Dropping Permissions

Does anyone know what is the statement to drop the
following permissions in QA (Not DENY).
There are too many of them to drop from the E.M.
GRANT REFERENCES , SELECT , UPDATE , INSERT , DELETE
ON [dbo].[mytable] TO [public]
GO
Thanks.
look at the REVOKE statement.
Example: REVOKE SELECT ON Budget_Data TO Mary
"Eric" wrote:

> Does anyone know what is the statement to drop the
> following permissions in QA (Not DENY).
> There are too many of them to drop from the E.M.
>
> GRANT REFERENCES , SELECT , UPDATE , INSERT , DELETE
> ON [dbo].[mytable] TO [public]
> GO
> Thanks.
>
|||Thanks...........
[vbcol=seagreen]
>--Original Message--
>look at the REVOKE statement.
>Example: REVOKE SELECT ON Budget_Data TO Mary
>
>"Eric" wrote:
DELETE
>.
>

Dropping Permissions

Does anyone know what is the statement to drop the
following permissions in QA (Not DENY).
There are too many of them to drop from the E.M.
GRANT REFERENCES , SELECT , UPDATE , INSERT , DELETE
ON [dbo].[mytable] TO [public]
GO
Thanks.look at the REVOKE statement.
Example: REVOKE SELECT ON Budget_Data TO Mary
"Eric" wrote:
> Does anyone know what is the statement to drop the
> following permissions in QA (Not DENY).
> There are too many of them to drop from the E.M.
>
> GRANT REFERENCES , SELECT , UPDATE , INSERT , DELETE
> ON [dbo].[mytable] TO [public]
> GO
> Thanks.
>|||Thanks...........
>--Original Message--
>look at the REVOKE statement.
>Example: REVOKE SELECT ON Budget_Data TO Mary
>
>"Eric" wrote:
>> Does anyone know what is the statement to drop the
>> following permissions in QA (Not DENY).
>> There are too many of them to drop from the E.M.
>>
>> GRANT REFERENCES , SELECT , UPDATE , INSERT ,
DELETE
>> ON [dbo].[mytable] TO [public]
>> GO
>> Thanks.
>.
>

Dropping Permissions

Does anyone know what is the statement to drop the
following permissions in QA (Not DENY).
There are too many of them to drop from the E.M.
GRANT REFERENCES , SELECT , UPDATE , INSERT , DELETE
ON [dbo].[mytable] TO [public]
GO
Thanks.look at the REVOKE statement.
Example: REVOKE SELECT ON Budget_Data TO Mary
"Eric" wrote:

> Does anyone know what is the statement to drop the
> following permissions in QA (Not DENY).
> There are too many of them to drop from the E.M.
>
> GRANT REFERENCES , SELECT , UPDATE , INSERT , DELETE
> ON [dbo].[mytable] TO [public]
> GO
> Thanks.
>|||Thanks...........

>--Original Message--
>look at the REVOKE statement.
>Example: REVOKE SELECT ON Budget_Data TO Mary
>
>"Eric" wrote:
>
DELETE[vbcol=seagreen]
>.
>

Drop database permissions

how can I deny drop database from "database creators" servr role?
You could try DENY ALTER DATABASE. I'm not sure, though...
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
Blog: http://solidqualitylearning.com/blogs/tibor/
"Amit Eshet" <Amit Eshet@.discussions.microsoft.com> wrote in message
news:CDA547DA-EE96-4B1D-8FB3-35AA9B48D920@.microsoft.com...
> how can I deny drop database from "database creators" servr role?
|||Server: Msg 165, Level 16, State 1, Line 1
Privilege ALTER DATABASE may not be granted or revoked.
"Tibor Karaszi" wrote:

