A friend could connect to SQL Server but could not see any user created object, while his colleague could. It was a security and permissions issue.
Second-Order SQL Injection: When Stored Data Becomes Code
A safe insert does not make the saved value safe forever. Here is how stored text turns into code later, and the plain fix.
Joes 2 Pros SQL Server Videos from May 2012: SQL in Sixty Seconds
These Joes 2 Pros SQL Server videos cover XML methods, error actions, query hints, hierarchical queries and security. Each lesson keeps its original video and gains a small example tested on SQL Server 2025, from XACT_ABORT to a forced loop join.
Dynamic ORDER BY Without Injection: Whitelisting Sort Columns
Parameters cannot name a column, so grids end up gluing text into SQL. Here is the approved-list pattern that keeps the sort safe.
SQL SERVER – Introduction to SQL Server Security – A Primer
A primer on SQL Server Security terms with a simple story: Tom needs Read access to the Financial Folder. Learn what a securable, principal and permission are.
Guest User in msdb: Keep CONNECT and Avoid Error 916
The guest user in msdb needs CONNECT permission for features that run under logins without a user there. I reproduced error 916 in a test database on SQL Server 2025, with a query to check guest in msdb and a way to list every database where guest can connect.
SQL SERVER – Detecting guest User Permissions – guest User Access Status
Is the guest user enabled or disabled, and what is the default? I answer reader questions and show ways to detect guest user access status.