Tag: GRANT

• DENY vs. REVOKE – Part 5 – Durability

  

  2014-02-14 - DENY vs. REVOKE, General, Security, Series

  A DENY is a durable permission, similar to a GRANT. Find out what that means and how it affects your SQL Server permissions management.

  [more…]

• DENY vs. REVOKE – Part 4 – Hierarchies of Privileges

  

  2014-02-13 - DENY vs. REVOKE, General, Security, Series

  This fourth part of the short series about DENY vs. REVOKE shows that a DENY on the hierarchy of privileges can be used to fine tune permission management. Read on to get all the details.

  [more…]

• DENY vs. REVOKE – Part 3 – Hierarchies of Securables

  

  2014-02-10 - DENY vs. REVOKE, General, Security, Series

  DENY can be used to fine tune permission management in hierarchies of securables. A common securable hierarchy is table, schema, database, server. Read on to see how a DENY on one level of such a hierarchy can override a GRANT on another level.

  [more…]

• REVOKE CASCADE does not work on CONTROL permission

  

  2014-02-07 - General, Security, Security Pitfalls

  REVOKE together with the CASCADE keyword removes a permission and also all child permissions that were granted based on it. Read on to see how this plays out if the permission in question is the CONTROL privilege.

  [more…]

• REVOKE CASCADE: Revoking an Entire Grant Hierarchy

  

  2014-02-06 - General, Security

  Does the CASCADE keyword on the REVOKE statement imply that you can build an entire hierarchy of grantable grants using GRANT … WITH GRANT OPTION? What does that mean for your permission management plan? Find out now.

  [more…]