Permissions Question

I've got a permission question for you. In SQL Server 2000, if a user
is given a read-only role (which is select to all the tables in a db)
AND another role that allows updates to those same tables, what rights
will prevail?
Toni
*** Sent via Developersdex http://www.codecomments.com ***
Rights are addtive, so additional "allow" rulwes which ensure that the user
will have a greater access to the data, except the deny roles which prevent
him regardless in how many roles he is in to allow him doing something.
HTH, Jens Suessmeyer.
"Toni" wrote:

> I've got a permission question for you. In SQL Server 2000, if a user
> is given a read-only role (which is select to all the tables in a db)
> AND another role that allows updates to those same tables, what rights
> will prevail?
> Toni
> *** Sent via Developersdex http://www.codecomments.com ***
>
|||Toni
Both, unless you give them DENY permission.
"Toni" <teibner@.SQLallina.com> wrote in message
news:OQNBKc5hFHA.1248@.TK2MSFTNGP12.phx.gbl...
> I've got a permission question for you. In SQL Server 2000, if a user
> is given a read-only role (which is select to all the tables in a db)
> AND another role that allows updates to those same tables, what rights
> will prevail?
> Toni
> *** Sent via Developersdex http://www.codecomments.com ***
|||Thank you for the quick response. I don't have any denies so that tells
me what I need to know.
Thanks!
Toni
*** Sent via Developersdex http://www.codecomments.com ***

Permissions on Views

I've created two new views along with a new login that I'd like to only have
select permission on these new views. I've created the views and granted
select permission to the new user to these views. The first view, which
invloves only one table, works fine. The second is giving me problems and I
don't quite understand why.
The 2nd view joins 2 tables, which are owned by dbo, with 2 views, which are
owned by another user. I've verified that the view references the correct
owners and I've granted select permission to the user to this view, but I
keep getting select permission denied on the 4 objects being referenced in
the view, unless I grant select permissions to the objects that I want to
restrict.
What am I missing here?
Any help is appreciated
Thanks
Mike
MG
"MGeles" <michael.geles@.thomson.com> wrote in message
news:79C5BB72-2C87-4D86-87FC-71B4F388AF2F@.microsoft.com...
> I've created two new views along with a new login that I'd like to only
> have
> select permission on these new views. I've created the views and granted
> select permission to the new user to these views. The first view, which
> invloves only one table, works fine. The second is giving me problems and
> I
> don't quite understand why.
> The 2nd view joins 2 tables, which are owned by dbo, with 2 views, which
> are
> owned by another user. I've verified that the view references the correct
> owners and I've granted select permission to the user to this view, but I
> keep getting select permission denied on the 4 objects being referenced in
> the view, unless I grant select permissions to the objects that I want to
> restrict.
> What am I missing here?
>
The ownership chain is broken.
See
Using Ownership Chains
http://msdn.microsoft.com/library/de...urity_4iyb.asp
David

Permission on sp_addlinkedserver

Hello, I've used sp_addlinkedserver to link an Access database to my SQL
Server 2000 and then move the data into SQL Server. I had been using the
SQLService account to give me the permissions I needed to get it working. I
now want to set the permissions for another account to run this process.
Does anyone now what permissions you need to run the sp_addlinked server.
Also, the errors never occured when you initially link the access file but
when you try to reference it later.
Thanks
Don
"Don" <Don@.discussions.microsoft.com> wrote in message
news:6D5F6F76-E09E-40D0-A64E-66E039F70CE1@.microsoft.com...
> Hello, I've used sp_addlinkedserver to link an Access database to my SQL
> Server 2000 and then move the data into SQL Server. I had been using the
> SQLService account to give me the permissions I needed to get it working.
I
> now want to set the permissions for another account to run this process.
> Does anyone now what permissions you need to run the sp_addlinked server.
From BOL:
Permissions
Execute permissions default to members of the sysadmin and setupadmin fixed
server roles.

> Also, the errors never occured when you initially link the access file but
> when you try to reference it later.
Have you checked the sp_addlinkedsrvlogin proc that allows you to map logins
to remote servers?
Steve