August 2011 - Posts

• Preventing Bob from sales from selecting other people's messages

  Suppose that Bob can retrieve all messages, as follows, and we are not happy with it: EXEC Exchange.ShowAllMessages ; Suppose that we don't want him to read anything related to messages, so our knee-jerk reaction is this: REVOKE EXECUTE ON Exchange.ShowAllMessages Read More... Posted Thursday, August 18, 2011 3:22 PM by Alexander Kuznetsov | 3 Comments Filed under: Transact SQL, SQL Server security

• Reads involving UDFs under READ_COMMITTED_SNAPSHOT may seem inconsistent.

  When a select uses scalar or multi-statement UDFs under READ_COMMITTED_SNAPSHOT, we might not get consistent results as of the time our select began - I will provide simple repro scripts. At the time of this writing MSDN clearly states the following: Read More... Posted Tuesday, August 02, 2011 9:33 PM by Alexander Kuznetsov | 2 Comments Filed under: Database Programming, Transact SQL, Defensive programming