InstantForum.NET v2.9.0SQLServerCentralhttp://www.sqlservercentral.com/Forums/notifications@sqlservercentral.comSun, 19 May 2013 17:25:28 GMT20http://www.sqlservercentral.com/Forums/Topic1396301-6-1.aspx[quote][b]Welsh Corgi (12/14/2012)[/b][hr]This is not a bug.The User has been denied the CREATE VIEW Permission.Try revoking the deny permission.REVOKE CREATE VIEW TO [UserName][/quote]I have issued the followingUSE [dbname]GOREVOKE CREATE VIEW FROM <username>It completed successfully; but the user has been out of office - so I cannot test it yet. It's his domain account and we're not allowed to have his password. Since it's 2000, I cannot use EXECUTE AS, correct?Tue, 18 Dec 2012 13:45:19 GMTMSSQL_NOOBhttp://www.sqlservercentral.com/Forums/Topic1396301-6-1.aspx[quote][b]MSSQL_NOOB (12/14/2012)[/b][hr][quote][b]Welsh Corgi (12/13/2012)[/b][hr]What is the specific Error Message?[/quote]CREATE VIEWS permission denied in database 'DBNAME'.[u]Edit[/u]:I actually found http://social.msdn.microsoft.com/forums/en-US/sqlsecurity/thread/bfd630bc-e405-4f9d-b63f-f673b3f4ccf5/ that has the same issue. They are saying it was a bug in MS.[/quote]This is not a bug.The User has been denied the CREATE VIEW Permission.Try revoking the deny permission.REVOKE CREATE VIEW TO [UserName]Fri, 14 Dec 2012 08:59:49 GMTWelsh Corgihttp://www.sqlservercentral.com/Forums/Topic1396301-6-1.aspx[quote][b]Welsh Corgi (12/13/2012)[/b][hr]What is the specific Error Message?[/quote]CREATE VIEWS permission denied in database 'DBNAME'.[u]Edit[/u]:I actually found http://social.msdn.microsoft.com/forums/en-US/sqlsecurity/thread/bfd630bc-e405-4f9d-b63f-f673b3f4ccf5/ that has the same issue. They are saying it was a bug in MS.Fri, 14 Dec 2012 08:40:05 GMTMSSQL_NOOBhttp://www.sqlservercentral.com/Forums/Topic1396301-6-1.aspxI clicked on the database name, Security tree, Users, right click his Username, Properties, Securables on SSMS2008. There is nothing on the Permissions: Explicit. When I run [quote]USE [dbname]GOEXEC sp_helpprotect NULL, 'john'[/quote]I get [quote]Msg 15330, Level 11, State 1, Procedure sp_helprotect, Line 346There are no matching rows on which to report.[/quote]Fri, 14 Dec 2012 08:35:28 GMTMSSQL_NOOBhttp://www.sqlservercentral.com/Forums/Topic1396301-6-1.aspx[quote][b]MSSQL_NOOB (12/13/2012)[/b][hr]MSSQL 2000A username has a DB_OWNER privilege. But when he tries to create views OR create dts package; it gives him a permissions error.[/quote]What is the specific Error Message?Thu, 13 Dec 2012 13:46:31 GMTWelsh Corgihttp://www.sqlservercentral.com/Forums/Topic1396301-6-1.aspx[quote][b]MSSQL_NOOB (12/13/2012)[/b][hr]There is no explicit permissions granted / deny on that username.[/quote]How did you verify that there is not an explicit deny for that User?[code="sql"]EXEC sp_helprotect NULL, 'UserName'[/code]Is that User a member of a role that has a DENY?Adding the User to the db_ddladmin Fixed Database is not going to help because the db_Owner role includes the permissions of db_ddlAdmin.I would double check because the error that the user is getting would suggest that there is a DENY out there.Good luck.Thu, 13 Dec 2012 13:32:01 GMTWelsh Corgihttp://www.sqlservercentral.com/Forums/Topic1396301-6-1.aspxThere is no explicit permissions granted / deny on that username.Thu, 13 Dec 2012 13:00:37 GMTMSSQL_NOOBhttp://www.sqlservercentral.com/Forums/Topic1396301-6-1.aspxCreate DTS packages is in the msdb database. You didn't indicate what database you're trying to give permissions.If I remember right for SQL Server 2000, even if you're a DB_Owner member, an explicit DENY such as DENY CREATE VIEW would stop the user from doing so. Check to see if that's the case in the database you're working in.Thu, 13 Dec 2012 12:32:40 GMTK. Brian Kelleyhttp://www.sqlservercentral.com/Forums/Topic1396301-6-1.aspxMSSQL 2000A username has a DB_OWNER privilege. But when he tries to create views OR create dts package; it gives him a permissions error. Should I grant him the db_ddladmin instead? [u]Edit[/u]Look at http://technet.microsoft.com/en-us/library/cc966453.aspxSeems like [i]db_ddladmin [/i]is for [i]Runs any Data Definition Language (DDL) command in a database.[/i]Thanks.Thu, 13 Dec 2012 10:46:32 GMTMSSQL_NOOB