Share via

  • Article

Table.Deny Method (ObjectPermissionSet, String, array<String[], Boolean)

Denies the specified set of permissions for the specified grantee and other users to whom the grantee granted the specified set of permissions on the specified columns on the table.

Namespace:  Microsoft.SqlServer.Management.Smo
Assembly:  Microsoft.SqlServer.Smo (in Microsoft.SqlServer.Smo.dll)

Syntax

'Declaration
Public Sub Deny ( _
    permission As ObjectPermissionSet, _
    granteeName As String, _
    columnNames As String(), _
    cascade As Boolean _
)
'Usage
Dim instance As Table
Dim permission As ObjectPermissionSet
Dim granteeName As String
Dim columnNames As String()
Dim cascade As Boolean

instance.Deny(permission, granteeName, _
    columnNames, cascade)

public void Deny(
    ObjectPermissionSet permission,
    string granteeName,
    string[] columnNames,
    bool cascade
)

public:
virtual void Deny(
    ObjectPermissionSet^ permission, 
    String^ granteeName, 
    array<String^>^ columnNames, 
    bool cascade
) sealed

abstract Deny : 
        permission:ObjectPermissionSet * 
        granteeName:string * 
        columnNames:string[] * 
        cascade:bool -> unit 
override Deny : 
        permission:ObjectPermissionSet * 
        granteeName:string * 
        columnNames:string[] * 
        cascade:bool -> unit 

public final function Deny(
    permission : ObjectPermissionSet, 
    granteeName : String, 
    columnNames : String[], 
    cascade : boolean
)

Parameters

  • granteeName
    Type: System.String
    A String value that specifies the grantee to be denied access to the set of permissions.
  • columnNames
    Type: array<System.String[]
    A String array value that specifies the list of columns to which the set of permissions is denied.
  • cascade
    Type: System.Boolean
    A Boolean property that specifies whether users, to whom the grantee granted the specified set of permission, are also denied access to the specified set of permissions on the table.
    If True, the grantee and users to whom the grantee granted the specified set of permissions are all denied the specified set of permissions.
    If False, only the grantee is denied the specified set of permissions.

Implements

IColumnPermission.Deny(ObjectPermissionSet, String, array<String[], Boolean)

Examples

The following code example shows how to grant an array of grantee accounts permission to select table elements, and then revoke the permission by using the Deny method. The grantee account is a placeholder for any defined user account.

The following database schema is used for this snippet.

//CREATE DATABASE MYTESTDB;
//GO

//USE MYTESTDB;
//GO

//CREATE TABLE TABLE1(
//    id int,
//    name varchar(32)
//);
//GO

C#

Server srv = new Server("(local)");
Database db = srv.Databases["MYTESTDB"];

Table tb = db.Tables[0];

ObjectPermissionSet objPermissionSet = new ObjectPermissionSet(ObjectPermission.Select);
objPermissionSet.Select = true;
tb.Grant(objPermissionSet, grantee);

String[] tbColNames = new string[tb.Columns.Count];
int n = 0;
foreach (Column i in tb.Columns)
{
   tbColNames[n] = i.Name;
   n++;
}
tb.Deny(objPermissionSet, grantee, tbColNames, true);

Powershell

$srv = new-Object Microsoft.SqlServer.Management.Smo.Server("(local)")
$db = New-Object Microsoft.SqlServer.Management.Smo.Database
$db = $srv.Databases.Item("MYTESTDB")
$tb = $db.Tables[0]

$objPermissionSet = new-object Microsoft.SqlServer.Management.Smo.ObjectPermissionSet([Microsoft.SqlServer.Management.Smo.ObjectPermission]::Select)
$objPermissionSet.Select = $TRUE
$tb.Grant($objPermissionSet, grantee)
$tbColNames = @()
foreach ($c in $tb.Columns)
{
   $tbColNames = $tbColNames + $c.Name
}
$tb.Deny($objPermissionSet, grantee, $tbColNames, $TRUE)