How insiders hack SQL databases with free tools
When you find out how easy it is for insiders to hack SQL Server databases with a few free security tools and a little luck, you'll re-examine your database security practices.
When you find out how easy it is for insiders to hack SQL Server databases with a few free security tools and a little luck, you'll re-examine your database security practices.
We occasionally come up with a requirement that would be a good fit for a CLR function or stored procedure. For instance we would like to call a stored procedure to get the list of files in a particular folder. How can we return the list of files as a standard result set (i.e. rows and columns) using the CLR?
It's time again to take a look at energy news from an IT perspective, or at least the Steve Jones' perspective and there have been some interesting notes over the last couple months in the world of energy.
It's time again to take a look at energy news from an IT perspective, or at least the Steve Jones' perspective and there have been some interesting notes over the last couple months in the world of energy.
It's time again to take a look at energy news from an IT perspective, or at least the Steve Jones' perspective and there have been some interesting notes over the last couple months in the world of energy.
Steve Jones looks back at a week of news on data center infrastructure, the EF war, and SQL Server 2008 news.
Steve Jones looks back at a week of news on data center infrastructure, the EF war, and SQL Server 2008 news.
Steve Jones looks back at a week of news on data center infrastructure, the EF war, and SQL Server 2008 news.
SQL Server high availability. Log shipping or replication, clustering or some other solution. It's a challenge and as companies grow more dependent on their databases, it's one that more and more DBAs face everyday. Paul Ibison has taken a look at how log shipping and replication can be compared in the quest for high availability.
SQL Servers seem to proliferate in many companies, making management a headache for DBAs. Steve Jones asks a Friday poll about how you handle all those service account.
It is Friday, the queries are running, and nobody is watching the bill. That...
By Steve Jones
Annabel retired from Redgate Software this week. Across most of my career at Redgate,...
By Tim Radney
As a SQL Server DBA with years of experience tuning production environments, I’ve seen...
Comments posted to this topic are about the item What is the Cloud?
Comments posted to this topic are about the item Changing the Schema
Comments posted to this topic are about the item Index Fragmentation Explained: Page Splits,...
I set up a few users on my SQL Server 2022 instance.
CREATE LOGIN User1 WITH PASSWORD = 'Demo12#1' CREATE USER User1 FOR LOGIN User1 GO CREATE LOGIN User2 WITH PASSWORD = 'Demo12#2' CREATE USER User2 FOR LOGIN User2 GO CREATE LOGIN User3 WITH PASSWORD = 'Demo12#3' CREATE USER User3 FOR LOGIN User3 GOI then created a schema that one of them owned. Under this schema, I added a table with some data.
CREATE SCHEMA MySchema AUTHORIZATION User1
GO
CREATE TABLE Myschema.MyTable(myid INT)
GO
INSERT MySchema.MyTable
(
myid
)
VALUES
(1), (2), (3)
GO
SELECT * FROM MySchema.MyTable
GO
I granted rights and verified that User2 could access this table.
GRANT SELECT ON Myschema.MyTable TO User2 GO SETUSER 'USER2' GO SELECT * FROM MySchema.MyTable GOThis worked. Now, I move this schema to a new user.
ALTER AUTHORIZATION ON SCHEMA::Myschema TO User3; GOWhat happens with this code?
SETUSER 'USER2' GO SELECT * FROM MySchema.MyTable GOSee possible answers