Re: Create table rights

From: jaylou (jaylou_at_discussions.microsoft.com)
Date: 08/31/05

  • Next message: Hari Prasad: "Re: Is there a script to return permissions for an SP?" 
    Date: Tue, 30 Aug 2005 17:25:29 -0700

    Now that opens 2 questions:
    1) is there a way to see if there are any denies against a user?
    2) do I need to revoke the deny then grant the create?

    Thanks this is great info!

    "Sue Hoegemeier" wrote:

    > Don't think a grant overrides a deny. Deny takes precedence.
    > It almost sounds like you may be referring to revoke which
    > removes a previously granted or denied permission. Revoke
    > and Deny are very different.
    >
    > -Sue
    >
    > On Tue, 30 Aug 2005 13:19:07 -0700, jaylou
    > <jaylou@discussions.microsoft.com> wrote:
    >
    > >Kalen,
    > >From my understanding Grant will override the exsisting deny as well as a
    > >deny staement will override the exsisting Grant. I may be wrong since I cant
    > >seem to get my user create table rights in my DB without giving DB_Owner
    > >rights.
    > >
    > >"Kalen Delaney" wrote:
    > >
    > >>
    > >> Hi Hari
    > >>
    > >> Which case are you talking about that GRANT will overrule a DENY?
    > >>
    > >> Thanks
    > >> Kalen Delaney
    > >>
    > >> "Hari Prasad" <hari_prasad_k@hotmail.com> wrote in message
    > >> news:Od%237RfPrFHA.528@TK2MSFTNGP09.phx.gbl...
    > >> >
    > >> > Hi,
    > >> >
    > >> > Looks like some one DENY the create table previlage for that user. But in
    > >> > this case a GRANT command will over rule the DENY.
    > >> > Could you post the exact error you are getting after running the GRANT
    > >> > statement.
    > >> >
    > >> > Thanks
    > >> > Hari
    > >> > SQL Server MVP
    > >> >
    > >> >
    > >> >
    > >> >
    > >> > "jaylou" <jaylou@discussions.microsoft.com> wrote in message
    > >> > news:8DF5770F-4D14-4ADE-A3F1-2A47AFB3AAD4@microsoft.com...
    > >> >> hi All,
    > >> >> I have given a user ddladmin to a database, but this user still can't
    > >> >> create
    > >> >> tables. I tried to "grant create tables to username" that ran
    > >> >> sucessfully
    > >> >> but still can't create a table in my DB.
    > >> >>
    > >> >> Can anyone tell me what I missed for this user? he can drop tables but
    > >> >> not
    > >> >> create them.
    > >> >> Thanks,
    > >> >> Joe
    > >> >>
    > >> >
    > >> >
    > >> >
    > >>
    > >>
    > >>
    > >>
    >
    >

  • Next message: Hari Prasad: "Re: Is there a script to return permissions for an SP?"

    Relevant Pages

    • Re: Create table rights
      ... you do not need to revoke it first. ... DENY in the syspermissions. ... and then GRANT directly to the user, ... >> removes a previously granted or denied permission. ...
      (microsoft.public.sqlserver.security)
    • Re: Create table rights
      ... >From my understanding Grant will override the exsisting deny as well as a ... deny staement will override the exsisting Grant. ...
      (microsoft.public.sqlserver.security)
    • Re: Create table rights
      ... Don't think a grant overrides a deny. ... It almost sounds like you may be referring to revoke which ... >deny staement will override the exsisting Grant. ...
      (microsoft.public.sqlserver.security)
    • Re: ORDER BY in VIEW not working
      ... Security via DCL (GRANT, DENY and REVOKE) that most programmers do ...
      (comp.databases.ms-sqlserver)
    • Re: do allowed perrmisions override denyed permissions?
      ... I thought deny access was more of a useful way to do things *TO* them! ... only grant permissions. ... | Explicit Grant ACEs for Object | ... to sort that out is with hierarchical precedence of the inheritance ...
      (microsoft.public.windows.server.security)