CONTROL SERVER vs. sysadmin membership
In a previous blog post on Detecting When a Login Has Implicit Access to a Database, I mentioned that having...
2009-03-06
13,161 reads
Brian Kelley
- Interests: Chess, Reading, Soccer (Football), Baseball, Animals, Theology
Three Operating System (Windows) patches due on Tuesday
Microsoft's advance security bulletin has come out and it looks like they are planning on releasing 3 security bulletins on...
2009-03-06
692 reads
Detecting When a Login Has Implicit Access to a Database
Yesterday I blogged about how to figure out what database principals corresponded to what server principals . The key is to match up the SIDs between sys.server_principals and sys.database_principals. But I also stated there were 3 cases where the logins...
2009-03-05
2,928 reads
Owning an Object in SQL Server 2005/2008
One of the things that we have to re-learn when going from SQL Server 2000 to 2005/2008 is that objects...
2009-03-04
6,674 reads
Mapping Database Principals to Server Principals
A question on the forum asked how to find all the database mappings for a particular login. If you're on SQL Server 2000 or below, the tables you want to use are syslogins in the master database and sysusers in each database.
2009-03-03
4,468 reads
You Must Trust Your DBAs
This is a follow-on post to You Must Trust Someone. My point in that post was to establish that being able to and and actually trusting your account and server administrators is a necessity. I didn't go into the business aspect of that, but basically it boils down to having a good selection process for candidates, checking out their references, ...
2009-03-03
2,022 reads
A Security Control Inconsistently Applied Is Not a Control
Some things and readings today reminded me of this: a security control inconsistently applied is not a control. The whole...
2009-02-27
2,834 reads
First Impressions of the Kindle 2
As I blogged about previously, I had decided to go ahead and pre-order the Kindle 2. It was slated for...
2009-02-27
1,547 reads
You Must Trust Someone
After some recent talks with security folks and auditors, one of the things I have had a hard time getting across is that you must trust those folks responsible for account and server management when it comes to securing your data. Yes, you can put in...
2009-02-26
2,549 reads
Determining if a Server Principal Owns Database Objects
This question comes up a lot in the forums: "How do I know if the login owns any objects?" Usually...
2009-02-24
7,455 reads
Blogs
A New Word: Gnossienne
By Steve Jones
gnossienne– n. the awareness that someone you’ve known for years still has a private...
Exploring DiskANN: Part I: Understanding the Algorithm before the disk
How I used AI for this postChatGPT to generate images based on info specifically...
Learning Tool – Deepstash
By Brian Kelley
A few months ago I started using Deepstash. Deepstash breaks books into the key...
Forums
Alamat BCA KCU DIPONEGORO 082225313145??WA CS
WhatsApp 082225313145 Jl. Dr. Soetomo No.118, Darmo, Kec. Wonokromo, Surabaya, Jawa Timur 60241
Alamat BCA KCU VETERAN 082225313145 WA CS
WhatsApp 082225313145 Jl. Veteran No.18-24, Krembangan Sel., Kec. Krembangan, Surabaya, Jawa Timur 60175
Alamat BCA KCU GALAXY 082225313145 WA CS
WhatsApp 082225313145 Jl. Dr. Ir. H. Soekarno No.37-39, Klampis Ngasem, Kec. Sukolilo, Surabaya, Jawa...
Question of the Day
The Data API Builder MCP Server Tools
The Data API Builder MCP Server, v2.x, includes a number of tools. What actions can these tools perform in your database?
See possible answers