What are “GRANT”, “REVOKE’ and “DENY’ statements?
GRANT Creates an entry in the security system that allows a user in the current database to work with data in the current database or execute specific Transact-SQL statements. Syntax Statement permissions: GRANT { ALL | statement [ ,…n ] } TO security_account [ ,…n ] Object permissions: GRANT { ALL [ PRIVILEGES ] | permission [ ,…n ] } { [ ( column [ ,…n ] ) ] ON { table | view } | ON { table | view } [ ( column [ ,…n ] ) ] | ON { stored_procedure | extended_procedure } | ON { user_defined_function } } TO security_account [ ,…n ] [ WITH GRANT OPTION ] [ AS { group | role } ] REVOKE Removes a previously granted or denied permission from a user in the current database. Syntax Statement permissions: REVOKE { ALL | statement [ ,…n ] } FROM security_account [ ,…n ] Object permissions: REVOKE [ GRANT OPTION FOR ] { ALL [ PRIVILEGES ] | permission [ ,…n ] } { [ ( column [ ,…n ] ) ] ON { table | view } | ON { table | view } [ ( column [ ,…n ] ) ] | ON { stored_procedure |
