Re: db_denydatareader Role

From: Dan Guzman (guzmanda_at_nospam-online.sbcglobal.net)
Date: 09/05/05 

Date: Mon, 5 Sep 2005 13:16:17 -0500

Is the user a member of the sysadmin fixed server role, either directly or
via Windows group membership? In that case, the user is 'dbo' in all
databases and permissions are not checked. 

-- 
Hope this helps.
Dan Guzman
SQL Server MVP
<sajid_yusuf@yahoo.com> wrote in message 
news:1125935568.459784.70100@g49g2000cwa.googlegroups.com...
> Hi!,
>
> I created a user in a database and added him to db_denydatareader role
> but still when he logs on using his user name he can browse all the
> records. Where as the definition says that he "Cannot select any data
> from any user table in the database". Can anyone help me implement this
> on my database.
>
> Thanks in advance
>

Relevant Pages

  • Re: Permission clarification - dbo vs domainuser.dbo
    ... database is mapped to the special user inside each database called dbo. ... any object created by any member of the sysadmin fixed server role ...
    (microsoft.public.sqlserver.security)
  • Re: Triggers on Insert, Delete
    ... I guess it's the problem with permissions. ... the db_owner fixed database role in the master database ... and members of the sysadmin fixed server role, ...
    (microsoft.public.sqlserver.server)
  • Re: System Administrator Implied Permissions
    ... > db_owner an implied permission for the fixed server role ... functions on the owned database outside the database context, ... > SQL Server initially creates the 'sa' user. ...
    (microsoft.public.sqlserver.security)
  • Re: What type of Server Roles to assign for Backup and Recovery
    ... Any member of db_backupoperator can perform backups on the same database. ... Members of the fixed server role, dbcreator, can create databases. ... and remove logins from these roles as required. ...
    (microsoft.public.sqlserver.security)
  • Re: Set Identity_Insert On throws error
    ... fixed server role, and the db_owner and db_ddladmin fixed database ... > The current user is not the database or object owner of table ... Can anyone tell me how I can grant permission to ...
    (microsoft.public.sqlserver.security)