|
|
|
SSC-Enthusiastic
      
Group: General Forum Members
Last Login: Tuesday, February 01, 2011 3:13 AM
Points: 139,
Visits: 282
|
|
Hi dugi,
If i grant create table and alter permission, then the user can drop the table i have crosschecked, but if deny createtable and alter table then the user can't drop table.
So how fix this.
Thanks, Anjan
|
|
|
|
|
Ten Centuries
      
Group: General Forum Members
Last Login: Tuesday, April 02, 2013 1:48 AM
Points: 1,252,
Visits: 3,367
|
|
anjan.ashok (10/9/2008)
Hi dugi, If i grant create table and alter permission, then the user can drop the table i have crosschecked, but if deny createtable and alter table then the user can't drop table. So how fix this.  Thanks, Anjan
You have confusion attack, try from begining create the user then add datawriter role then run this script:
use [Your_Database] GO GRANT INSERT TO [Your_User] GO use [Your_Database] GO GRANT SELECT TO [Your_User] GO use [Your_Database] GO GRANT UPDATE TO [Your_User] GO use [Your_Database] GO DENY DELETE TO [Your_User] GO use [Your_Database] GO GRANT ALTER TO [Your_User] GO use [Your_Database] GO GRANT CREATE TABLE TO [Your_User] GO use [Your_Database] GO
============================================================ SELECT YOUR PROBLEM FROM SSC.com WHERE PROBLEM DESCRIPTION = http://www.sqlservercentral.com/articles/Best+Practices/61537/
|
|
|
|
|
Grasshopper
      
Group: General Forum Members
Last Login: Yesterday @ 7:02 AM
Points: 15,
Visits: 136
|
|
Hi, i have similar problem sometime ago. I have a user that need to be dbo for some reason but i neet to limited to "no drop".
i found the solution using DENY ALTER ON SCHEMA::[dbo] to [someuser]
|
|
|
|