Conflict of Permissions by NT Groups

Hi,

This is regarding permission issue in windows-authenticated sql server 2000.

I have two NT groups namely A & B.

Groups A has all permissions on SQLDB1 while group B has all on SQLDB1 and SQLDB2.

Since I dont want B to have INS/UPD/DEL rights on SQLDB1, I revoked those permissions for B on the same. But users belonging to both groups suffer INS/UPD/DEL rights on SQLDB1.

Could anyone help please ?

Thanks in advance.

Use DENY instead of REVOKE.

--

Tibor Karaszi, SQL Server MVP

http://www.karaszi.com/sqlserver/default.asp

http://www.solidqualitylearning.com/

Blog: http://solidqualitylearning.com/blogs/tibor/

wrote in message

news:2d0faecd-406e-4bcd-9aba-70fc886637ce@.discussions.microsoft.com...

> Hi,

>

> This is regarding permission issue in windows-authenticated sql server

> 2000.

>

> I have two NT groups namely A & B.

>

> Groups A has all permissions on SQLDB1 while group B has all on SQLDB1

> and SQLDB2.

>

> Since I dont want B to have INS/UPD/DEL rights on SQLDB1, I revoked

> those permissions for B on the same. But users belonging to both groups

> suffer INS/UPD/DEL rights on SQLDB1.

>

> Could anyone help please ?

>

> Thanks in advance.

>

>|||

I tried DENY too. Result is the same as before.

|||

Can you explain in more detail what commands you executed? Also, can you check the catalog to verify that permissions are granted/denied as intended. The database permissions catalog is sys.database_permissions.

Thanks
Laurentiu

|||There is no such a table called sys.database_permissions in sql server 2000. Thanks.|||

In SQL 2000 you can use sysprotects. See http://msdn.microsoft.com/library/default.asp?url=/library/en-us/tsqlref/ts_sys-p_0837.asp, for a description.

Thanks
Laurentiu