Column Level Permissions and DENY

Question

Post reply

Column Level Permissions and DENY

Steve Jones - SSC Editor

SSC Guru

Points: 736172
More actions
June 18, 2016 at 11:35 am

#72586

Comments posted to this topic are about the item Column Level Permissions and DENY
June 20, 2016 at 12:33 am

This was removed by the editor as SPAM

Viewing 9 posts - 1 through 8 (of 8 total)

You must be logged in to reply to this topic. Login to reply

mjagadeeswari SSC-Addicted Points: 454 More actions · Answer 1

Good question, thanks steve.

Have found this link highlight ,order of DENY and GRANT.

http://www.sqlmovers.com/deny-select-on-table-grant-select-on-columns/

J.

Terje Hermanseter SSCarpal Tunnel Points: 4851 More actions · Answer 2

It's surely good to have such a fine level of granularity to tune users access rights. Even though we don't have any use cases for such fine-tuning atm, I can easily imagine organizations where this is highly relevant.

George Vobr SSCrazy Eights Points: 9996 More actions · Answer 3

mjagadeeswari (6/18/2016)
Good question, thanks steve.
Have found this link highlight ,order of DENY and GRANT.
http://www.sqlmovers.com/deny-select-on-table-grant-select-on-columns/
J.

Thanks for your interesting note and the link. For the SELECT * you can use GRANT on table level:

GRANT SELECT ON dbo.Employee TO AEUser

GO

roger.plowman SSChampion Points: 10265 More actions · Answer 4

I would have thought the lack of a GO after the GRANT would have left permissions unchanged for the final SELECT. This is something I've run into with SQL Server 2008, has it changed in subsequent versions?

Steve Jones - SSC Editor SSC Guru Points: 736172 More actions · Answer 5

roger.plowman (6/20/2016)
I would have thought the lack of a GO after the GRANT would have left permissions unchanged for the final SELECT. This is something I've run into with SQL Server 2008, has it changed in subsequent versions?

This isn't one batch. The code is being run in sections, which is why the text breaks each part up.

Ed Wagner SSC Guru Points: 287026 More actions · Answer 6

Great question, Steve. Permissions can get complicated, but it still boils down to a few simple rules. Thanks.

Tally Tables - Performance Personified
String Splitting with True Performance
Best practices on how to ask questions

Revenant SSC-Forever Points: 42467 More actions · Answer 7

This took a good deal of my lunch break. Thanks, Steve! (No sarcasm!)

Edit: typo