db reader and deny

• RGP

  SSCarpal Tunnel

  Points: 4381

  More actions

  March 19, 2015 at 5:26 pm

  #295268

  Hi

  Does db reader take predominance over db deny reader? And how about db owner and deny db rights, bit confused.

  Thanks

• Gail Shaw

  SSC Guru

  Points: 1004504

  More actions

  March 20, 2015 at 2:34 am

  #1785285

  Deny overrules grant, so if you add someone to db_datareader and db_denydatareader, they will not be able to read anything.

  As for db_owner, test and see. (can't recall offhand whether db_owner behaves like sysadmin w.r.t. permissions)

  Gail Shaw
  Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
  SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

  We walk in the dark places no others will enter
  We stand on the bridge and no one may pass