Share via

  • Article

Table.Deny Method (ObjectPermissionSet, String, Boolean)

Denies the specified set of permissions for the specified grantee and other users to whom the grantee granted the specified set of permissions on the table.

Namespace:  Microsoft.SqlServer.Management.Smo
Assembly:  Microsoft.SqlServer.Smo (in Microsoft.SqlServer.Smo.dll)

Syntax

'Declaration
Public Sub Deny ( _
    permission As ObjectPermissionSet, _
    granteeName As String, _
    cascade As Boolean _
)
'Usage
Dim instance As Table
Dim permission As ObjectPermissionSet
Dim granteeName As String
Dim cascade As Boolean

instance.Deny(permission, granteeName, _
    cascade)

public void Deny(
    ObjectPermissionSet permission,
    string granteeName,
    bool cascade
)

public:
virtual void Deny(
    ObjectPermissionSet^ permission, 
    String^ granteeName, 
    bool cascade
) sealed

abstract Deny : 
        permission:ObjectPermissionSet * 
        granteeName:string * 
        cascade:bool -> unit 
override Deny : 
        permission:ObjectPermissionSet * 
        granteeName:string * 
        cascade:bool -> unit 

public final function Deny(
    permission : ObjectPermissionSet, 
    granteeName : String, 
    cascade : boolean
)

Parameters

  • granteeName
    Type: System.String
    A String value that specifies the grantee to be denied the specified set of permissions on the table.
  • cascade
    Type: System.Boolean
    A Boolean property that specifies whether the users to whom the grantee granted the specified set of permission are also denied access to the specified set of permissions on the table.
    If True, the grantee and the users to whom the grantee granted the specified set of permissions are all denied the specified set of permissions.
    If False, only the grantee is denied the specified set of permissions.

Implements

IObjectPermission.Deny(ObjectPermissionSet, String, Boolean)

Examples

The following code example shows how to grant guest accounts permission to select table elements, and then revoke the permission by using the Deny method. The account grantee is a placeholder for any defined user account.

The following Database schema is used for this snippet.

//CREATE DATABASE MYTESTDB;
//GO

//USE MYTESTDB;
//GO

//CREATE TABLE TABLE1(
//    id int,
//    name varchar(32)
//);
//GO

C#

Server srv = new Server("(local)");

Database db = srv.Databases["MYTESTDB"];

Table tb = db.Tables[0];

ObjectPermissionSet objPermissionSet = new ObjectPermissionSet(ObjectPermission.Select);
objPermissionSet.Select = true;
tb.Grant(objPermissionSet, grantee);
tb.Deny(objPermissionSet, grantee, true);

Powershell

$srv = new-Object Microsoft.SqlServer.Management.Smo.Server("(local)")
$db = New-Object Microsoft.SqlServer.Management.Smo.Database
$db = $srv.Databases.Item("MYTESTDB")
$tb = $db.Tables[0]

$objPermissionSet = new-object Microsoft.SqlServer.Management.Smo.ObjectPermissionSet([Microsoft.SqlServer.Management.Smo.ObjectPermission]::Select)
$objPermissionSet.Select = $TRUE
$tb.Grant($objPermissionSet, grantee)
$tb.Deny($objPermissionSet, grantee, $TRUE)