• Article

Table.Deny Method (ObjectPermissionSet, array<String[], array<String[], Boolean)

Denies the specified set of permissions for the specified grantees and other users to whom the grantee granted the specified set of permissions on the specified columns on the table.

Namespace:  Microsoft.SqlServer.Management.Smo
Assembly:  Microsoft.SqlServer.Smo (in Microsoft.SqlServer.Smo.dll)

Syntax

'Declaration
Public Sub Deny ( _
    permission As ObjectPermissionSet, _
    granteeNames As String(), _
    columnNames As String(), _
    cascade As Boolean _
)
'Usage
Dim instance As Table
Dim permission As ObjectPermissionSet
Dim granteeNames As String()
Dim columnNames As String()
Dim cascade As Boolean

instance.Deny(permission, granteeNames, _
    columnNames, cascade)

public void Deny(
    ObjectPermissionSet permission,
    string[] granteeNames,
    string[] columnNames,
    bool cascade
)

public:
virtual void Deny(
    ObjectPermissionSet^ permission, 
    array<String^>^ granteeNames, 
    array<String^>^ columnNames, 
    bool cascade
) sealed

abstract Deny : 
        permission:ObjectPermissionSet * 
        granteeNames:string[] * 
        columnNames:string[] * 
        cascade:bool -> unit 
override Deny : 
        permission:ObjectPermissionSet * 
        granteeNames:string[] * 
        columnNames:string[] * 
        cascade:bool -> unit 

public final function Deny(
    permission : ObjectPermissionSet, 
    granteeNames : String[], 
    columnNames : String[], 
    cascade : boolean
)

Parameters

  • granteeNames
    Type: array<System.String[]
    A String array value that specifies the list of grantees to be denied access to the set of permissions.
  • columnNames
    Type: array<System.String[]
    A String array value that specifies the list of columns to which the set of permissions is denied.
  • cascade
    Type: System.Boolean
    A Boolean property that specifies whether users, to whom the grantee granted the specified set of permission, are also denied access to the specified set of permissions on the table.
    If True, the grantee and users to whom the grantee granted the specified set of permissions are all denied the specified set of permissions.
    If False, only the grantee is denied the specified set of permissions.

Implements

IColumnPermission.Deny(ObjectPermissionSet, array<String[], array<String[], Boolean)

Examples

The following code example shows how to grant an array of grantee accounts permission to select table elements, and then revoke the permission by using the Deny method. The grantees account array is a placeholder for any array of defined user accounts.

The following database schema is used for this snippet.

//CREATE DATABASE MYTESTDB;
//GO

//USE MYTESTDB;
//GO

//CREATE TABLE TABLE1(
//    id int,
//    name varchar(32)
//);
//GO

C#

Server srv = new Server("(local)");
Database db = srv.Databases["MYTESTDB"];

Table tb = db.Tables[0];

ObjectPermissionSet objPermissionSet = new ObjectPermissionSet(ObjectPermission.Select);
objPermissionSet.Select = true;
tb.Grant(objPermissionSet, grantees);

String[] tbColNames = new string[tb.Columns.Count];
int n = 0;
foreach (Column i in tb.Columns)
{
   tbColNames[n] = i.Name;
   n++;
}
tb.Deny(objPermissionSet, grantees, tbColNames, true);

Powershell

$srv = new-Object Microsoft.SqlServer.Management.Smo.Server("(local)")
$db = New-Object Microsoft.SqlServer.Management.Smo.Database
$db = $srv.Databases.Item("MYTESTDB")
$tb = $db.Tables[0]

$objPermissionSet = new-object Microsoft.SqlServer.Management.Smo.ObjectPermissionSet([Microsoft.SqlServer.Management.Smo.ObjectPermission]::Select)
$objPermissionSet.Select = $TRUE
$tb.Grant($objPermissionSet, grantees)
$tbColNames = @()
foreach ($c in $tb.Columns)
{
   $tbColNames = $tbColNames + $c.Name
}
$tb.Deny($objPermissionSet, grantees, $tbColNames, $TRUE)