topic Add permissions but no DELETE in Python Questions

Add permissions but no DELETE

kapalczynski — Thu, 29 May 2025 16:40:56 GMT

I know that I can add permissions as seen below... But this gives all EDIT permissions...

I want ADD and UPDATE but NO DELETE...

Can this be done?

# Import system modules import arcpy # Set local variables datasetName = "c:/Connections/gdb@production.sde/production.GDB.ctgFuseFeature" # Run ChangePrivileges arcpy.management.ChangePrivileges(datasetName, "WENDELCLARK", "GRANT", "GRANT")

Re: Add permissions but no DELETE

DanPatterson — Thu, 29 May 2025 16:56:27 GMT

According to the help

Change Privileges (Data Management)—ArcGIS Pro | Documentation

The RDBMS equivalent commands for the Edit parameter are Update, Insert, and Delete. All three are granted or revoked simultaneously by the Edit parameter

fine-tuning doesn't appear to be accessable throught this approach

Re: Add permissions but no DELETE

kapalczynski — Thu, 29 May 2025 17:00:24 GMT

Dang that's unfortunate

Re: Add permissions but no DELETE

DavidPike — Thu, 29 May 2025 17:12:51 GMT

What about via the DBMS?

Re: Add permissions but no DELETE

AlfredBaldenweck — Thu, 29 May 2025 17:23:06 GMT

The trick is to not use arcpy, like @DavidPike suggested. I think this worked for me in the past; give it a shot?

stateGrpDict = { "ak": r"[usergroup]", "az": r"[usergroup]", #... } # Create Table View to grab connection information. # This part makes more sense in context, but # basically i'm grabbing the name of a US State #from the database's name via the connection. db = arcpy.management.MakeTableView(inTbl)[0] con = db.connectionProperties conDB = con["connection_info"]["database"] conDBS = conDB[4:6] conDS = con["dataset"] grp = stateGrpDict.get(conDBS, None) # Apply View, Insert, and Update privileges, but not Delete # privileges. # ChangePrivileges() is all or nothing. # This way, no one can delete the records. executor = arcpy.ArcSDESQLExecute(IN_WKSPC) sql = f"GRANT SELECT, INSERT, UPDATE ON {conDS} TO {grp}" executor.execute(sql) del executor