Raul Garcia's blog
Browse by Tags
All Tags
»
SQL Server Signatures
(RSS)
Dynamic SQL
General Security
sql injection
SQL Server Execution Context
Dynamic SQL and digital signatures in SQL Server 2005
As I already mentioned, dynamic SQL is a quite powerful, but also quite dangerous. In SQL Server 2005 we introduced a new feature that is also quite powerful and when used properly can be quite useful; but it is important to learn and understand any such
Read More...
Using a digital signature as a secondary identity to replace Cross database ownership chaining
In SQL Server 2000, Cross database ownership chaining (CDOC) was a mechanism used to allow access (DML access) to resources on different DBs without explicitly granting access to the resources (such as tables) directly. Unfortunately CDOC is a feature
Read More...
How to distribute digitally signed SQL modules
Digital signatures in SQL Server 2005 modules can be used to extend the privileges of the caller for the duration of the call. This feature enables the ability to create an application that can enable authorized callers to access resources (such as tables, symmetric keys, etc.) that otherwise would require highly escalated privileges. While adding a signature when you have control of the certificate’s private key is really straightforward, but it may not be so obvious how to distribute an application that uses this feature without giving away the private key.
Read More...
Search
Go
This Blog
Home
Tags
Dynamic SQL
General Security
sql injection
SQL Server Encryption
SQL Server Execution Context
SQL Server Signatures
Archives
November 2007 (1)
July 2007 (2)
May 2007 (2)
January 2007 (2)
October 2006 (1)
July 2006 (1)
May 2006 (1)
March 2006 (1)
Syndication
RSS 2.0
Atom 1.0