Tag: security

• SQL Server Database Users and the sys.database_principals catalog view

  

  2014-01-03 - DMVs & CVs, General, Security, Security

  Database principals like the database user allow use to grant permissions on objects in a given database. Check out how to list users and find their linked logins.

  [more…]

• SQL Server Logins and the sys.server_principals catalog view

  

  2014-01-02 - DMVs & CVs, Fundamentals, General, Security, Security

  SQL Server knows two types of security principals: The login or server principal and the database user or database principal. Read on to learn more about the server principal.

  [more…]

• The Principle of Least Privilege

  

  2014-01-01 - General, Security

  The Principle of Least Privilege tells us to always grant only the minimal set of permissions to any user. Read on to see what this means in the context of SQL Server.

  [more…]

• The TRUSTWORTHY Database Property Explained – Part 3

  

  2013-06-25 - General, Security, Trustworthy

  Even if you follow security best practices to minimize the risk when setting a database to TRUSTWORTHY, if you use it to allow assemblies external access you are opening up another security hole. Read on to learn more.

  [more…]

• The TRUSTWORTHY Database Property Explained – Part 2

  

  2013-06-18 - General, Security, Trustworthy

  Why is the TRUSTWORTHY db option so dangerous? This second post on that topic shows how that “trust” can be misused to elevate a login to be a sysadmin.

  [more…]