Tag: security management

• DENY vs. REVOKE – Part 4 – Hierarchies of Privileges

  

  2014-02-13 - DENY vs. REVOKE, General, Security, Series

  This fourth part of the short series about DENY vs. REVOKE shows that a DENY on the hierarchy of privileges can be used to fine tune permission management. Read on to get all the details.

  [more…]

• DENY vs. REVOKE – Part 3 – Hierarchies of Securables

  

  2014-02-10 - DENY vs. REVOKE, General, Security, Series

  DENY can be used to fine tune permission management in hierarchies of securables. A common securable hierarchy is table, schema, database, server. Read on to see how a DENY on one level of such a hierarchy can override a GRANT on another level.

  [more…]

• DENY vs. REVOKE – Part 2 – Hierarchies of Principals

  

  2014-02-09 - DENY vs. REVOKE, General, Security, Series

  REVOKE and DENY are similar at first glance. However, DENY can be very powerful when used in the context of security principal hierarchies. Read on to get all the details.

  [more…]

• DENY vs. REVOKE – Part 1 – Are they just synonyms?

  

  2014-02-08 - DENY vs. REVOKE, General, Security, Security Misconceptions, Series

  DENY and REVOKE look very similar, they might just be the same. And indeed, when looking at a single security principal and a single securable in isolation that are functionally identical. But there is more to it. Discover their similarities and differences in this five-part series.

  [more…]

• REVOKE CASCADE does not work on CONTROL permission

  

  2014-02-07 - General, Security, Security Pitfalls

  REVOKE together with the CASCADE keyword removes a permission and also all child permissions that were granted based on it. Read on to see how this plays out if the permission in question is the CONTROL privilege.

  [more…]