Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
tfountain
Constraint Violating Yak Guru
491 Posts |
 Posted - 2009-07-06 : 13:49:50
|
| Question, the BOL states that a possible values for the state and state_desc columns are as follows (a) D - DENY, (b) R - REVOKE, (c) G - GRANT and (d) W - GRANT WITH GRANT OPTION.My question is this, will there be any situation where you would actually see an entry for REVOKE? My simple tests indicate that you will not see a revoke and simple rationale indicates the same.Opinions anyone? |
|
|
Bustaz Kool
Master Smack Fu Yak Hacker
1834 Posts |
Posted - 2009-07-07 : 19:17:24
|
| The REVOKE indicates that the rights were granted but then taken back. One scenario where you might see it is in a multiple role security setup.You might have certain rights because you are a member of the "public" role, certain rights because you are a member of the "Employees" group and more that have been explicitly granted to you. If the administrator decided that not everyone should have a specific right they would REVOKE it from the Public role. You might still have that right because it was granted to the Employees group or to you explicitly. If, instead, they were to DENY the right in Public, then no one would be able to perform that action even though they had been GRANTed the right elsewhere.In short, REVOKE undoes a GRANT within the scope but a DENY countermands the GRANT globally.=======================================Men build too many walls and not enough bridges. -Isaac Newton, philosopher and mathematician (1642-1727) |
 |
|
|
|
|
|
sys.server_permissions and the state REVOKE