通过

  • 项目

Deny 方法 (ObjectPermissionSet, String[], String[], Boolean)

对指定的被授权者以及该被授权者向其授予针对表上指定列的指定权限集的其他用户，拒绝指定的权限集。

命名空间：  Microsoft.SqlServer.Management.Smo
程序集：  Microsoft.SqlServer.Smo（在 Microsoft.SqlServer.Smo.dll 中）

语法

声明
Public Sub Deny ( _
    permission As ObjectPermissionSet, _
    granteeNames As String(), _
    columnNames As String(), _
    cascade As Boolean _
)
用法
Dim instance As Table
Dim permission As ObjectPermissionSet
Dim granteeNames As String()
Dim columnNames As String()
Dim cascade As Boolean

instance.Deny(permission, granteeNames, _
    columnNames, cascade)

public void Deny(
    ObjectPermissionSet permission,
    string[] granteeNames,
    string[] columnNames,
    bool cascade
)

public:
virtual void Deny(
    ObjectPermissionSet^ permission, 
    array<String^>^ granteeNames, 
    array<String^>^ columnNames, 
    bool cascade
) sealed

abstract Deny : 
        permission:ObjectPermissionSet * 
        granteeNames:string[] * 
        columnNames:string[] * 
        cascade:bool -> unit 
override Deny : 
        permission:ObjectPermissionSet * 
        granteeNames:string[] * 
        columnNames:string[] * 
        cascade:bool -> unit 

public final function Deny(
    permission : ObjectPermissionSet, 
    granteeNames : String[], 
    columnNames : String[], 
    cascade : boolean
)

参数

  • granteeNames
    类型：array<System. . :: . .String> [] () [] []
    一个 String 数组值，该值指定要对其拒绝针对权限集的访问权限的被授权者列表。
  • columnNames
    类型：array<System. . :: . .String> [] () [] []
    一个 String 数组值，该值指定要对其拒绝权限集的列的列表。
  • cascade
    类型：System. . :: . .Boolean
    一个 Boolean 属性，该属性指定是否也对被授权者向其授予指定权限集的用户拒绝针对表的指定权限集的访问权限。
    如果为 True，则同时拒绝被授权者以及该被授权者向其授予指定权限集的用户访问指定的权限集。
    如果为 False，则仅对被授权者拒绝指定的权限集。

实现

IColumnPermission. . :: . .Deny(ObjectPermissionSet, array<String> [] () [] [], array<String> [] () [] [], Boolean)

示例

The following code example shows how to grant an array of grantee accounts permission to select table elements, and then revoke the permission by using the Deny method. The grantees account array is a placeholder for any array of defined user accounts.

The following database schema is used for this snippet.

//CREATE DATABASE MYTESTDB;
//GO

//USE MYTESTDB;
//GO

//CREATE TABLE TABLE1(
//    id int,
//    name varchar(32)
//);
//GO

C#

Server srv = new Server("(local)");
Database db = srv.Databases["MYTESTDB"];

Table tb = db.Tables[0];

ObjectPermissionSet objPermissionSet = new ObjectPermissionSet(ObjectPermission.Select);
objPermissionSet.Select = true;
tb.Grant(objPermissionSet, grantees);

String[] tbColNames = new string[tb.Columns.Count];
int n = 0;
foreach (Column i in tb.Columns)
{
   tbColNames[n] = i.Name;
   n++;
}
tb.Deny(objPermissionSet, grantees, tbColNames, true);

Powershell

$srv = new-Object Microsoft.SqlServer.Management.Smo.Server("(local)")
$db = New-Object Microsoft.SqlServer.Management.Smo.Database
$db = $srv.Databases.Item("MYTESTDB")
$tb = $db.Tables[0]

$objPermissionSet = new-object Microsoft.SqlServer.Management.Smo.ObjectPermissionSet([Microsoft.SqlServer.Management.Smo.ObjectPermission]::Select)
$objPermissionSet.Select = $TRUE
$tb.Grant($objPermissionSet, grantees)
$tbColNames = @()
foreach ($c in $tb.Columns)
{
   $tbColNames = $tbColNames + $c.Name
}
$tb.Deny($objPermissionSet, grantees, $tbColNames, $TRUE)