Tag: SQL Server

• DENY vs. REVOKE – Part 2 – Hierarchies of Principals

  

  2014-02-09 - DENY vs. REVOKE, General, Security, Series

  REVOKE and DENY are similar at first glance. However, DENY can be very powerful when used in the context of security principal hierarchies. Read on to get all the details.

  [more…]

• DENY vs. REVOKE – Part 1 – Are they just synonyms?

  

  2014-02-08 - DENY vs. REVOKE, General, Security, Security Misconceptions, Series

  DENY and REVOKE look very similar, they might just be the same. And indeed, when looking at a single security principal and a single securable in isolation that are functionally identical. But there is more to it. Discover their similarities and differences in this five-part series.

  [more…]

• REVOKE CASCADE does not work on CONTROL permission

  

  2014-02-07 - General, Security, Security Pitfalls

  REVOKE together with the CASCADE keyword removes a permission and also all child permissions that were granted based on it. Read on to see how this plays out if the permission in question is the CONTROL privilege.

  [more…]

• REVOKE CASCADE: Revoking an Entire Grant Hierarchy

  

  2014-02-06 - General, Security

  Does the CASCADE keyword on the REVOKE statement imply that you can build an entire hierarchy of grantable grants using GRANT … WITH GRANT OPTION? What does that mean for your permission management plan? Find out now.

  [more…]

• How to REVOKE just the GRANT OPTION

  

  2014-02-05 - General, Security

  To remove just the grant option from a permission that has been granted specifying WITH GRANT OPTION , the REVOKE GRANT OPTION statement can be used. Read on to get all the details.

  [more…]