    ... I thought deny access was more of a useful way to do things *TO* them! ... only grant permissions. ... | Explicit Grant ACEs for Object | ... to sort that out is with hierarchical precedence of the inheritance ...
    (microsoft.public.windows.server.security)
  • Re: do allowed perrmisions override denyed permissions?
    ... >> override the deny. ... But consider if you have the Deny on L1 and the Grant on L2... ... The only way to sort that out is with hierarchical precedence of the inheritance which is represented by the ordering of the ACEs in the ACL. ... The categories are inherited or explicit. ...
    (microsoft.public.windows.server.security)
  • Re: Denny SYNCHRONIZE to IUSR_%COMPUTERNAME% causes remote access to prompt for username
    ... [Ramon...on behalf of Luis García] ... If I deny write access from xcacls.vbs and after I grant read access, ... SYNCHRONIZE is still dennied, and IIS doesn't work. ...
    (microsoft.public.inetserver.iis.security)
  • Re: NTFS woes
    ... An explicit deny overrules and explicit or inherited grant. ... no permissions on those things to delete them. ...
    (microsoft.public.windows.server.security)
  • Re: controlling deleting of files with NTFS
    ... Hence when on this dir you deny delete to a group, ... grant delete to a user that is in the denied group, ... have (i.e. remove delete in the advanced view in the NTFS permissions ... On the top most folder I am trying to set the ntfs security on, ...
    (microsoft.public.security)