Database roles simplify security management on a database level. With database roles we can grant or deny permissions to a group of database users. Find out how you can use database roles in your environment.
Server roles simplify management of server level permissions. Before SQL Server 2012 we were confined to 9 fixed server roles. However, now we are able to create user-defined server roles and grant any server level permission to them. Read on to find out more…
The Principle of Least Privilege tells us to always grant only the minimal set of permissions to any user. Read on to see what this means in the context of SQL Server.
Why is the TRUSTWORTHY db option so dangerous? This second post on that topic shows how that “trust” can be misused to elevate a login to be a sysadmin.
Transaction Management The question where in the call stack a transaction should be managed, is similar to the one where errors should be handled. There are several strong reasons to push the transaction management as high up the stack as [more…]