Tag: Permission

• You’ve been Hacked! [T-SQL Tuesday #63 – Security]

  

  2015-02-10 - Audit, Cryptography, General, Security, T-SQL Tuesday

  One Billion – The number of accounts affected by security breaches during the last ten years. Is the data of your customers safe with you?

  [more…]

• How to Script Database Permissions

  

  2014-10-07 - DMVs & CVs, General, Security, Security

  Scripting all permissions in a SQL Server database is not trivial. Discover how to generate the necessary statements yourself with this simple query. (Well, copy & paste of the query is simple…)

  [more…]

• Common Database Vulnerabilities: Data Inference

  

  2014-09-30 - Common Database Vulnerabilities, General, Security, Series

  Data inference allows attackers to infer protected information from legitimately accessible data. Read on to find out what data inference entails and how you can protect your data.

  [more…]

• The Ownership Chaining Quandary or How to Circumvent an Explicit DENY

  

  2014-03-16 - General, Security, Security Pitfalls

  Ownership chaining is a powerful tool for permission management. However, in some situations it can be misused to gain unauthorized access to a securable. Read on to see this in action.

  [more…]

• The Ownership Chain – How the Securable Owner affects Permission Enforcement in SQL Server

  

  2014-03-14 - General, Security

  The ownership chain enables us to setup guarded access in SQL Server. Guarded access means to grant securable access only through a procedure or view. That module can then be used to enforce additional security requirements. Read on to see how the ownership chain makes this possible.

  [more…]