SQL Server security admins, attention: Auditing is missing attempts to change permissions, leading to repudiation and miss elevation attempts
Read OriginalThe article reveals a critical security auditing gap in SQL Server 2022 and Azure SQL Managed Instance where the SERVER_OBJECT_PERMISSION_CHANGE_GROUP audit action fails to log permission change attempts. This prevents non-repudiation and can miss elevation of privilege attempts. The author provides a code sample to test the issue and recommends a temporary workaround using scheduled snapshots of system permissions.
Comments
No comments yet
Be the first to share your thoughts!
Browser Extension
Get instant access to AllDevBlogs from your browser
Top of the Week
1
The Beautiful Web
Jens Oliver Meiert
•
2 votes
2
When your coding agent doesn’t understand your project, you’ll get junk
Benjamin Cane
•
1 votes
3
LLM Use in the Python Source Code
Miguel Grinberg
•
1 votes
4
Wagon’s algorithm in Python
John D. Cook
•
1 votes
5
An example conversation with Claude Code
Dumm Zeuch
•
1 votes