Tag: database principals

• DENY vs. REVOKE – Part 2 – Hierarchies of Principals

  

  2014-02-09 - DENY vs. REVOKE, General, Security, Series

  REVOKE and DENY are similar at first glance. However, DENY can be very powerful when used in the context of security principal hierarchies. Read on to get all the details.

  [more…]

• ALL PRIVILEGES – The Misleading Permissions Shortcut

  

  2014-01-28 - General, Security, Security Misconceptions

  GRANT ALL PRIVILEGES suggest it will grant all applicable privileges on a securable to a principal. However, in most RDBMSs including SQL Server this is not actually the case. In addition, this feature has been deprecated. Read on to get all the details.

  [more…]

• GRANT … AS: Using GRANT … WITH GRANT OPTION for Roles

  

  2014-01-26 - General, Security

  Permission delegation does not work with database and server roles as you would expect. Instead of an automatic permission cascade, every role member needs to take additional actions to delegate successfully. Read on to get all the details.

  [more…]

• How to GRANT Permissions in T-SQL

  

  2014-01-24 - General, Security

  The T-SQL GRANT statement is a surprisingly complex statement that can be used to control fine grained permissions. In its basic form is has three sections that answer the questions What?, Where? and Who?. Read on to get all the details.

  [more…]

• Member Management for Database Roles

  

  2014-01-07 - Fundamentals, General, Security

  Database roles can greatly simplify permission management on a database level. Learn how to add and remove members and how to retrieve the list of all current members of a database role.

  [more…]