> You could try DENY ALTER DATABASE. I'm not sure, though...
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
> Blog: http://solidqualitylearning.com/blogs/tibor/
>
> "Amit Eshet" <Amit Eshet@.discussions.microsoft.com> wrote in message
> news:CDA547DA-EE96-4B1D-8FB3-35AA9B48D920@.microsoft.com...
>
|||Hi Amit
I believe what you want to try is not possible
1) Changes cannot be made to Fixed Server Roles.
2) Once a user is granted Database Creator permissions, by default he
becomes the database owner. And the database owner cannot be denied the
rights to drop his database.
Regards
Amer M J
MCP
"Amit Eshet" wrote:
[vbcol=seagreen]
>
> Server: Msg 165, Level 16, State 1, Line 1
> Privilege ALTER DATABASE may not be granted or revoked.
>
> "Tibor Karaszi" wrote:
|||thanks,
but now the user can drop other databases to (am I wrong?)
"Amer M J" wrote:
[vbcol=seagreen]
> Hi Amit
> I believe what you want to try is not possible
> 1) Changes cannot be made to Fixed Server Roles.
> 2) Once a user is granted Database Creator permissions, by default he
> becomes the database owner. And the database owner cannot be denied the
> rights to drop his database.
> Regards
> Amer M J
> MCP
> "Amit Eshet" wrote:
|||Hi Amit
Yes, once the user has been added to the Database Creators group, he gains a
default right to drop databases and as i mentioned earlier tht changes are
not allowed to the fixed server roles.
"Amit Eshet" wrote:
[vbcol=seagreen]
> thanks,
> but now the user can drop other databases to (am I wrong?)
> "Amer M J" wrote:

Drop database permissions

how can I deny drop database from "database creators" servr role?You could try DENY ALTER DATABASE. I'm not sure, though...
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
Blog: http://solidqualitylearning.com/blogs/tibor/
"Amit Eshet" <Amit Eshet@.discussions.microsoft.com> wrote in message
news:CDA547DA-EE96-4B1D-8FB3-35AA9B48D920@.microsoft.com...
> how can I deny drop database from "database creators" servr role?|||Server: Msg 165, Level 16, State 1, Line 1
Privilege ALTER DATABASE may not be granted or revoked.
"Tibor Karaszi" wrote:

> You could try DENY ALTER DATABASE. I'm not sure, though...
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
> Blog: http://solidqualitylearning.com/blogs/tibor/
>
> "Amit Eshet" <Amit Eshet@.discussions.microsoft.com> wrote in message
> news:CDA547DA-EE96-4B1D-8FB3-35AA9B48D920@.microsoft.com...
>|||Hi Amit
I believe what you want to try is not possible
1) Changes cannot be made to Fixed Server Roles.
2) Once a user is granted Database Creator permissions, by default he
becomes the database owner. And the database owner cannot be denied the
rights to drop his database.
Regards
Amer M J
MCP
"Amit Eshet" wrote:
[vbcol=seagreen]
>
> Server: Msg 165, Level 16, State 1, Line 1
> Privilege ALTER DATABASE may not be granted or revoked.
>
> "Tibor Karaszi" wrote:
>|||thanks,
but now the user can drop other databases to (am I wrong?)
"Amer M J" wrote:
[vbcol=seagreen]
> Hi Amit
> I believe what you want to try is not possible
> 1) Changes cannot be made to Fixed Server Roles.
> 2) Once a user is granted Database Creator permissions, by default he
> becomes the database owner. And the database owner cannot be denied the
> rights to drop his database.
> Regards
> Amer M J
> MCP
> "Amit Eshet" wrote:
>|||Hi Amit
Yes, once the user has been added to the Database Creators group, he gains a
default right to drop databases and as i mentioned earlier tht changes are
not allowed to the fixed server roles.
"Amit Eshet" wrote:
[vbcol=seagreen]
> thanks,
> but now the user can drop other databases to (am I wrong?)
> "Amer M J" wrote:
>

