Are you looking to identify your effective permissions in SQL Server, the permissions actually in effect after taking things like denies or role membership into account? Read on to see how sys.fn_my_permissions can help.
The sys.fn_builtin_permissions catalog function returns a result set that contains one row for each possible permission that you can grant (or deny) in SQL Server. Read on to find out how to use it and how to interpret the results.
The sys.database_permissions catalog view can be used to identify active database permissions that are defined in the current database. Read on to find out how to interpret the output of this catalog view.
Denying a powerful privilege like CONTROL can have unforeseen side effects. Read on to see how using DENY CONTROL can render an entire security principal unusable.
While a DENY on one level of a security hierarchy in SQL Server always overrides a GRANT on a different level, there is one important exception. Read on to learn more about this exception and how it affects your security management.