Re: SQL2005 grant user access to certain tables



REMOVE that user from the db_datareader role -that role allows reading ALL
tables.

Create a new Role, add the user to the new Role.
Then for each table that the user needs to read, give SELECT permission to
the new Role. (By doing it for the Role, if you need to allow another user
(vacations, etc.) to do the same thing, you just add the additional user to
the same Role.)

Verify that the user is not a member of any other Role that has permissions
to SELECT data from the tables.

Make sure that the 'Public' does not have SELECT permissions for any
tables -PUBLIC 'should' not have any permission for any activity for any
object.

--
Arnie Rowland, Ph.D.
Westwood Consulting, Inc

Most good judgment comes from experience.
Most experience comes from bad judgment.
- Anonymous


<walanta> wrote in message
news:3bore29vs8a6ur4t0k68tfnfsk5n1agb0k@xxxxxxxxxx
Hi,

We have a database on SQL2005 with 50 tables.
We want to grant someone read table rights to only some tables.


Right now we created a SQL account and he can connect and read all
tables in this database.

I gave this user as db_datareader in Database role membership in
security.

How can I easily stop that? Is there a place I can check to deny him
any access and just grant him a few tables? Thanks!!


.



Relevant Pages

  • Re: T-SQL Debugger Error
    ... denied on object 'sp_sdidebug', database 'master', owner 'dbo'. ... and when I grant the permission of sp_sdidebug, ... I am using following statement to grant the permission. ...
    (comp.databases.ms-sqlserver)
  • RE: Security context of stored procedure
    ... Suppose there are three users in a database TEST_CHAIN, ... simple stored procedure: ... also grant it to test_sp2 ... SELECT permission denied on object 'authors', database 'test_chain', owner ...
    (microsoft.public.sqlserver.security)
  • Re: GRANT BACKUP DATABASE
    ... I grant to one user the permission to backup one database but now i cant ...
    (microsoft.public.sqlserver.server)
  • Re: low permission cannot convert from A97 to A2000/2003
    ... Delete is a separate permission. ... You need open exclusive permission on the database to ... > The admin user has full privileges. ... > as we wont be importing those files from them, and the contractor will be ...
    (microsoft.public.access.security)
  • Re: low permission cannot convert from A97 to A2000/2003
    ... Delete is a separate permission. ... You need open exclusive permission on the database to ... > The admin user has full privileges. ... > as we wont be importing those files from them, and the contractor will be ...
    (microsoft.public.access.conversion)