users, roles, sp_addlogin and grant question

• stevester

  Old Hand

  Points: 317

  More actions

  August 22, 2005 at 7:53 am

  #165689

  User permissions question:-

  If I create a user, user1, with sp_addlogin, 'user1', pswd', 'defdb', and then add them to database 'defdb' with sp_adduser, then grant all to user1, does this user have any server level rights? I'm not clear on the difference between object rights and statement privileges. I read the BOL and some other resources, but ended up more confused. Anyone have an idiot-proof way of explaining?

   

  Thanks.

• August 25, 2005 at 8:00 am

  This was removed by the editor as SPAM

• Steve Jones - SSC Editor

  SSC Guru

  Points: 736255

  More actions

  August 25, 2005 at 8:12 am

  #584987

  Grant all I believe just grants them to all objects and you still have to specify the permission.

  I think ALL is a bad idea. It would be better to script out objects, setup a role, and then grant the right to a role and add the user to a role.