CONTROL SERVER vs. sysadmin membership
In a previous blog post on Detecting When a Login Has Implicit Access to a Database, I mentioned that having...
2009-03-06
13,124 reads
Brian Kelley
- Interests: Chess, Reading, Soccer (Football), Baseball, Animals, Theology
Three Operating System (Windows) patches due on Tuesday
Microsoft's advance security bulletin has come out and it looks like they are planning on releasing 3 security bulletins on...
2009-03-06
690 reads
Detecting When a Login Has Implicit Access to a Database
Yesterday I blogged about how to figure out what database principals corresponded to what server principals . The key is to match up the SIDs between sys.server_principals and sys.database_principals. But I also stated there were 3 cases where the logins...
2009-03-05
2,928 reads
Owning an Object in SQL Server 2005/2008
One of the things that we have to re-learn when going from SQL Server 2000 to 2005/2008 is that objects...
2009-03-04
6,672 reads
Mapping Database Principals to Server Principals
A question on the forum asked how to find all the database mappings for a particular login. If you're on SQL Server 2000 or below, the tables you want to use are syslogins in the master database and sysusers in each database.
2009-03-03
4,468 reads
You Must Trust Your DBAs
This is a follow-on post to You Must Trust Someone. My point in that post was to establish that being able to and and actually trusting your account and server administrators is a necessity. I didn't go into the business aspect of that, but basically it boils down to having a good selection process for candidates, checking out their references, ...
2009-03-03
2,022 reads
A Security Control Inconsistently Applied Is Not a Control
Some things and readings today reminded me of this: a security control inconsistently applied is not a control. The whole...
2009-02-27
2,832 reads
First Impressions of the Kindle 2
As I blogged about previously, I had decided to go ahead and pre-order the Kindle 2. It was slated for...
2009-02-27
1,543 reads
You Must Trust Someone
After some recent talks with security folks and auditors, one of the things I have had a hard time getting across is that you must trust those folks responsible for account and server management when it comes to securing your data. Yes, you can put in...
2009-02-26
2,549 reads
Determining if a Server Principal Owns Database Objects
This question comes up a lot in the forums: "How do I know if the login owns any objects?" Usually...
2009-02-24
7,444 reads
Blogs
Restore SQL Server Database to an OrbStack Container
In the previous post, we've built a SQL Server 2025 sandbox in an OrbStack...
Day of Data Baton Rouge Slides and Code
By Steve Jones
Thanks to everyone for attending my talk today at Day of data Baton Rouge...
Using Claude Code as a Database SRE Agent with the Everpure Fusion MCP Server
Here’s the scenario: one of my SQL Server instances migrated to the DR array....
Forums
PowerBI Question - Data Sources
I don't see a PowerBI forum, so I'm posting here. I have a need...
SQL Server Certificates
Comments posted to this topic are about the item SQL Server Certificates
Connect an Azure Function to Azure SQL database Using a Managed Identity
Comments posted to this topic are about the item Connect an Azure Function to...
Question of the Day
SQL Server Certificates
Which of these is not true for certificates used for SQL Server connections?
See possible answers