SQL Server 2012 adds two auditing enhancements: new options on audit log failure, like fail operation or continue, and a maximum rollover files setting.
Certificate-Signed Procedures That Read Server DMVs Safely
Give a developer lock-wait data without handing over a server-wide permission. A signed procedure carries the authority, and an edit takes it away.
EXECUTE AS OWNER in Stored Procedures: Power and Pitfalls
A procedure with owner rights can write to tables its caller cannot touch. Watch the identity change, and see how one careless parameter hands out too much.
Backing Up the Service Master Key and Database Master Keys
A database backup does not carry the key that opens your encrypted data. Export both keys, restore one from its file, and see why the password matters.
SQL SERVER – Interview Questions and Answers – Guest Post by Rick Morelan – Day 27 of 31
A guest post by Rick Morelan, author of the Joes 2 Pros series, on the few interview questions that come up again and again and separate good answers from great.
Row-Level Security for Reports
Use SQL Server row-level security for reports with predicate functions and SESSION_CONTEXT, and test every identity boundary.
SQL SERVER – ‘Denali’ – A Simple Example of Contained Databases
What is new for security in SQL Server Denali? Contained databases keep their own settings, metadata and users, so moving them to a new server is easy.