I have some developers that I need to be able to do anything to the Database
except look in a few tables in that database.
I have a DenyHR Role that denies Access to the HR Tables, though if I give
them dbOwner that seems to defeat the purpose.
They need to still create and design existing tables. How can I accomplish
this?
Thank you,
Scott<-It sounds like you need to put them in the db_ddladmin role.
Alter table isn't transferable so you'd likely need to use
this role which is more restrictive than db_owner.
-Sue
On Thu, 7 Sep 2006 11:45:57 -0700, "Scott Townsend"
<scooter@.nospam.postalias> wrote:
>I have some developers that I need to be able to do anything to the Databas
e
>except look in a few tables in that database.
>I have a DenyHR Role that denies Access to the HR Tables, though if I give
>them dbOwner that seems to defeat the purpose.
>They need to still create and design existing tables. How can I accomplish
>this?
>Thank you,
> Scott<-
>|||Using SQL 2000, there is no easy solution at hand. In some situations, the
'sensitive' data tables are put into a different database for reasons like
this one. Different security needs.
Using SQL 2005, you may benefit from investigations schemas. See 'Using
Schemas' in Books Online.
Arnie Rowland, Ph.D.
Westwood Consulting, Inc
Most good judgment comes from experience.
Most experience comes from bad judgment.
- Anonymous
"Scott Townsend" <scooter@.nospam.postalias> wrote in message
news:Ojh7b3q0GHA.4772@.TK2MSFTNGP03.phx.gbl...
>I have some developers that I need to be able to do anything to the
>Database except look in a few tables in that database.
> I have a DenyHR Role that denies Access to the HR Tables, though if I give
> them dbOwner that seems to defeat the purpose.
> They need to still create and design existing tables. How can I accomplish
> this?
> Thank you,
> Scott<-
>
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment