Blog

• Database Level Object Permissions – Should you use them?

  

  2014-02-01 - General, Security

  Database level object permissions (object access privileges granted on the database) can significantly simplify permission management. But should you use them? Read on to find out.

  [more…]

• Using SQL Server Schema Permissions to Simplify Permission Management

  

  2014-01-31 - General, Security

  In SQL Server Schemata can significantly simplify permission management. Read on to find out how you can use schema permissions that extend automatically to all objects in that schema.

  [more…]

• Is Granting on All Columns Really the Same as Granting on the Table Itself?

  

  2014-01-30 - General, Security, Security Misconceptions

  Permissions on a table level and permissions granted to all columns on that table appear identical at first. However there actually is a big difference. Read on to find out all about it.

  [more…]

• How to Interpret Misleading Error Messages related to the GRANT statement

  

  2014-01-29 - General, Security

  SQL Server error messages can sometimes be misleading. One example is the error returned when trying to GRANT permissions without holding appropriate permissions yourself. Read on to see how to deal with this and other ambiguous error messages.

  [more…]

• ALL PRIVILEGES – The Misleading Permissions Shortcut

  

  2014-01-28 - General, Security, Security Misconceptions

  GRANT ALL PRIVILEGES suggest it will grant all applicable privileges on a securable to a principal. However, in most RDBMSs including SQL Server this is not actually the case. In addition, this feature has been deprecated. Read on to get all the details.

  [more…]

• How to use Column Level Permissions for Fine-Grained Permission Management

  

  2014-01-27 - General, Security

  Column level permissions allow us even more fine-grained control over data access privileges. A simple extension to the GRANT statement makes this possible. Read on to get all the details.

  [more…]

• GRANT … AS: Using GRANT … WITH GRANT OPTION for Roles

  

  2014-01-26 - General, Security

  Permission delegation does not work with database and server roles as you would expect. Instead of an automatic permission cascade, every role member needs to take additional actions to delegate successfully. Read on to get all the details.

  [more…]

• WITH GRANT OPTION: How to Delegate your Permission Management

  

  2014-01-25 - General, Security

  Granting a permission to a user normally does not enable that user to pass the permission on. However the WITH GRANT OPTION extension to the GRANT statement enables just that. Read on to get all the details.

  [more…]

• How to GRANT Permissions in T-SQL

  

  2014-01-24 - General, Security

  The T-SQL GRANT statement is a surprisingly complex statement that can be used to control fine grained permissions. In its basic form is has three sections that answer the questions What?, Where? and Who?. Read on to get all the details.

  [more…]

• How to identify the SQL Server Service Account in T-SQL

  

  2014-01-23 - General, Security

  In SP1 for SQL 2008R2 a new DMV was introduced: sys.dm_server_service. It provides information about SQL related services including the service account name. Read on to get all the details.

  [more…]