Blog

• The Unexpected Side Effect of DENY CONTROL

  

  2014-02-21 - General, Security, Security Pitfalls

  Denying a powerful privilege like CONTROL can have unforeseen side effects. Read on to see how using DENY CONTROL can render an entire security principal unusable.

  [more…]

• Security Pitfalls – Column Level GRANT overrides Table Level DENY

  

  2014-02-20 - General, Security, Security Pitfalls

  While a DENY on one level of a security hierarchy in SQL Server always overrides a GRANT on a different level, there is one important exception. Read on to learn more about this exception and how it affects your security management.

  [more…]

• The Page Header (A Storage Wednesday Post)

  

  2014-02-19 - General, Series, SQL Server Internals, Storage Wednesday

  SQL Server organizes databases in chunks of 8192 bytes, called pages. Each page starts out with 96 byte of meta-information – the page header. Read on to see what kind of information is stored in this special area.

  [more…]

• Permission Delegation Done Right – Role Based Delegation

  

  2014-02-18 - General, Security

  Role base permission management can make permission management and permission management delegation a lot simpler. Read on to see how roles can be used to make grantable grants obsolete.

  [more…]

• Permission Delegation Done Right – Preventing Cascading Revokes

  

  2014-02-17 - General, Security

  Grantable grant are an easy way to delegate permission management. However, revoking a grantable grant can cause trouble. Read on to see how using roles in conjunction with grantable grants can alleviate that problem.

  [more…]

• DENY CASCADE does not CASCADE the DENY

  

  2014-02-16 - General, Security, Security Pitfalls

  What the DENY CASCADE statement does seems obvious. But is it? Read on to see what DENY CASCADE actually does and if that matches your expectation.

  [more…]

• How to undo a DENY

  

  2014-02-15 - General, Security

  Undoing a DENY that has become obsolete is actually quite simple. Read on to see how you can remove a DENY the same way you would remove a GRANT.

  [more…]

• DENY vs. REVOKE – Part 5 – Durability

  

  2014-02-14 - DENY vs. REVOKE, General, Security, Series

  A DENY is a durable permission, similar to a GRANT. Find out what that means and how it affects your SQL Server permissions management.

  [more…]

• DENY vs. REVOKE – Part 4 – Hierarchies of Privileges

  

  2014-02-13 - DENY vs. REVOKE, General, Security, Series

  This fourth part of the short series about DENY vs. REVOKE shows that a DENY on the hierarchy of privileges can be used to fine tune permission management. Read on to get all the details.

  [more…]

• The Page – How SQL Server Stores Data

  

  2014-02-12 - General, Series, SQL Server Internals, Storage Wednesday

  SQL Server organizes all data into virtual containers called pages. The DBCC PAGE command can be used to explore these pages. This post starts a series about pages in SQL Server.

  [more…]