Table.Deny Method (ObjectPermissionSet, array<String[], array<String , Boolean)

Denies the specified set of permissions for the specified grantees and other users to whom the grantee granted the specified set of permissions on the specified columns on the table.

Namespace:  Microsoft.SqlServer.Management.Smo
Assembly:  Microsoft.SqlServer.Smo (in Microsoft.SqlServer.Smo.dll)

Syntax

'Declaration
Public Sub Deny ( _
    permission As ObjectPermissionSet, _
    granteeNames As String(), _
    columnNames As String(), _
    cascade As Boolean _
)
'Usage
Dim instance As Table 
Dim permission As ObjectPermissionSet 
Dim granteeNames As String()
Dim columnNames As String()
Dim cascade As Boolean

instance.Deny(permission, granteeNames, _
    columnNames, cascade)
public void Deny(
    ObjectPermissionSet permission,
    string[] granteeNames,
    string[] columnNames,
    bool cascade
)
public:
virtual void Deny(
    ObjectPermissionSet^ permission, 
    array<String^>^ granteeNames, 
    array<String^>^ columnNames, 
    bool cascade
) sealed
abstract Deny : 
        permission:ObjectPermissionSet * 
        granteeNames:string[] * 
        columnNames:string[] * 
        cascade:bool -> unit  
override Deny : 
        permission:ObjectPermissionSet * 
        granteeNames:string[] * 
        columnNames:string[] * 
        cascade:bool -> unit
public final function Deny(
    permission : ObjectPermissionSet, 
    granteeNames : String[], 
    columnNames : String[], 
    cascade : boolean
)

Parameters

  • granteeNames
    Type: array<System.String[]
    A String array value that specifies the list of grantees to be denied access to the set of permissions.
  • columnNames
    Type: array<System.String[]
    A String array value that specifies the list of columns to which the set of permissions is denied.
  • cascade
    Type: System.Boolean
    A Boolean property that specifies whether users, to whom the grantee granted the specified set of permission, are also denied access to the specified set of permissions on the table.If True, the grantee and users to whom the grantee granted the specified set of permissions are all denied the specified set of permissions.If False, only the grantee is denied the specified set of permissions.

Implements

IColumnPermission.Deny(ObjectPermissionSet, array<String[], array<String[], Boolean)

Examples

The following code example shows how to grant an array of grantee accounts permission to select table elements, and then revoke the permission by using the Deny method. The grantees account array is a placeholder for any array of defined user accounts.

The following database schema is used for this snippet.

//CREATE DATABASE MYTESTDB;
//GO

//USE MYTESTDB;
//GO

//CREATE TABLE TABLE1(
//    id int,
//    name varchar(32)
//);
//GO

C#

Server srv = new Server("(local)");
Database db = srv.Databases["MYTESTDB"];

Table tb = db.Tables[0];

ObjectPermissionSet objPermissionSet = new ObjectPermissionSet(ObjectPermission.Select);
objPermissionSet.Select = true;
tb.Grant(objPermissionSet, grantees);

String[] tbColNames = new string[tb.Columns.Count];
int n = 0;
foreach (Column i in tb.Columns)
{
   tbColNames[n] = i.Name;
   n++;
}
tb.Deny(objPermissionSet, grantees, tbColNames, true);

Powershell

$srv = new-Object Microsoft.SqlServer.Management.Smo.Server("(local)")
$db = New-Object Microsoft.SqlServer.Management.Smo.Database
$db = $srv.Databases.Item("MYTESTDB")
$tb = $db.Tables[0]

$objPermissionSet = new-object Microsoft.SqlServer.Management.Smo.ObjectPermissionSet([Microsoft.SqlServer.Management.Smo.ObjectPermission]::Select)
$objPermissionSet.Select = $TRUE
$tb.Grant($objPermissionSet, grantees)
$tbColNames = @()
foreach ($c in $tb.Columns)
{
   $tbColNames = $tbColNames + $c.Name
}
$tb.Deny($objPermissionSet, grantees, $tbColNames, $TRUE)

See Also

Reference

Table Class

Deny Overload

Microsoft.SqlServer.Management.Smo Namespace

Other Resources

Creating, Altering, and Removing Tables

Tables

CREATE TABLE (Transact-SQL)