Deny Method (Database)
This feature will be removed in a future version of Microsoft SQL Server. Avoid using this feature in new development work, and plan to modify applications that currently use this feature.
The Deny method negates a granted database permission or a list of granted permissions for one or more users or roles on Microsoft SQL Server or later.
Syntax
object
.Deny(
Privilege
,
GranteeNames
)
Parts
object
Expression that evaluates to an object in the Applies To list.Privilege
Long integer that specifies one or more database privileges as described in Settings.GranteeNames
SQL Distributed Management Objects (SQL-DMO) multistring listing users or roles.
Prototype (C/C++)
HRESULT Deny(
SQLDMO_PRIVILEGE_TYPE iPrivileges,
SQLDMO_LPCSTR GranteeNames);
Settings
Set Privilege by using these SQLDMO_PRIVILEGE_TYPE values.
Constant |
Value |
Description |
|---|---|---|
SQLDMOPriv_AllDatabasePrivs |
130944 |
Deny all granted database permissions. |
SQLDMOPriv_CreateDatabase |
256 |
Deny permission to execute the CREATE DATABASE statement. |
SQLDMOPriv_CreateDefault |
4096 |
Deny permission to execute the CREATE DEFAULT statement. |
SQLDMOPriv_CreateFunction |
65366 |
Can create and own UserDefinedFunction objects. |
SQLDMOPriv_CreateProcedure |
1024 |
Can create and own StoredProcedure objects. |
SQLDMOPriv_CreateRule |
16384 |
Deny permission to execute the CREATE RULE statement. |
SQLDMOPriv_CreateTable |
128 |
Deny permission to execute the CREATE TABLE statement. |
SQLDMOPriv_CreateView |
512 |
Deny permission to execute the CREATE VIEW statement. |
SQLDMOPriv_DumpDatabase |
2048 |
Deny permission to back up a database. |
SQLDMOPriv_DumpTable |
32768 |
Maintained for compatibility with previous versions of SQL-DMO. |
SQLDMOPriv_DumpTransaction |
8192 |
Deny permission to backup a database transaction log. |
Remarks
Denying permissions to database users and roles by using the Deny method of the Database object requires appropriate permission. The SQL Server login used for SQLServer object connection must be a member of the system-defined role sysadmin.
For more information about setting multistring parameters, see Using SQL-DMO Multistrings.