Separation of duties is an important consideration for databases and database applications. By properly defining schemas and roles, you can create a distinction between users who can manipulate data from those that administer the database. This paper discusses the topics of which application developers should be aware and provides a heuristic example to guide you in achieving separation of duties.
Whenever I do a security presentation, I make sure to cover the Principle of Least Privilege. And when I do I boil it down to this very simple definition: Giving the rights to do the job. No more. No less.
Birmingham (May 20), Pensacola (June 6), and Portland (June 6) are upcoming SQLSaturday events. If you are in the area, please attend.
Brad McGehee provides a "career guide" for DBAs. It is intended both to help prospective DBAs find a "way in" to the profession, and to advise existing DBAs on how they can excel at their jobs, and so become Exceptional DBAs.
This article will review the processes for providing Operational Analytics via Microsoft Analysis Services, Informatica and Qlikview
Centralize SSIS configuration for multiple environments into one table.
Why doesn't SQL Server just run smoothly after it's installed? Steve Jones thinks the problem is you.
In the previous article we learned about SQL Server 2008 Extended Events terminology, components and took a look at a simple example. In this article we'll take a deeper look with some more complex examples.
Kognitio WX2 I went to a presentation by a company called Kognitio which has a super-fast in-memory database engine targeted at the data warehouse market. They have put the Powerpoint...
Are developers or administrators worth more? Is it easier to get funding for one group or the other? Steve Jones asks the question in today's poll.
By Chris Yates
There are moments in technology when the ground shifts beneath our feet. Moments when...
Why Developers Shouldn’t Have sysadmin access in SQL Server 7 reasons—and exactly what to do instead It...
By Steve Jones
ecstatic shock – n. a surge of energy upon catching a glimpse from someone...
I have noticed sp_executesql also makes a single plan for a stmt with parameter...
Comments posted to this topic are about the item Find Invalid Objects in SQL...
If I want to track which login called a stored procedure and use the value in an audit, what function can I use to replace the xxx below?
create procedure AddNewCustomer
@customername varchar(200)
AS
BEGIN
DECLARE @added VARCHAR(100)
SELECT @added = xxx
IF @customername IS NOT NULL
INSERT dbo.Customer
(
CustomerName,
AddedBy
)
VALUES
(@customername, @added)
END See possible answers