Drop database permissions

how can I deny drop database from "database creators" servr role?You could try DENY ALTER DATABASE. I'm not sure, though...
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
Blog: http://solidqualitylearning.com/blogs/tibor/
"Amit Eshet" <Amit Eshet@.discussions.microsoft.com> wrote in message
news:CDA547DA-EE96-4B1D-8FB3-35AA9B48D920@.microsoft.com...
> how can I deny drop database from "database creators" servr role?|||Server: Msg 165, Level 16, State 1, Line 1
Privilege ALTER DATABASE may not be granted or revoked.
"Tibor Karaszi" wrote:
> You could try DENY ALTER DATABASE. I'm not sure, though...
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
> Blog: http://solidqualitylearning.com/blogs/tibor/
>
> "Amit Eshet" <Amit Eshet@.discussions.microsoft.com> wrote in message
> news:CDA547DA-EE96-4B1D-8FB3-35AA9B48D920@.microsoft.com...
> > how can I deny drop database from "database creators" servr role?
>|||Hi Amit
I believe what you want to try is not possible
1) Changes cannot be made to Fixed Server Roles.
2) Once a user is granted Database Creator permissions, by default he
becomes the database owner. And the database owner cannot be denied the
rights to drop his database.
Regards
Amer M J
MCP
"Amit Eshet" wrote:
>
> Server: Msg 165, Level 16, State 1, Line 1
> Privilege ALTER DATABASE may not be granted or revoked.
>
> "Tibor Karaszi" wrote:
> > You could try DENY ALTER DATABASE. I'm not sure, though...
> >
> > --
> > Tibor Karaszi, SQL Server MVP
> > http://www.karaszi.com/sqlserver/default.asp
> > http://www.solidqualitylearning.com/
> > Blog: http://solidqualitylearning.com/blogs/tibor/
> >
> >
> > "Amit Eshet" <Amit Eshet@.discussions.microsoft.com> wrote in message
> > news:CDA547DA-EE96-4B1D-8FB3-35AA9B48D920@.microsoft.com...
> > > how can I deny drop database from "database creators" servr role?
> >
> >|||thanks,
but now the user can drop other databases to (am I wrong?)
"Amer M J" wrote:
> Hi Amit
> I believe what you want to try is not possible
> 1) Changes cannot be made to Fixed Server Roles.
> 2) Once a user is granted Database Creator permissions, by default he
> becomes the database owner. And the database owner cannot be denied the
> rights to drop his database.
> Regards
> Amer M J
> MCP
> "Amit Eshet" wrote:
> >
> >
> > Server: Msg 165, Level 16, State 1, Line 1
> > Privilege ALTER DATABASE may not be granted or revoked.
> >
> >
> > "Tibor Karaszi" wrote:
> >
> > > You could try DENY ALTER DATABASE. I'm not sure, though...
> > >
> > > --
> > > Tibor Karaszi, SQL Server MVP
> > > http://www.karaszi.com/sqlserver/default.asp
> > > http://www.solidqualitylearning.com/
> > > Blog: http://solidqualitylearning.com/blogs/tibor/
> > >
> > >
> > > "Amit Eshet" <Amit Eshet@.discussions.microsoft.com> wrote in message
> > > news:CDA547DA-EE96-4B1D-8FB3-35AA9B48D920@.microsoft.com...
> > > > how can I deny drop database from "database creators" servr role?
> > >
> > >|||Hi Amit
Yes, once the user has been added to the Database Creators group, he gains a
default right to drop databases and as i mentioned earlier tht changes are
not allowed to the fixed server roles.
"Amit Eshet" wrote:
> thanks,
> but now the user can drop other databases to (am I wrong?)
> "Amer M J" wrote:
> > Hi Amit
> >
> > I believe what you want to try is not possible
> >
> > 1) Changes cannot be made to Fixed Server Roles.
> > 2) Once a user is granted Database Creator permissions, by default he
> > becomes the database owner. And the database owner cannot be denied the
> > rights to drop his database.
> >
> > Regards
> > Amer M J
> > MCP
> >
> > "Amit Eshet" wrote:
> >
> > >
> > >
> > > Server: Msg 165, Level 16, State 1, Line 1
> > > Privilege ALTER DATABASE may not be granted or revoked.
> > >
> > >
> > > "Tibor Karaszi" wrote:
> > >
> > > > You could try DENY ALTER DATABASE. I'm not sure, though...
> > > >
> > > > --
> > > > Tibor Karaszi, SQL Server MVP
> > > > http://www.karaszi.com/sqlserver/default.asp
> > > > http://www.solidqualitylearning.com/
> > > > Blog: http://solidqualitylearning.com/blogs/tibor/
> > > >
> > > >
> > > > "Amit Eshet" <Amit Eshet@.discussions.microsoft.com> wrote in message
> > > > news:CDA547DA-EE96-4B1D-8FB3-35AA9B48D920@.microsoft.com...
> > > > > how can I deny drop database from "database creators" servr role?
> > > >
> > > >