sql - prevent schema change permissions to user -

i have user (d2user) roles of user read , write.. added role db_datareader , db_datawriter using sp_addrolemember sys proc.

however when login user.. able change tables schemas user owned.

this working should not work.

 alter schema guest transfer dbo.testdata;  go  

i tried restrict using :

 revoke alter schema on role::db_datareader d2user cascade; 

however no luck getting incorrect syntax error, user still able alter schema.. can plss?

the user has alter permissions because have 1 of

• db_ddl_admin
• db_owner
• sysadmin

you can revoke ddl_admin other 2 always have rights change things

you can check role permissions these

exec sp_helprolemember; -- uses sys.database_role_members if prefer query exec sp_helpsrvrolemember;