Tag: server roles

• The Unexpected Security Implications for Role Owners

  

  2014-03-03 - General, Security, Security Pitfalls

  In SQL Server a server or database role can have an owner specified. Are you aware of the security implications of specifying a role owner? Read on to find out now.

  [more…]

• How to identify active server permissions using sys.server_permissions

  

  2014-02-23 - DMVs & CVs, General, Security, Security

  The sys.server_permissions catalog view can be used to identify active server permissions, permissions with server scope that have been granted or denied to a server principal. Read on to find out how to interpret the output of this catalog view.

  [more…]

• Permission Delegation Done Right – Preventing Cascading Revokes

  

  2014-02-17 - General, Security

  Grantable grant are an easy way to delegate permission management. However, revoking a grantable grant can cause trouble. Read on to see how using roles in conjunction with grantable grants can alleviate that problem.

  [more…]

• DENY vs. REVOKE – Part 2 – Hierarchies of Principals

  

  2014-02-09 - DENY vs. REVOKE, General, Security, Series

  REVOKE and DENY are similar at first glance. However, DENY can be very powerful when used in the context of security principal hierarchies. Read on to get all the details.

  [more…]

• GRANT … AS: Using GRANT … WITH GRANT OPTION for Roles

  

  2014-01-26 - General, Security

  Permission delegation does not work with database and server roles as you would expect. Instead of an automatic permission cascade, every role member needs to take additional actions to delegate successfully. Read on to get all the details.

  [more…]