DENY permission

Hi ,
i have set up to db roles "Admin" which have been
granted select , delete , insert , update
and "test" which has been granted select and DENY update
i have set up a user "user1" account which is part of
the "Admin" and "test" db role.
In this case will "user1" be denied the ability to
UPDATE ?
AND if i also set up user1 as a system administrator
fixed server role besides the 2 db role above , will the
DENY update has any effect on user1 ?
thks & rdgsHi,
Answer to your queries:-
In this case will "user1" be denied the ability to UPDATE ?
Ans: - Yes, User will not be able to select and update.
if i also set up user1 as a system administrator fixed server role besides
the 2 db role above , will the
DENY update has any effect on user1 ?
Ans: - Sysadmin role will override all the roles or Deny permissions. The
user with SYADMIN role can do any functionality in the SQL server
as well as all databases.
Thanks
Hari
MCDBA
"maxzsim" <anonymous@.discussions.microsoft.com> wrote in message
news:0d4a01c484cd$c77bfbd0$a301280a@.phx.gbl...
> Hi ,
> i have set up to db roles "Admin" which have been
> granted select , delete , insert , update
> and "test" which has been granted select and DENY update
> i have set up a user "user1" account which is part of
> the "Admin" and "test" db role.
> In this case will "user1" be denied the ability to
> UPDATE ?
> AND if i also set up user1 as a system administrator
> fixed server role besides the 2 db role above , will the
> DENY update has any effect on user1 ?
> thks & rdgs|||IN addition permissions are cumulative across all of the roles, etc which
apply to a user, THEN subtract out all of the DENY permissions... ( Deny
overrides a grant.)
--
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"maxzsim" <anonymous@.discussions.microsoft.com> wrote in message
news:0d4a01c484cd$c77bfbd0$a301280a@.phx.gbl...
> Hi ,
> i have set up to db roles "Admin" which have been
> granted select , delete , insert , update
> and "test" which has been granted select and DENY update
> i have set up a user "user1" account which is part of
> the "Admin" and "test" db role.
> In this case will "user1" be denied the ability to
> UPDATE ?
> AND if i also set up user1 as a system administrator
> fixed server role besides the 2 db role above , will the
> DENY update has any effect on user1 ?
> thks & rdgs