Raul Garcia's blog
Browse by Tags
All Tags
»
SQL Server Execution Context
(RSS)
Dynamic SQL
General Security
sql injection
SQL Server Signatures
Dynamic SQL and digital signatures in SQL Server 2005
As I already mentioned, dynamic SQL is a quite powerful, but also quite dangerous. In SQL Server 2005 we introduced a new feature that is also quite powerful and when used properly can be quite useful; but it is important to learn and understand any such
Read More...
Using a digital signature as a secondary identity to replace Cross database ownership chaining
In SQL Server 2000, Cross database ownership chaining (CDOC) was a mechanism used to allow access (DML access) to resources on different DBs without explicitly granting access to the resources (such as tables) directly. Unfortunately CDOC is a feature
Read More...
Quick guide to DB users without logins in SQL Server 2005
SQL Server 2005 introduced a new SQL DB principal subtype that can be quite useful: a SQL user that is not mapped to any login. You may be asking yourself “Why is this feature interesting? after all SQL Server already had the ability to create SQL users”. This article tries to describe this new feature and give some useful tips on how to use it.
Read More...
Search
Go
This Blog
Home
Tags
Dynamic SQL
General Security
sql injection
SQL Server Encryption
SQL Server Execution Context
SQL Server Signatures
Archives
November 2007 (1)
July 2007 (2)
May 2007 (2)
January 2007 (2)
October 2006 (1)
July 2006 (1)
May 2006 (1)
March 2006 (1)
Syndication
RSS 2.0
Atom 1.0