Algorithm Secrecy is not Security
This week Steve Jones talks encryption and why you shouldn't be implementing anything you've invented.
2013-03-18
219 reads
Security
Stored Procedures and SQL Injection
Why do stored procedures help with security? In this piece, MVP Brian Kelley explains why SQL Injection and information gathering are hampered with stored procedures.
2015-06-12 (first published: 2013-02-18)
21,059 reads
2013-02-28 (first published: 2013-02-12)
1,174 reads
Protecting the SQL Server Backup folder
I want to backup my SQL Server databases to a folder, but I want to minimize who has access to the folder. In other words, I want to make sure that members of the Windows Local Administrators group don't get to the backups without intentionally trying to bypass the security. How do I do that?
2012-10-02
3,264 reads
Issues Determining an Individual SQL Server User's Permissions
Recently I was supporting a third party application. It queries to determine what tables it has permissions to before it proceeds with the rest of its functionality. We had implemented permissions based on the best practice of creating roles, assigning the permissions to the roles, and then making the users members of the roles. The application was querying INFORMATION_SCHEMA.TABLE_PRIVILEGES and of course didn't find any permissions directly against the user in question. We ended up granting explicit permissions to the user so the application would work, but I'm more interested in the general case. How can I determine permissions for an individual user?
2012-08-02
3,152 reads
2012-05-25
2,282 reads
The User Defined Server Roles in SQL Server 2012
This article describes how to create user defined server roles and use stored procedures and queries related.
2012-05-25
4,627 reads
Grant Execute to all SQL Server Stored Procedures
With SQL Server 2000 no default server, database or application role was available to be able to execute all stored procedures. With SQL Server 2005, SQL Server 2008 and SQL Server 2008 R2 has this changed with all of the new security features? If not, what options do I have to grant execute rights to the needed database roles?
2012-04-19
2,470 reads
2012-03-22
2,412 reads
2012-03-13
2,223 reads
Blogs
T-SQL Tuesday #203: Risk and Reward
By Steve Jones
This is timely, as I’m currently on a boat in the Adriatic taking a...
dataMinds Connect 2026 – Slides & Scripts
You can find the slides and SQL scripts for my session “Spice up your...
How to Clear the SSMS Cache (SSMS 21 and Later)
By SQLPals
How to Clear the SSMS Cache (SSMS 21 and Later) Updated...
Forums
Using CHOOSE()
Comments posted to this topic are about the item Using CHOOSE()
Re-Seeding a Broken Log Shipping Secondary (Without Touching the Primary)
Comments posted to this topic are about the item Re-Seeding a Broken Log Shipping...
The DBA is Dead! Long Live the !
Comments posted to this topic are about the item The DBA is Dead! Long...
Question of the Day
Using CHOOSE()
We have this code that sets some status values and then queries them using the CHOOSE() function in SQL Server 2025.
CREATE TABLE Status
(
StatusID INT,
StatusDescription VARCHAR(20)
);
GO
INSERT dbo.Status
(
StatusID,
StatusDescription
)
VALUES
(0, 'Uncategorized'),
(1, 'Active'),
(2, 'Inactive'),
(3, 'Temp');
GO
SELECT CHOOSE(StatusID, 'Unknown', 'Active', 'Inactive', 'Temporary')
FROM Status;
When the SELECT runs, what is returned? See possible answers