Packaging Permissions in Stored Procedures

Explore advanced techniques for managing database security and access control in this comprehensive conference talk from PASS Data Community Summit. Learn how to package privileged actions within stored procedures to grant users limited access without compromising overall security. Discover the limitations of traditional approaches and delve into more sophisticated methods like certificate signing and the EXECUTE AS clause. Understand the advantages and use cases for each technique, with a focus on handling server permissions and dynamic SQL scenarios. Gain insights on the security risks associated with making databases TRUSTWORTHY and receive practical scripts for automating certificate signing. Enhance your ability to implement fine-grained permission control in SQL Server environments, balancing user needs with robust security practices.

Packaging Permissions in Stored Procedures - Erland Sommarskog