Permissions

Prepping the security for a data warehouse

So in an earlier blog post I talked about how I had to grant some users the ability to create indexes in a reporting server.  A couple of people have asked me how I created the domain...

SQL Server 2012 Class March 19-22, 2012

This March I, Microsoft MVP for SQL Server and Microsoft Certified Master for SQL Server 2008 Denny Cherry, am teaching a 4 day class introducing SQL Server 2012.  This four day class is being offered for only $1200 for four full days of training on...

When working with SQL in a cluster, the account rights on both nodes of the cluster need to be the same

Recently I was working with a clients SQL Server cluster.  The managed service provide had installed some Windows patches causing the SQL Cluster to fail over to the other node.  No big deal, everything appeared to be working as normal.

After a couple of days we noticed...

VMware 4.1 has some “great” security “features” when you upgrade

So after I upgraded from VMware's vSphere 4.0 to 4.1 I ran across an awesome "feature".  Apparently for security purposes VMware's vSphere decided that after the upgrade no one can log into the server except for root, and the vpxuser (the account that the vCenter server uses to log into the...

DENY overwrites GRANT, most of the time

SQL Server rights are pretty easy to work with most of the time.  You grant a bunch of rights to an object, then you deny rights to those objects and the user looses the rights.  Pretty easy.  Now the catch is that if you use the fixed database roles, those roles overwrite any denies that are in...

Changing the default owner when creating objects

When a user that doesn't have sysadmin rights creates objects by default they will be created in the schema that is the users default schema.  Now the catch to this is that if you grant the user rights into the database via a domain group that domain group then the user doesn't have a default...

Rights to System Stored Procedures

Why on earth to people want to go changing the rights on the system objects. Continued »