SQL server 2008 R2.
A user is part of an AD group. That AD group has a SQL account in this instance. That group has the following access to a Database:
- db_datareader
- db_datawriter
- db_ddladmin
- db_executor
- db_owner
- MSReplPal_7_1
- public
When that user runs "Delete" on this database, it throws an error:
The DELETE permission was denied on the object '', database '', schema 'dbo'.
User belongs to some other groups but none of those groups has permission to this DB in question.
This group does not have explicitly deny on the table in question.
What could the reason the user cannot delete on tables?
Also, I don't understand how this group has given this many access on this database. Doesn't having "db_owner" imply the group has maximum access to the database and other permission don't need to be added?? such as db_datareader, db_datawriter, etc.
Thanks for your time.
sys.database_permissions
for every group/role they might be part of?