- Statement Permissions
- The CREATE TABLE, VIEW, FUNCTION, PROCEDURE, DEFAULT, and RULE Permissions
- The BACKUP DATABASE and BACKUP LOG Statement Permissions
- Assigning Statement Permissions
- Administering Statement Permissions with SQL Server Enterprise Manager
- About this Article
Administering Statement Permissions with SQL Server Enterprise Manager
SQL Server Enterprise Manager provides a graphical interface for implementing statement permissions. To view or edit statement permissions in SQL Server Enterprise Manager, open the databases folder for your SQL Server. Right-click the database you want to view or modify, and select Properties. Click the Permissions tab to view the statement permissions for your database. You should see something similar to Figure 1, which shows the pubs database's permissions.
){kind=link}
The Statement Permissions tab for pubs.
As you grant and revoke permissions, the boxes contain one of three indicators:
-
A check mark indicates a statement permission that has been granted.
-
A red X indicates a deny statement permission.
-
A blank indicates no explicit permission assigned.
To grant a permission, check the appropriate box for an account. To deny a permission, click the box twice (to make the red X appear). If a permission has been previously granted, clicking the box once makes the red X appear. Remember that this is a deny permission. You must click again to clear the check box if you want SQL Server Enterprise Manager to send a REVOKE command to your server. Click OK to make your changes permanent.
NOTE
If you look at statement permissions on any database other than the master database, the CREATE DATABASE permission isn't present because that right can be assigned only from the master database. Figure 2 shows the Statement Permissions tab for the master database.
){kind=link}
The Statement Permissions tab for master.
The ability to create objects in a database is a serious matter. Don't grant the permission to do so unless it's necessary for a user to perform her job.