Tag: DENY

• How to Script Database Permissions

  

  2014-10-07 - DMVs & CVs, General, Security, Security

  Scripting all permissions in a SQL Server database is not trivial. Discover how to generate the necessary statements yourself with this simple query. (Well, copy & paste of the query is simple…)

  [more…]

• The Ownership Chaining Quandary or How to Circumvent an Explicit DENY

  

  2014-03-16 - General, Security, Security Pitfalls

  Ownership chaining is a powerful tool for permission management. However, in some situations it can be misused to gain unauthorized access to a securable. Read on to see this in action.

  [more…]

• What are my own effective permissions? Get Answers with sys.fn_my_permissions.

  

  2014-02-25 - DMVs & CVs, General, Security, Security

  Are you looking to identify your effective permissions in SQL Server, the permissions actually in effect after taking things like denies or role membership into account? Read on to see how sys.fn_my_permissions can help.

  [more…]

• Identify All Possible Permissions using sys.fn_builtin_permission

  

  2014-02-24 - DMVs & CVs, General, Security, Security

  The sys.fn_builtin_permissions catalog function returns a result set that contains one row for each possible permission that you can grant (or deny) in SQL Server. Read on to find out how to use it and how to interpret the results.

  [more…]

• How to identify active server permissions using sys.server_permissions

  

  2014-02-23 - DMVs & CVs, General, Security, Security

  The sys.server_permissions catalog view can be used to identify active server permissions, permissions with server scope that have been granted or denied to a server principal. Read on to find out how to interpret the output of this catalog view.

  [more…]