This topic has not yet been rated - Rate this topic

Deny Method (Database)

SQL Server 2008 R2

This feature will be removed in a future version of Microsoft SQL Server. Avoid using this feature in new development work, and plan to modify applications that currently use this feature.

The Deny method negates a granted database permission or a list of granted permissions for one or more users or roles on Microsoft SQL Server or later.

Syntax



            object
.Deny(
Privilege
,
GranteeNames
)

Parts

object: Expression that evaluates to an object in the Applies To list.
Privilege: Long integer that specifies one or more database privileges as described in Settings.
GranteeNames: SQL Distributed Management Objects (SQL-DMO) multistring listing users or roles.

Prototype (C/C++)

HRESULT Deny(
SQLDMO_PRIVILEGE_TYPE iPrivileges,
SQLDMO_LPCSTR GranteeNames);

Settings

Set Privilege by using these SQLDMO_PRIVILEGE_TYPE values.

Constant	Value	Description
SQLDMOPriv_AllDatabasePrivs	130944	Deny all granted database permissions.
SQLDMOPriv_CreateDatabase	256	Deny permission to execute the CREATE DATABASE statement.
SQLDMOPriv_CreateDefault	4096	Deny permission to execute the CREATE DEFAULT statement.
SQLDMOPriv_CreateFunction	65366	Can create and own UserDefinedFunction objects.
SQLDMOPriv_CreateProcedure	1024	Can create and own StoredProcedure objects.
SQLDMOPriv_CreateRule	16384	Deny permission to execute the CREATE RULE statement.
SQLDMOPriv_CreateTable	128	Deny permission to execute the CREATE TABLE statement.
SQLDMOPriv_CreateView	512	Deny permission to execute the CREATE VIEW statement.
SQLDMOPriv_DumpDatabase	2048	Deny permission to back up a database.
SQLDMOPriv_DumpTable	32768	Maintained for compatibility with previous versions of SQL-DMO.
SQLDMOPriv_DumpTransaction	8192	Deny permission to backup a database transaction log.

Remarks

Denying permissions to database users and roles by using the Deny method of the Database object requires appropriate permission. The SQL Server login used for SQLServer object connection must be a member of the system-defined role sysadmin.

For more information about setting multistring parameters, see Using SQL-DMO Multistrings.

Applies To:

Database Object

Did you find this helpful? Yes No

Not accurate

Not enough depth

Need more code examples

(1500 characters remaining)

Community Additions

ADD