Home/ Questions/Q 9129491
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-17T07:45:34+00:00

In my understanding, in SQL Server, DENY blocks permissions and trumps any GRANTs that

  • 0

In my understanding, in SQL Server, DENY blocks permissions and trumps any GRANTs that are in place. I was just thinking if there is a way to DENY the “with grant option”, meaning, prevent any “with grant option” from being given to a principal explicitly, not by omitting it in the GRANT syntax as described in here. Something like “GRANT permission DENY GRANT OPTION” in pseudo-code.

I was looking for such a feature because I don’t want a principal to be given a GRANT OPTION later by other principals having the same GRANT OPTION. I am looking at this issue from a security context.

Is there a way to do this?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Thinking out of the box perhaps you could have a stored procedure that rolls back the permissions that are granted by these users to another user. You could get this done by having a stored procedure or a shell script triggered by these changes. The only additional item you may want to do is lock the user account if they make the changes more than 3 times.

    • 0