<a href="http://g.adspeed.net/ad.php?do=clk&zid=15220&wd=468&ht=60&pair=as" target="_blank"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15220&wd=468&ht=60&pair=as" alt="i" width="468" height="60"/></a>
Log in
::
Register
::
Not logged in
Home
Tags
Articles
Editorials
Stairways
Forums
Scripts
Videos
Blogs
QotD
Books
Ask SSC
SQL Jobs
Training
Authors
About us
Contact us
Newsletters
Write for us
<a href="http://g.adspeed.net/ad.php?do=clk&zid=15491&wd=120&ht=300&pair=as" target="_top"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15491&wd=120&ht=300&pair=as" alt="i" width="120" height="300"/></a>
Recent Posts
Recent Posts
Popular Topics
Popular Topics
Home
Search
Members
Calendar
Who's On
Home
»
SQL Server 2005
»
SQL Server 2005 Security
»
Deny OR Revoke "Drop object" Permission
Deny OR Revoke "Drop object" Permission
Rate Topic
Display Mode
Topic Options
Author
Message
ramuvanparti
ramuvanparti
Posted Tuesday, August 11, 2009 5:47 AM
Old Hand
Group: General Forum Members
Last Login: Thursday, July 05, 2012 1:14 AM
Points: 326,
Visits: 392
Hi all,
I want deny or revoke users from dropping objects in SQL Server 2008/2005
where as they allow with truncate and delete rows permission.
Please help guys.
Regards
Ramu V
Post #768507
Jack Corbett
Jack Corbett
Posted Tuesday, August 11, 2009 8:39 AM
SSChampion
Group: General Forum Members
Last Login: Friday, May 17, 2013 12:22 PM
Points: 10,571,
Visits: 11,871
I'm not sure you can have truncate permissions without having DROP.
Jack Corbett
Applications Developer
Don't let the good be the enemy of the best. --
Paul Fleming
Check out these links on how to get faster and more accurate answers:
Forum Etiquette: How to post data/code on a forum to get the best help
Need an Answer? Actually, No ... You Need a Question
How to Post Performance Problems
Crosstabs and Pivots or How to turn rows into columns Part 1
Crosstabs and Pivots or How to turn rows into columns Part 2
Post #768667
Luke L
Luke L
Posted Tuesday, August 11, 2009 9:25 AM
SSCrazy
Group: General Forum Members
Last Login: 2 days ago @ 9:42 AM
Points: 2,891,
Visits: 5,858
One of the things that I've seen DDL triggers used for is a sanity check on dropped tables... It's one the more popular examples of DDL triggers I've seen in the MS documentation...
CREATE TRIGGER no_drop
ON DATABASE
FOR DROP_TABLE
AS
PRINT 'Tables cannot be dropped!'
ROLLBACK;
The above will keep everyone from dropping tables. You'd need to modify it to allow only certain users to drop the table, and/or just disable it when you need to drop something and then re-enable it when you are done...
-Luke.
To help us help you
read this
For better help with performance problems please
read this
Post #768716
ramuvanparti
ramuvanparti
Posted Tuesday, August 11, 2009 11:34 PM
Old Hand
Group: General Forum Members
Last Login: Thursday, July 05, 2012 1:14 AM
Points: 326,
Visits: 392
i have this thread which can solve the problem
http://www.sqlservercentral.com/Forums/Topic581296-359-2.aspx
thanks and regards
ramu
Post #769117
K. Brian Kelley
K. Brian Kelley
Posted Friday, August 21, 2009 6:25 PM
Keeper of the Duck
Group: Moderators
Last Login: Yesterday @ 1:55 PM
Points: 6,584,
Visits: 1,789
You also have to worry about ALTER TABLE. Here I explain the issue and why the DDL trigger works:
Granting limited permissions to create views in another schema in SQL Server - Part 2
K. Brian Kelley, CISA, MCSE, Security+, MVP - SQL Server
Regular Columnist (Security), SQLServerCentral.com
Author of
Introduction to SQL Server: Basic Skills for Any SQL Server User
|
Professional Development blog
|
Technical Blog
|
LinkedIn
|
Twitter
Post #775490
« Prev Topic
|
Next Topic »
Permissions
You
cannot
post new topics.
You
cannot
post topic replies.
You
cannot
post new polls.
You
cannot
post replies to polls.
You
cannot
edit your own topics.
You
cannot
delete your own topics.
You
cannot
edit other topics.
You
cannot
delete other topics.
You
cannot
edit your own posts.
You
cannot
edit other posts.
You
cannot
delete your own posts.
You
cannot
delete other posts.
You
cannot
post events.
You
cannot
edit your own events.
You
cannot
edit other events.
You
cannot
delete your own events.
You
cannot
delete other events.
You
cannot
send private messages.
You
cannot
send emails.
You
may
read topics.
You
cannot
rate topics.
You
cannot
vote within polls.
You
cannot
upload attachments.
You
may
download attachments.
You
cannot
post HTML code.
You
cannot
edit HTML code.
You
cannot
post IFCode.
You
cannot
post JavaScript.
You
cannot
post EmotIcons.
You
cannot
post or upload images.
Copyright © 2002-2013 Simple Talk Publishing. All Rights Reserved.
Privacy Policy.
Terms of Use.
Report Abuse.
