security

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

tolcis - 10 Jul 2008 19:10 GMT

Hi!

SQL 2000 Enterprise Server.

I have a database with the user: user1 that has a db_owner rights.
That databases has about 50 tables. We need for user1 to have
db_owner role to all tables except the two (new requirement). user1
can read from those two tables but not modify.
Is there a way to have a user db_owner rights to all tables except
two/

T.

Reply to this Message

thejamie - 10 Jul 2008 19:29 GMT

I could be wrong but I think dbo means dbo. Full rights on the database.
You might be able to get around it on 2005 but assigning dbo to a schema on
the database that doesn't include the two tables. AFAIK, it cannot be done
on 2000.

Signature

Regards,
Jamie

> Hi!
>
[quoted text clipped - 8 lines]
>
> T.

Reply to this Message

Kalen Delaney - 10 Jul 2008 21:40 GMT

Yes, dbo means dbo, but db_owner does not mean dbo. Db_owner is security
role, dbo is a user and a schema.(Although there is also a schema called
db_owner, it is not recommended to be used.)

Jamie is correct that you cannot give put a user in the db_owner role, but
deny two tables from her. If the user was in the db_owner role, she could
just regrant herself the permission, in any case!

Signature

HTH
Kalen Delaney, SQL Server MVP
www.InsideSQLServer.com
www.SQLTuners.com

>I could be wrong but I think dbo means dbo. Full rights on the database.
> You might be able to get around it on 2005 but assigning dbo to a schema
[quoted text clipped - 15 lines]
>>
>> T.

Reply to this Message