Tag: security management

• Certificates and the Chain of Trust

  

  2014-03-28 - Cryptographic Terminology, Cryptography, General, Security, Series

  Certificates are containers for asymmetric encryption keys that can be used to establish a chain of trust between communicating parties. Read on to see how this works in practice.

  [more…]

• The Ownership Chaining Quandary or How to Circumvent an Explicit DENY

  

  2014-03-16 - General, Security, Security Pitfalls

  Ownership chaining is a powerful tool for permission management. However, in some situations it can be misused to gain unauthorized access to a securable. Read on to see this in action.

  [more…]

• The Ownership Chain – How the Securable Owner affects Permission Enforcement in SQL Server

  

  2014-03-14 - General, Security

  The ownership chain enables us to setup guarded access in SQL Server. Guarded access means to grant securable access only through a procedure or view. That module can then be used to enforce additional security requirements. Read on to see how the ownership chain makes this possible.

  [more…]

• An implicit user creation has failed.

  

  2014-03-10 - General, Security, Security Pitfalls

  The error message “An implicit user creation has failed.” indicates that SQL Server tried to create a user automatically and failed. Read on to see when and why this happens.

  [more…]

• CONTROL SERVER vs. sysadmin – Differences when Creating a Schema

  

  2014-03-07 - CONTROL SERVER vs. sysadmin, General, Security, Security Pitfalls

  The CONTROL SERVER privilege and a membership in sysadmin are supposed to be equivalent. However, there are substantial differences, e.g. securable ownership. Read on to see what happens when a schema is created by a login with CONTROL SERVER permissions.

  [more…]