Tag: security

• DENY vs. REVOKE – Part 4 – Hierarchies of Privileges

  

  2014-02-13 - DENY vs. REVOKE, General, Security, Series

  This fourth part of the short series about DENY vs. REVOKE shows that a DENY on the hierarchy of privileges can be used to fine tune permission management. Read on to get all the details.

  [more…]

• Betting on SQL Injection [T-SQL Tuesday #51 – Place Your Bets]

  

  2014-02-11 - General, Security, SQL Injection

  SQL Injection is the most commonly exploited vulnerability. Don’t bet that it wont happen to you. Read on to see recent cases of prominence and learn why you can’t ignore it.

  [more…]

• DENY vs. REVOKE – Part 3 – Hierarchies of Securables

  

  2014-02-10 - DENY vs. REVOKE, General, Security, Series

  DENY can be used to fine tune permission management in hierarchies of securables. A common securable hierarchy is table, schema, database, server. Read on to see how a DENY on one level of such a hierarchy can override a GRANT on another level.

  [more…]

• DENY vs. REVOKE – Part 2 – Hierarchies of Principals

  

  2014-02-09 - DENY vs. REVOKE, General, Security, Series

  REVOKE and DENY are similar at first glance. However, DENY can be very powerful when used in the context of security principal hierarchies. Read on to get all the details.

  [more…]

• DENY vs. REVOKE – Part 1 – Are they just synonyms?

  

  2014-02-08 - DENY vs. REVOKE, General, Security, Security Misconceptions, Series

  DENY and REVOKE look very similar, they might just be the same. And indeed, when looking at a single security principal and a single securable in isolation that are functionally identical. But there is more to it. Discover their similarities and differences in this five-part series.

  [more…]