SQL Server 2000 User Properties

shaalini · #1 05-14-2009, 01:13 AM

SQL Server 2000 User Properties

I have an application which does all the rights like doing DML operations on a given user account (‘user-1’). I have created another similar user account (‘user-2’) which has to do only the READ and INSERT operations but not any UPDATE or DELETE operations.

This is on SQL Server 2000.

Now the problem is from the application this particular ‘user-2’ is able to delete and able to update with the images that he use to get in and get out. I have given all access to Server Roles; and only the database which this ‘user-2’ has an access from the ‘User-2’ login properties.
From the Database node, Users I have restricted like revoke Delete and Update permissions to this ‘user-2’ user.

Still I am able to see the Update and Delete operations are able to carry.

Can anyone tell how to stop Update and Delete operations.

bluesky · #2 05-14-2009, 01:14 AM

Hi,

Why did you give all access to server roles? Read Server roles and database roles in Booksonline.

shaalini · #3 05-14-2009, 01:14 AM

Hi,

Server Roles are required for this application to run, as this is governs at Super user Level.

However, this DELETE is not working as it is still deleting despite being DENY an REVOKE of Delete.

Thanks

bluesky · #4 05-14-2009, 01:16 AM

Hi,

Question is: what server role you gave to user?

shaalini · #5 05-14-2009, 01:39 AM

Hi,

All Server Roles.

arjkhanna · #6 05-14-2009, 01:47 AM

Hi

there are roles which deny certain things as well.

shaalini · #7 05-14-2009, 01:47 AM

Hi,

Thanks so far.

Can you be little specific as I have given every possibility yet what It should happen is User should not DELETE.

arjkhanna · #8 05-14-2009, 01:50 AM

Hi,

You do not need to give all the sever roles.Remove all the roles and try to give the roles at the Database level and test at each stage..Grant the update and select permissions to the user at the Database Level

Sqlserver007

shaalini · #9 05-14-2009, 01:51 AM

Hi,

Thanks , I have given exactly the select, update and DENY the Delete permission at database level.

Still user is able to DELETE.

This is the problem

bluesky · #10 05-14-2009, 01:51 AM

Hi,

Run sp_helprotect and sp_helplogins for that login so we can analyze.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
SQL Server 2000 migration to SQL Server 2005 Collation Change - Method?	arjkhanna	Database Support	5	10-02-2009 09:58 PM
How to Install ISA 2000 Server	arjkhanna	Server Management	5	01-07-2009 09:41 PM
JSP with SQL Server 2000 connectivity steps	leoraja8	Java Server Pages (JSP)	2	10-29-2008 07:53 PM
SQL Server 2000 to 2005	S.Vinothkumar	Database Support	3	09-27-2007 03:22 AM
problem with migrating web server windows 2000 to windows 2003	kingmaker	ASP and ASP.NET Programming	1	07-20-2007 03:39 AM