Category: General

• DENY vs. REVOKE – Part 1 – Are they just synonyms?

  

  2014-02-08 - DENY vs. REVOKE, General, Security, Security Misconceptions, Series

  DENY and REVOKE look very similar, they might just be the same. And indeed, when looking at a single security principal and a single securable in isolation that are functionally identical. But there is more to it. Discover their similarities and differences in this five-part series.

  [more…]

• REVOKE CASCADE does not work on CONTROL permission

  

  2014-02-07 - General, Security, Security Pitfalls

  REVOKE together with the CASCADE keyword removes a permission and also all child permissions that were granted based on it. Read on to see how this plays out if the permission in question is the CONTROL privilege.

  [more…]

• REVOKE CASCADE: Revoking an Entire Grant Hierarchy

  

  2014-02-06 - General, Security

  Does the CASCADE keyword on the REVOKE statement imply that you can build an entire hierarchy of grantable grants using GRANT … WITH GRANT OPTION? What does that mean for your permission management plan? Find out now.

  [more…]

• How to REVOKE just the GRANT OPTION

  

  2014-02-05 - General, Security

  To remove just the grant option from a permission that has been granted specifying WITH GRANT OPTION , the REVOKE GRANT OPTION statement can be used. Read on to get all the details.

  [more…]

• How to REVOKE a GRANT … WITH GRANT OPTION

  

  2014-02-04 - General, Security

  When revoking a permission that was granted with the WITH GRANT OPTION, you cannot just revoke the privilege itself. Instead SQL Server forces us to remove all permissions that were granted based on it too. Read on to see how this might impact your permission management.

  [more…]