Post reply

SQL Server Windows Authentication with multiple Groups

  • February 16, 2012 at 8:49 am

    #1447957

    DENY overrides GRANT.

    Try REVOKE instead.

    -- Gianluca Sartori

  • February 16, 2012 at 9:12 am

    #1447982

    Thanks for responding...will that allow the user to connect under the other group ?

  • February 16, 2012 at 9:29 am

    #1447998

    I believe so. Try it yourself and, possibly, let us know.

    -- Gianluca Sartori

  • February 16, 2012 at 10:05 am

    #1448024

    YES...that worked !

    Thank You...Andy

  • February 16, 2012 at 10:13 am

    #1448033

    Great! Thanks for the feedback.

    However, please make sure that the REVOKE command did not REVOKE the DENY specification.

    I know it could sound confusing and I'll try to expand it a bit more...

    When you GRANT a privilege to a login/user, you can revoke that privilege using REVOKE.

    The same applies to DENY: if you want to delete the DENY privilege, you use REVOKE again.

    Long story short: if you just REVOKED connect, you did nothing but delete the DENY privileges. You should REVOKE once again to remove any GRANTs still in place.

    -- Gianluca Sartori

Viewing 5 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic. Login to reply