Brian Kelley explains why he avoids the fixed DB data roles db_datareader and db_datawriter, and how they can compromise your server security.
Data Governance: Catalog, Lineage and Data Quality
Data Governance is how you know what data you have, where it came from, who can see it and whether it is right. This post covers the catalog, lineage, access and data quality, with T-SQL checks you can run.
TRUNCATE Permission: Letting a User Empty One Table
Your loader needs to empty a staging table, not redesign it. Here is a small procedure that gives it exactly that.
SQL SERVER – Auditors, Passwords and Exceptions – Notes from the Field #010
Weak passwords are like a key under the door mat. Brian Kelley explains what auditors look for around passwords and exceptions in database security.
SQL SERVER – What Permissions I have on Database I am Connected to?
When I get access to a new server, I first check the permissions I have on the database. One simple query with fn_my_permissions shows the full list.
Granular Server Roles: ##MS_ServerStateReader## and Friends
Assign granular server roles in SQL Server 2022, inspect membership, and give monitoring accounts the state access their queries need.
Auditing Failed Logins With the Error Log and Extended Events
Investigate failed logins with the SQL Server error log and a focused Extended Events session, then group attempts and decide what to do.