FIX: Revoking Update Permissions on a Table Also Revokes Column-Level Select Permissions (274428)


The information in this article applies to:

  • Microsoft SQL Server 7.0
This article was previously published under Q274428
BUG #: 57453(SQLBUG_70)

SYMPTOMS

Revoking an update permission on a table that was previously granted also removes any column-level select permissions that have been granted.

WORKAROUND

Re-execute a script to grant the column-level selects after revoking the update table.

STATUS

Microsoft has confirmed this to be a problem in SQL Server 7.0. This problem has been corrected in U.S. Service Pack 3 for Microsoft SQL Server 7.0. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

274799 INF: How to Obtain Service Pack 3 for Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0

For more information, contact your primary support provider.

MORE INFORMATION

The following script reproduces the problem: 
create table doo(goo int,boo int,soo int)
grant select on doo(goo,boo) to public
grant update on doo to public
exec sp_helprotect 'doo'
revoke update on doo from public
exec sp_helprotect 'doo'
drop table doo
The following are the results: 
Owner  Object Grantee      Grantor ProtectType Action Column             
-------------------------------------------------------------
dbo    doo    public       dbo     Grant       Select goo
dbo    doo    public       dbo     Grant       Select boo
dbo    doo    public       dbo     Grant       Update (All+New)

(3 row(s) affected)
Server: Msg 15330, Level 11, State 1, Procedure sp_helprotect, Line 344
There are no matching rows on which to report.
Modification Type:MajorLast Reviewed:3/14/2006
Keywords:kbbug kbfix kbSQLServ700fix KB274428
©2004 Microsoft Corporation. All rights reserved.