[...]... 10 3 10 4 10 5 10 6 10 7 10 7 10 8 Best Practices Managing Object Security Types of Permissions 11 3 11 4 Object Permissions Statement Permissions Implied Permissions 11 4 11 6 11 8 Implementing Permissions 12 0 Granting Permissions Denying Permissions Revoking Permissions Permission Conflicts Setting Permissions GRANT Permission DENY Permission REVOKE Permission Chapter 5 11 0 12 1 12 1 12 2 12 3 12 3 12 5 12 6 12 6 Object... Security in COM+ Multitier Application Security Implementing Security in COM+ Applications Role-Based Security Declarative Security Configuring Default COM+ Settings Configuring Component Identity Programmatic Security Best Practices 17 7 17 7 17 8 18 0 18 0 18 2 18 2 18 2 18 4 18 5 18 6 18 7 19 1 19 1 19 4 19 5 19 7 xiii xiv Contents Chapter 9 Introducing the SQL Server Agent Service SQL Server Agent Service Account Jobs,... Merge Replication Security Considerations SQL Server Agent Service Configuration Replication Agent Login Security Snapshot Folder Security Location of Snapshot Files Alternative Snapshot Locations Security Mode of the Publisher Publication Access Lists Best Practices 2 01 202 206 206 208 208 210 211 211 212 212 213 214 214 215 216 217 217 218 219 219 219 219 220 220 220 220 2 21 2 21 222 223 225 225 225... Best Practices Chapter 14 Creating an Audit Policy Built-in Auditing Options Server Auditing C2-Mode Auditing SQL Profiler SQL Trace SQL Profiler Utility Audit Log Files Using the SQL Profiler Utility Application Auditing 294 294 295 296 296 298 299 299 3 01 302 305 306 307 309 309 310 312 312 313 314 314 316 316 316 316 318 319 3 21 3 21 324 325 327 328 328 3 31 332 333 333 333 334 3 41 Contents New Record... PROCEDURE Statement ALTER VIEW Statement 13 6 13 7 13 7 13 8 13 8 13 9 14 0 14 6 14 9 15 0 15 0 Best Practices Implementing Front-End Application Security Managing Connections from the Client Tools 15 5 15 6 Client Net-Libraries and Network Protocols Net-Libraries Client Network Utility Server Network Utility Chapter 7 15 1 15 6 15 7 15 9 16 0 Application Connections Connection Security Creating Connections with ODBC... DB 16 1 16 2 16 3 16 4 17 0 17 1 Best Practices Chapter 8 17 3 Implementing Microsoft’s Enterprise Development Strategy Client /Server Architecture and Terms 17 5 17 6 The Client /Server Model Services and Tiers Two-Tier Client /Server Architecture Three-Tier Client /Server Architecture Application Infrastructure Introduction to Security Security in Two-Tier Applications Security in Three-Tier Applications Security. .. 0-4 71- 214 69-8 Mastering SQL Server 2002 Security by Mike Young and Curtis Young ISBN: 0-4 71- 219 70-3 Microsoft.NET Security Programming by Donis Marshall ISBN: 0-4 71- 22285-2 Contents Acknowledgments xix Introduction xxi About the Authors Chapter 1 Introducing SQL Server Security Security Overview Requirements Analysis The Critical Nature of the Data Auditing Requirements Who Will Administer the Server? ... Practices Chapter 15 Managing Internet Security Overview of Internet Integration Features of SQL Server 2000 Integration with Other Products SQL Server Engine Enhancements Connections to SQL Server from the Internet A Direct Connection to SQL Server Client Tools A Connection through OLE DB Connections through Firewalls and Proxy Servers Using a Firewall System with SQL Server Connections to SQL Server through... Database Owner Ownership Context Defining Ownership Assumed Ownership 12 7 13 0 13 0 13 0 Best Practices Chapter 6 13 1 Designing Application Security Analyzing System Requirements Protecting Your Tables 13 3 13 4 13 5 Stored Procedures Performance 13 5 13 6 Contents Programming Framework Security Views Data Access Strategies Windows Authentication SQL Server Authentication Application Roles Change Management ALTER... Design Requirements Windows 2000 Versions SQL Server Versions Multiple Instances of SQL Server Application Purpose Online Transaction Processing Systems Online Analytical Processing Systems Batch Processing Systems Overview of Microsoft Clustering Services 16 16 16 17 18 19 19 20 21 22 22 23 24 25 26 26 27 27 28 29 30 30 32 35 36 37 38 38 39 42 42 42 44 45 46 47 48 49 50 51 53 53 54 54 55 Contents Clustering . 10 8 Best Practices 11 0 Chapter 5 Managing Object Security 11 3 Types of Permissions 11 4 Object Permissions 11 4 Statement Permissions 11 6 Implied Permissions 11 8 Implementing Permissions 12 0 Granting. Curtis W.Young Mastering SQL Server 2000 Security Gearhead Press Mastering SQL Server 2000 Security Mike Young Curtis W.Young Mastering SQL Server 2000 Security Gearhead Press Publisher:. Procedures 13 5 Performance 13 6 xii Contents Programming Framework 13 6 Security 13 7 Views 13 7 Data Access Strategies 13 8 Windows Authentication 13 8 SQL Server Authentication 13 9 Application Roles 14 0 Change