Re: db_denydatawriter

Does DenyWriter only deny using the actual UPDATE, DELETE, INSERT
statements
in queries, but not deny the user to graphically change data in EM?

If the user registred EM as 'sa' it she will be able to do anything

Is it possible she has some admin rights which override DenyWriter (though
I
doubt this).

Yes , it is

I checked her User & she has been assigned no server roles. Her DB Role
permissions include Public, DataReader & DenyDataWriter

Do the siomple test. She connects tio db via QA and tries to INSERT
something, does she get the error?



"Ant" <Ant@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:70FDAC21-1CDB-40CC-AEB5-E187178FE35E@xxxxxxxxxxxxxxxx
Hi Uri,

Thanks for your reply. I don't believe this is the case. There is no way
we
would have done the registration of EM with her, as she wasn't even
employed
at the time of the registration ( if I understand your meaning).

I'm wondering two things:

Does DenyWriter only deny using the actual UPDATE, DELETE, INSERT
statements
in queries, but not deny the user to graphically change data in EM?
or

Is it possible she has some admin rights which override DenyWriter (though
I
doubt this).

I checked her User & she has been assigned no server roles. Her DB Role
permissions include Public, DataReader & DenyDataWriter.

Does this help at all?

Many thanks though for your interest in this

Regards

Ant


"Uri Dimant" wrote:

Ant
Probably it is because you did the registration of EM with the user who
has
more powerfull permissions



"Ant" <Ant@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C049AA62-F777-4111-A93F-E60F54BB8332@xxxxxxxxxxxxxxxx
Hi,

I have given a colleage db_datareader rights & db_denydatawriter rights
but
when she uses enterprise manager she can still edit fields graphically
simply
by clicking onthe field, changing it & moving the focus away.

Is this normal & if so, how can this be safegaurded against?

Many thanks for any ideas on this

Ant





.