Dynamic SQL: Applications, Performance, and Security

© Ed Pollack 2016

Edward Pollack, Dynamic SQL, 10.1007/978-1-4842-1811-2_4

4. Permissions and Security

Edward Pollack¹ 

(1)Albany, New York, USA

Chapter 2 covered SQL injection and the multitude of ways in which poorly written TSQL can become a target for malicious attacks. This chapter steps back and reviews best practices for SQL Server security, with a focus on Dynamic SQL and its typical use cases. Security is an immense topic, one that could easily consume thousands of pages given the opportunity. It also evolves with each day that passes, as new products are released and vulnerabilities are found in older ones. The goal here is to cover the most important and common places in which you need to take care while developing database solutions using ...