Hi,

SERVER: 2000

RESULTS OF SP_HELPLOGINS

LOGINNAME DEFLANGNAME AUSER AREMOTE
dclinic DIMAXIS us_english yes no


LOGIN NAME DBNAME USERNAME USER or ALIAS
dclinic DIMAXIS db_accessadmin MemberOf
dclinic DIMAXIS dclinic User

Results of SP_HELPROTECT

SELECT, INSERT - GRANTED

UPDATE, DELETE - DENIED

I have the User who clicks onto the application is able to select, insert and also able delete, despite DELETE DENIED.


User specifically wants all the SERVERROLES under the Security -Logins - Property Sheet.

I selected Server Roles such as SYSTEM, SECURITY, SEVER, SETUP, PROCESS, DISK, BULK INSERT Administrators and DATABASE CREATORS.

I have select ALL ROLES under this.

May be this could be the reason why user is able to DELETE Successfully.

As everything is working fine except DELETE, which User should not DELETE.

Can anyone help in this as what SERVER ROLES should not be given (2000 server)

__________________
Shaalini.S
Be the Best of Whatever you are...

Hi,

As I said in my last post, Did you read all features of SERVER ROLES in Booksonline? Please read it. REMEMBER SERVER ROLES OVERRIDES all OTHER ROLE.

Hi,


I am completely aware of that SERVER ROLES, what I am asking is very simple yet could not get it. so was bothering.......

As my last post details of the DELETE should not happen and all my STANDARD and APP Roles were perfectly denied at Object level and if I don't add the Server roles the IMAGES cannot be entered, inserted, updated and deleted.

To do that, SELECT Server role then I could Insert / update the Images using the Dmaxis as user. So I need to enforce the server roles to enact the Insert / Update, But should not happen DELETE.

May I request as to how I can use these server roles yet deprive the user from DELETE, is all my concentration.

__________________
Shaalini.S
Be the Best of Whatever you are...

Hi,


Can you create a new server role?

__________________
A.Rajesh Khanna

Hi,

Ok I acknowledge all your replies so far.

__________________
Shaalini.S
Be the Best of Whatever you are...

Hi,

Logins in the Sysadmin server roles have full rights to all databases and server objects.

Therefore, you cannot revoke its delete permissions in a database. You must remove that login from the Sysadmin role, otherwise you can't achieve what you're attempting to do.

__________________
A.Rajesh Khanna

Hi,

The Role was created specifically without the delete permission and denied thereafter and attached this to the login and did worked out.

It was difficult at the initial instance as this delete is surrounded around the IMAGES being created, updated,and inserted, but it was doing Delete so now it got.

.

__________________
Shaalini.S
Be the Best of Whatever you are...