SQL Server Access Control: The Basics

No technology yet invented can in any way allow us to neglect the task of ensuring the security of the database by controlling access. Security must be applied in depth, and the database is designed provide a system that will thwart even the most determined external attack. If it seems a bit complicated at first, that is no longer an excuse now that Rob Sheldon has provided this simple guide for getting started.

Grant > Deny?

Script DB Level Permissions v4.3

Script database and object level permissions for all database users

CONNECTing to SQL Server

Find Permission Changes In The Default Trace

Learn how to find who has changed permissions from the default trace

Find Deny permissions on database objects

This script allows the DBA to quickly determine if a deny statement is stopping a user from accessing db objects.

Stairway to SQL Server Security Level 4: Permissions

A permission gives a principal access to an object to perform certain actions on or with the object. SQL Server has a mind-numbingly huge number of permissions that you can grant to a principal, and you can even deny or revoke those permissions. This sounds a bit complicated, but by the end of this stairway level you’ll understand how SQL Server permissions work and how you can exert very granular control over object creation, data access, and other types of actions on database and server objects.

New SQL Server 2014 Permissions: CONNECT ANY DATABASE

CONNECT ANY DATABASE is one of three new permissions in SQL Server 2014 that can be granted to server logins. What is this new permission good for and why would we ever want this?

Drop Me? No, I Don't Think So

Grant EXEC on all Stored Procedures to a Role

Easily grant exec permission to all stored procedures to a database role in SQL 2005 or higher.