Question:
Why can’t I revoke the “update” permission from four tables in a database in the object permissions GUI? I have successfully revoked “update” from all other tables in the database (as well as add and delete). This database is vendor software, and the vendor does not know why this problem is occurring.
Answer:
First of all, what version of SQL Server are you using? Is it possible that the update is happening through a stored procedure? If so, as long as the user has execute rights on the procedure, he will be able to update the table. (Assuming the stored procedure was created under the dbo user)