Question

I am using SQL Server 2005, I want to find out what all the grants are on a specific database for all tables. It would also help to find out all tables where the delete grant has been given for a specific user.

Note: this may be similar to this question, but I could not get the selected answer’s solution working (if someone could provide a better example of how to use that, it would help as well)

Answer 1

The given solution does not cover where the permission is granted against the schema or the database itself, which do grant permissions against the tables as well. This will give you those situations, too. You can use a WHERE clause against permission_name to restrict to just DELETE.

SELECT      class_desc    , CASE WHEN class = 0 THEN DB_NAME()          WHEN class = 1 THEN OBJECT_NAME(major_id)          WHEN class = 3 THEN SCHEMA_NAME(major_id) END [Securable]   , USER_NAME(grantee_principal_id) [User]   , permission_name   , state_desc FROM sys.database_permissions 

Also, db_datawriter would need to be checked for membership because it gives implicit INSERT, UPDATE, and DELETE rights, meaning you won’t see it show up in the permission DMVs or their derivatives.