Wednesday, March 21, 2012

I want to prevent a login ID from doing Select

I want to disallow a login id from doing a 'Select' on
Table A. but can't.
What I did is Create a Login ID : User
Next, I access Table A's pemission and turn on red cross
under Select Column for the User row
Then log on to Quey Analyzer and do a select . I'm able
to do it( I expect to see permission denied message)
I couldn't even get it... Can someone advise ?
ThnksA user does not have any permissions on a database object unless they have
been granted permissions. Permissions can be granted directly to a users
but it better to grant permissions only to roles. This way, you can more
easily control security with user role membership.
The red X in Enterprise Manager is an explicit DENY. DENY is meaningful
only if the user was granted permissions (usually via some other role
membership) and you don't want a user/role to have this permission.
Usually, one only GRANTs permissions; DENY is used only in special cases.
The only way a user can access an object after an explicit DENY (as you have
apparently done) is if they are a member of a privileged database or server
role. Check to see if the user is a member of the sysadmin server role or
db_owner database role.
Hope this helps.
Dan Guzman
SQL Server MVP
"Jen" <anonymous@.discussions.microsoft.com> wrote in message
news:dc1001c40b34$4f09be20$a501280a@.phx.gbl...
> I want to disallow a login id from doing a 'Select' on
> Table A. but can't.
> What I did is Create a Login ID : User
> Next, I access Table A's pemission and turn on red cross
> under Select Column for the User row
> Then log on to Quey Analyzer and do a select . I'm able
> to do it( I expect to see permission denied message)
> I couldn't even get it... Can someone advise ?
> Thnks

No comments:

Post a Comment