Метод Database.Revoke (DatabasePermissionSet, String, Boolean, Boolean)
Revokes previously granted permissions from a grantee on the database and any other users to whom the grantee has granted the specified set of permissions. The grantee is also given the ability to revoke the specified set of permissions from other users under an assumed role.
Пространство имен: Microsoft.SqlServer.Management.Smo
Сборка: Microsoft.SqlServer.Smo (в Microsoft.SqlServer.Smo.dll)
Синтаксис
'Декларация
Public Sub Revoke ( _
permission As DatabasePermissionSet, _
granteeName As String, _
revokeGrant As Boolean, _
cascade As Boolean _
)
'Применение
Dim instance As Database
Dim permission As DatabasePermissionSet
Dim granteeName As String
Dim revokeGrant As Boolean
Dim cascade As Boolean
instance.Revoke(permission, granteeName, _
revokeGrant, cascade)
public void Revoke(
DatabasePermissionSet permission,
string granteeName,
bool revokeGrant,
bool cascade
)
public:
void Revoke(
DatabasePermissionSet^ permission,
String^ granteeName,
bool revokeGrant,
bool cascade
)
member Revoke :
permission:DatabasePermissionSet *
granteeName:string *
revokeGrant:bool *
cascade:bool -> unit
public function Revoke(
permission : DatabasePermissionSet,
granteeName : String,
revokeGrant : boolean,
cascade : boolean
)
Параметры
- permission
Тип: Microsoft.SqlServer.Management.Smo.DatabasePermissionSet
A DatabasePermissionSet object value that specifies the set of permissions.
- granteeName
Тип: System.String
A String value that specifies a grantee to be revoked the set of permissions.
- revokeGrant
Тип: System.Boolean
A Boolean property that specifies whether the grantee is given the ability to revoke the specified set of permissions from other users on the database.If True, the grantee is given the ability to revoke the specified set of permissions from other users on the database.If False, the grantee is not given the ability to revoke the specified set of permissions from other users on the database.
- cascade
Тип: System.Boolean
A Boolean property that specifies whether users, to whom the grantee has granted the specified set of permissions, are also revoked the set of permissions.If True, the grantee and users to whom the grantee granted the specified set of permission are all revoked the specified set of permissions on the database.If False, only the grantee is revoked the specified set of permissions.
Примеры
The example shows how to use the Revoke method with server permissions. The method is the same for database permissions.
VB
'Connect to the local, default instance of SQL Server.
Dim svr As Server
svr = New Server()
'Define a ServerPermissionSet that contains permission to Create Endpoint and Alter Any Endpoint.
Dim sps As ServerPermissionSet
sps = New ServerPermissionSet(ServerPermission.CreateEndpoint)
sps.Add(ServerPermission.AlterAnyEndpoint)
'This sample assumes that the grantee already has permission to Create Endpoints.
'Enumerate and display the server permissions in the set for the grantee specified in the vGrantee string variable.
Dim spis As ServerPermissionInfo()
spis = svr.EnumServerPermissions(vGrantee, sps)
Dim spi As ServerPermissionInfo
Console.WriteLine("=================Before revoke===========================")
For Each spi In spis
Console.WriteLine(spi.Grantee & " has " & spi.PermissionType.ToString & " permission.")
Next
Console.WriteLine(" ")
'Remove a permission from the set.
sps.Remove(ServerPermission.CreateEndpoint)
'Revoke the create endpoint permission from the grantee.
svr.Revoke(sps, vGrantee)
'Enumerate and display the server permissions in the set for the grantee specified in the vGrantee string variable.
spis = svr.EnumServerPermissions(vGrantee, sps)
Console.WriteLine("=================After revoke============================")
For Each spi In spis
Console.WriteLine(spi.Grantee & " has " & spi.PermissionType.ToString & " permission.")
Next
Console.WriteLine(" ")
'Grant the Create Endpoint permission to the grantee.
svr.Grant(sps, vGrantee)
'Enumerate and display the server permissions in the set for the grantee specified in the vGrantee string variable.
spis = svr.EnumServerPermissions(vGrantee, sps)
Console.WriteLine("=================After grant=============================")
For Each spi In spis
Console.WriteLine(spi.Grantee & " has " & spi.PermissionType.ToString & " permission.")
Next
Console.WriteLine("")
PowerShell
$srv = new-Object Microsoft.SqlServer.Management.Smo.Server("(local)")
$arg = [Microsoft.SqlServer.Management.Smo.ServerPermission]::CreateEndpoint
$sps = new-object Microsoft.SqlServer.Management.Smo.ServerPermissionSet([Microsoft.SqlServer.Management.Smo.ServerPermission]::CreateEndpoint)
$sps.Add([Microsoft.SqlServer.Management.Smo.ServerPermission]::AlterAnyEndpoint)
$spis = $srv.EnumServerPermissions("vGrantee", $sps)
Write-Host "=================Before revoke==========================="
Foreach ($spi In $spis)
{
Write-Host $spi.Grantee "has" $spi.PermissionType " permission."
}
Write-Host " "
$sps.Remove([Microsoft.SqlServer.Management.Smo.ServerPermission]::CreateEndpoint)
См. также
Справочник
Пространство имен Microsoft.SqlServer.Management.Smo
Другие ресурсы
Работа с объектами базы данных
Предоставление, отмена и запрет разрешений