Tag: REVOKE

• DENY vs. REVOKE – Part 3 – Hierarchies of Securables

  

  2014-02-10 - DENY vs. REVOKE, General, Security, Series

  DENY can be used to fine tune permission management in hierarchies of securables. A common securable hierarchy is table, schema, database, server. Read on to see how a DENY on one level of such a hierarchy can override a GRANT on another level.

  [more…]

• DENY vs. REVOKE – Part 2 – Hierarchies of Principals

  

  2014-02-09 - DENY vs. REVOKE, General, Security, Series

  REVOKE and DENY are similar at first glance. However, DENY can be very powerful when used in the context of security principal hierarchies. Read on to get all the details.

  [more…]

• DENY vs. REVOKE – Part 1 – Are they just synonyms?

  

  2014-02-08 - DENY vs. REVOKE, General, Security, Security Misconceptions, Series

  DENY and REVOKE look very similar, they might just be the same. And indeed, when looking at a single security principal and a single securable in isolation that are functionally identical. But there is more to it. Discover their similarities and differences in this five-part series.

  [more…]

• REVOKE CASCADE does not work on CONTROL permission

  

  2014-02-07 - General, Security, Security Pitfalls

  REVOKE together with the CASCADE keyword removes a permission and also all child permissions that were granted based on it. Read on to see how this plays out if the permission in question is the CONTROL privilege.

  [more…]

• REVOKE CASCADE: Revoking an Entire Grant Hierarchy

  

  2014-02-06 - General, Security

  Does the CASCADE keyword on the REVOKE statement imply that you can build an entire hierarchy of grantable grants using GRANT … WITH GRANT OPTION? What does that mean for your permission management plan? Find out now.

  [more…]