Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Group & user in group permission Expand / Collapse
Author
Message
Posted Sunday, November 9, 2008 11:21 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Monday, December 15, 2008 5:40 PM
Points: 6, Visits: 71
Hello all,

I have a problem with permission issue.
I have added a group and set its permission to grant SELECT, deny INSERT/UPDATE/DELETE.

However, there are users in this group that is supposed to have grant permission for SELECT/INSERT/UPDATE/DELETE.

Is there an alternative way besides adding each user ID in the server?

FYI, user ID are from Active Directory (windows login authentication).
Post #599651
Posted Monday, November 10, 2008 6:08 AM
SSCarpal Tunnel

SSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal Tunnel

Group: General Forum Members
Last Login: Thursday, August 7, 2014 2:08 AM
Points: 4,432, Visits: 4,171
Instead of deny INSERT/UPDATE/DELETE revoke those permissions. So the users which have been granted those right either individually or through some other group will be able to insert/update/delete, but those which are only mber of your group won't have permission to do so.

Always be careful using DENY, because it will override any GRANT unless the user is member of the db_owner role.


Markus Bohse
Post #599798
Posted Tuesday, November 11, 2008 8:38 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Monday, December 15, 2008 5:40 PM
Points: 6, Visits: 71
Hello Marcus. Thanks for replying.

I have revoke insert/delete/update to the group by clearing the appropriate box.
But now all users in the group can edit the data in the tables, not only the users that I have marked 'tick' in the insert/delete/update box.

How to prevent other users in the group from editing data?
Post #601082
Posted Wednesday, November 12, 2008 2:34 AM
SSCarpal Tunnel

SSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal Tunnel

Group: General Forum Members
Last Login: Thursday, August 7, 2014 2:08 AM
Points: 4,432, Visits: 4,171
I think the best option in your case is to create two groups. One group with select\update\insert and delete permissions and another one with only select. Then add the users who need write permissions to the first group and the users with only read permission to the second group.


Markus Bohse
Post #601199
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse