<a href="http://g.adspeed.net/ad.php?do=clk&zid=15220&wd=468&ht=60&pair=as" target="_blank"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15220&wd=468&ht=60&pair=as" alt="i" width="468" height="60"/></a>
Log in
::
Register
::
Not logged in
Home
Tags
Articles
Editorials
Stairways
Forums
Scripts
Videos
Blogs
QotD
Books
Ask SSC
SQL Jobs
Training
Authors
About us
Contact us
Newsletters
Write for us
<a href="http://g.adspeed.net/ad.php?do=clk&zid=15491&wd=120&ht=300&pair=as" target="_top"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15491&wd=120&ht=300&pair=as" alt="i" width="120" height="300"/></a>
Recent Posts
Recent Posts
Popular Topics
Popular Topics
Home
Search
Members
Calendar
Who's On
Home
»
SQL Server 2008
»
Security (SS2K8)
»
A user belongs to multiple groups
A user belongs to multiple groups
Rate Topic
Display Mode
Topic Options
Author
Message
Biank
Biank
Posted Monday, March 18, 2013 6:35 PM
SSC Rookie
Group: General Forum Members
Last Login: Yesterday @ 4:55 PM
Points: 48,
Visits: 300
Hello,
I'm a bit confused about permissions. If a user, User1, belong to multiple groups, say
ADGroup1 --> SQLGroup2 --> SELECT permission on Table1, Table2 in DB1
ADGroup2 --> SQLGroup3 --> INSERT/UPDATE permission on Table1 and Table3 in DB1
ADGroup3 --> SQLGroup9 --> VIEW Definition to DB3
In this case, what permission the User1 has it? I think all of it since this user is part of those 3 AD groups and these AD groups are member of SQL groups that the permissions have been set.
Is this right or is there something that I missed?
Thanks much!!
Post #1432427
Evil Kraig F
Evil Kraig F
Posted Monday, March 18, 2013 6:52 PM
SSCertifiable
Group: General Forum Members
Last Login: Today @ 5:22 PM
Points: 5,670,
Visits: 6,109
All security in SQL Server is cumulative unless an explicity DENY in one group overrides a setting from another. That includes both internal (SQL) and external (AD) group associations. So you're correct, they'd have every permission listed above, barring another one that's not listed with a DENY to a particular one.
- Craig Farrell
Never stop learning, even if it hurts. Ego bruises are practically mandatory as you learn unless you've never risked enough to make a mistake.
For better assistance in answering your questions
|
Forum Netiquette
For index/tuning help, follow these directions.
|
Tally Tables
Twitter: @AnyWayDBA
Post #1432429
Biank
Biank
Posted Monday, March 18, 2013 8:24 PM
SSC Rookie
Group: General Forum Members
Last Login: Yesterday @ 4:55 PM
Points: 48,
Visits: 300
thanks a lot for clarification.
Post #1432439
« Prev Topic
|
Next Topic »
Permissions
You
cannot
post new topics.
You
cannot
post topic replies.
You
cannot
post new polls.
You
cannot
post replies to polls.
You
cannot
edit your own topics.
You
cannot
delete your own topics.
You
cannot
edit other topics.
You
cannot
delete other topics.
You
cannot
edit your own posts.
You
cannot
edit other posts.
You
cannot
delete your own posts.
You
cannot
delete other posts.
You
cannot
post events.
You
cannot
edit your own events.
You
cannot
edit other events.
You
cannot
delete your own events.
You
cannot
delete other events.
You
cannot
send private messages.
You
cannot
send emails.
You
may
read topics.
You
cannot
rate topics.
You
cannot
vote within polls.
You
cannot
upload attachments.
You
may
download attachments.
You
cannot
post HTML code.
You
cannot
edit HTML code.
You
cannot
post IFCode.
You
cannot
post JavaScript.
You
cannot
post EmotIcons.
You
cannot
post or upload images.
Copyright © 2002-2013 Simple Talk Publishing. All Rights Reserved.
Privacy Policy.
Terms of Use.
Report Abuse.
