Category: Security Pitfalls

• The Unexpected Side Effect of DENY CONTROL

  

  2014-02-21 - General, Security, Security Pitfalls

  Denying a powerful privilege like CONTROL can have unforeseen side effects. Read on to see how using DENY CONTROL can render an entire security principal unusable.

  [more…]

• Security Pitfalls – Column Level GRANT overrides Table Level DENY

  

  2014-02-20 - General, Security, Security Pitfalls

  While a DENY on one level of a security hierarchy in SQL Server always overrides a GRANT on a different level, there is one important exception. Read on to learn more about this exception and how it affects your security management.

  [more…]

• DENY CASCADE does not CASCADE the DENY

  

  2014-02-16 - General, Security, Security Pitfalls

  What the DENY CASCADE statement does seems obvious. But is it? Read on to see what DENY CASCADE actually does and if that matches your expectation.

  [more…]

• REVOKE CASCADE does not work on CONTROL permission

  

  2014-02-07 - General, Security, Security Pitfalls

  REVOKE together with the CASCADE keyword removes a permission and also all child permissions that were granted based on it. Read on to see how this plays out if the permission in question is the CONTROL privilege.

  [more…]

• Security Pitfalls – Revoking Column Permissions

  

  2014-02-03 - General, Security, Security Pitfalls

  A REVOKE always removes only an exactly alike GRANT. However there is one important exception: The handling of column permissions follows its own rules. Read on to get all the details.

  [more…]