Revoke. How it can be used - SQL Server Forums

Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

All Forums

General SQL Server Forums

New to SQL Server Administration

Revoke. How it can be used

Author

Topic

y0zh
Yak Posting Veteran

60 Posts

Posted - 2010-05-05 : 03:40:08

How Revoke differences from Deny?
Could you give me example with

Revoke update on customers to Freduser

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2010-05-05 : 03:54:27

REVOKE: Removes a previously granted or denied permission.
DENY: Denies a permission to a principal. Prevents that principal from inheriting the permission through its group or role memberships.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog

y0zh
Yak Posting Veteran

60 Posts

Posted - 2010-05-05 : 05:23:10

Are there any differences?

Deny select on customer to Freduser
Grant select on customer to Freduser

and this one

Deny select on customer to Freduser
Revoke select on customer to Freduser

webfred
Master Smack Fu Yak Hacker

8781 Posts

Posted - 2010-05-05 : 05:56:10

Think about this:
There is a group XY with permissions
The group has the permission select on customer and many others...
Freduser is not a member of this group unitl now
deny select on customer to Freduser
If now Freduser becomes a member of the group XY he still has no permission on select on customer but all other permissions of the group XY

I hope this is a bit more clear to you.

No, you're never too old to Yak'n'Roll if you're too young to die.

Subscribe to SQLTeam.com

SQLTeam.com Articles via RSS

SQLTeam.com Weblog via RSS

- Advertisement -

Resources