Disable read access in SQL DB while keeping write permissions on an account

Question

Is it possible to disable read/select access in SQL server while keeping write access to an account?

Answer 1

Starting point is that a user has no permissions at all in the database. If you only want the user to be able to write data, you would do:

GRANT INSERT, UPDATE, DELETE ON tbl TO someuser

Rather than a table, you can also specify a schema (SCHEMA::dbo) or leave the ON clause to give permissions to all tables in the database.

If you already have granted the user permissions, start with removing those. This may include taking the user out of roles.

There is also a DENY command, but you can easily shoot yourself in the foot with that command, so avoid it as long as possible.