Browse by Tags

• SQL CLR
• SQL Server 2005 Administration
• SQL Server Administration
• TSQL

• How to avoid 1000 rows limitation when querying active directory (AD) from SQL 2005 with using custom code.

  As all of you know it is possible to query active directory from SQL Server with using ADSI provider as linked server. This solution works fine until you will have a lot of users in active directory. According to best practice guide windows system engineers Read More... Posted Thursday, March 22, 2007 3:08 PM by Igor Kovalenko | 20 Comments Filed under: TSQL, SQL Server 2005 Security, SQL Server 2005 Administration, SQL CLR Attachment(s): MSADHelper2.rar

• Switching context with using EXECUTE AS ... not always switch it in fact as you wish.

  In this demo i will try to explain why SET TRUSTWORTHY ON on some databases may make the sysadmin job unsafe. In previous posts i explained how db owner (or any developer) can try to implemet simplest luring attack against server sysadmin. According to Read More... Posted Thursday, March 01, 2007 11:23 AM by Igor Kovalenko | 1 Comments Filed under: SQL Server Administration, SQL Server 2005 Security, SQL Server 2005 Administration

• SQL Server 2005: building security model based on DDL triggers.

  Last month I’m working with a client to create something like non-standard security model. He asked for the following features: - server–level management only for sa (server admin). - database–level management for dbo (one or more dbo per database). Dbo Read More... Posted Monday, January 15, 2007 3:13 AM by Igor Kovalenko | 2 Comments Filed under: SQL Server 2005 Security, SQL Server 2005 Administration

• db_securityadmin is very powerfull and … dangerous.

  Few days ago I worked for one client. He uses the following business model: - dbo usually responsible for high level database design and maintenance; - all database users organized in additional security groups for security purposes; - dedicated person Read More... Posted Monday, January 15, 2007 1:58 AM by Igor Kovalenko | 4 Comments Filed under: SQL Server 2005 Security, SQL Server 2005 Administration