Re: Create table rights

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 08/31/05 

Date: Tue, 30 Aug 2005 17:38:33 -0600

Don't think a grant overrides a deny. Deny takes precedence.
It almost sounds like you may be referring to revoke which
removes a previously granted or denied permission. Revoke
and Deny are very different.

-Sue

On Tue, 30 Aug 2005 13:19:07 -0700, jaylou
<jaylou@discussions.microsoft.com> wrote:

>Kalen,
>>From my understanding Grant will override the exsisting deny as well as a
>deny staement will override the exsisting Grant. I may be wrong since I cant
>seem to get my user create table rights in my DB without giving DB_Owner
>rights.
>
>"Kalen Delaney" wrote:
>
>>
>> Hi Hari
>>
>> Which case are you talking about that GRANT will overrule a DENY?
>>
>> Thanks
>> Kalen Delaney
>>
>> "Hari Prasad" <hari_prasad_k@hotmail.com> wrote in message
>> news:Od%237RfPrFHA.528@TK2MSFTNGP09.phx.gbl...
>> >
>> > Hi,
>> >
>> > Looks like some one DENY the create table previlage for that user. But in
>> > this case a GRANT command will over rule the DENY.
>> > Could you post the exact error you are getting after running the GRANT
>> > statement.
>> >
>> > Thanks
>> > Hari
>> > SQL Server MVP
>> >
>> >
>> >
>> >
>> > "jaylou" <jaylou@discussions.microsoft.com> wrote in message
>> > news:8DF5770F-4D14-4ADE-A3F1-2A47AFB3AAD4@microsoft.com...
>> >> hi All,
>> >> I have given a user ddladmin to a database, but this user still can't
>> >> create
>> >> tables. I tried to "grant create tables to username" that ran
>> >> sucessfully
>> >> but still can't create a table in my DB.
>> >>
>> >> Can anyone tell me what I missed for this user? he can drop tables but
>> >> not
>> >> create them.
>> >> Thanks,
>> >> Joe
>> >>
>> >
>> >
>> >
>>
>>
>>
>>

Relevant Pages

  • Re: Create table rights
    ... you do not need to revoke it first. ... DENY in the syspermissions. ... and then GRANT directly to the user, ... >> removes a previously granted or denied permission. ...
    (microsoft.public.sqlserver.security)
  • Re: do allowed perrmisions override denyed permissions?
    ... I thought deny access was more of a useful way to do things *TO* them! ... only grant permissions. ... | Explicit Grant ACEs for Object | ... to sort that out is with hierarchical precedence of the inheritance ...
    (microsoft.public.windows.server.security)
  • Re: do allowed perrmisions override denyed permissions?
    ... >> override the deny. ... But consider if you have the Deny on L1 and the Grant on L2... ... The only way to sort that out is with hierarchical precedence of the inheritance which is represented by the ordering of the ACEs in the ACL. ... The categories are inherited or explicit. ...
    (microsoft.public.windows.server.security)
  • Re: Create table rights
    ... >From my understanding Grant will override the exsisting deny as well as a ... deny staement will override the exsisting Grant. ...
    (microsoft.public.sqlserver.security)
  • Re: Denny SYNCHRONIZE to IUSR_%COMPUTERNAME% causes remote access to prompt for username
    ... [Ramon...on behalf of Luis García] ... If I deny write access from xcacls.vbs and after I grant read access, ... SYNCHRONIZE is still dennied, and IIS doesn't work. ...
    (microsoft.public.inetserver.iis.security)