Home Forums SQL Server 2005 Administering Difference between db_datareader and db_denydatawriter RE: Difference between db_datareader and db_denydatawriter

  • January 13, 2011 at 3:53 am

    #1272919

    Koen (da-zero) (1/13/2011)

    Or do you deny access first to everyone and then give specific access to some resources?

    That won't work. Deny takes precedence over grant.

    So if you make everyone a member of denydatawriter then grant some insert permissions, the people granted insert permissions will still not be able to insert, because the deny is more powerful.

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass