DENY ALTER ANY DATABASE DDL TRIGGER TO UserAccount

• Welsh Corgi

  SSC Guru

  Points: 116520

  More actions

  October 18, 2012 at 7:59 am

  #283856

  I executed the following command to prevent Users from cheanging or dropping an Audit Trigger.

  DENY ALTER ANY DATABASE DDL TRIGGER TO UserAccount

  What is the proper way to restore this permission?

  Is it?

  REVOKE ALTER ANY DATABASE DDL TRIGGER TO UserAccount

  Thanks.

  For better, quicker answers on T-SQL questions, click on the following...
  http://www.sqlservercentral.com/articles/Best+Practices/61537/

  For better answers on performance questions, click on the following...
  http://www.sqlservercentral.com/articles/SQLServerCentral/66909/

• John Mitchell-245523

  SSC Guru

  Points: 148809

  More actions

  October 18, 2012 at 8:05 am

  #1550511

  That'll revoke the deny, but won't necessarily restore the permission. You'll need to do an explicit GRANT if the user doesn't have the permission through any other avenue.

  John

• Welsh Corgi

  SSC Guru

  Points: 116520

  More actions

  October 18, 2012 at 10:00 am

  #1550586

  John Mitchell-245523 (10/18/2012)

  ---

  That'll revoke the deny, but won't necessarily restore the permission. You'll need to do an explicit GRANT if the user doesn't have the permission through any other avenue.

  John

  They already have the permission as a member of the fixed database role db_owner.

  Thanks.

  For better, quicker answers on T-SQL questions, click on the following...
  http://www.sqlservercentral.com/articles/Best+Practices/61537/

  For better answers on performance questions, click on the following...
  http://www.sqlservercentral.com/articles/SQLServerCentral/66909/