Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Hi,

I was wondering if someone knows a way round this. I have a database which needs to be accessed by a Windows Group with read only access. Some individuals in this group need write access.

I have added the group and then the individual logins and setup the permissions accordingly but the Windows Group seems to take precedence over the individual logins.

Does anyone know how to get around this?

Thanks

Andy

share|improve this question

1 Answer 1

up vote 0 down vote accepted

Permissions are cumulative, with the exception that DENY rights will overwrite GRANTs.

If you grant select to the group and deny update to the group, then grant update to the login they will not be able to update.

Make sure that you haven't denied any rights to the group or to public.

share|improve this answer
    
Thank you I removed the deny from the specific columns and this is now working. –  anD666 Jan 21 '10 at 10:50
    
No problem, glad it was that easy. –  mrdenny Jan 23 '10 at 6:43

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.