Table of the statements run and whether the user Nia can read Books and Loans after each one, with 1 for yes and 0 for no: 0: Books 0 Loans 0, 1: Books 1 Loans 1, 2: Books 1 Loans 0, 3: Books 1 Loans 1, 4: Books 1 Loans 0, 5: Books 1 Loans 0, 6: Books 1 Loans 1, 7: Books 0 Loans 1, 8: Books 0 Loans 0

Effective Permissions in SQL Server: When GRANT, DENY and REVOKE Meet

Effective permissions are what a user can do after every GRANT, DENY and REVOKE has been added together. This post follows one user through eight statements, with a role, a direct DENY and a direct GRANT, and checks the result after each step with HAS_PERMS_BY_NAME. It then shows how to take away one ability from a user who holds CONTROL. Every result comes from SQL Server 2025.

Read More