Erland Sommarskog is an independent consultant based in Stockholm. He has worked with SQL Server since 1991. He was first awarded SQL Server MVP in 2001, and he has been re-awarded every year since. His focus is on systems development with the SQL Server Database Engine and his passion is to help people to write better SQL Server applications.
Erland Sommarskog's Sessions
Don’t Let Your Permissions Be Hijacked!SQLBits 2023
Learn how malicious users can lure a power user such as sysadmin to run code that performs action to the benefit of the evil user by something I call permission hijacking and what means you can take to prevent this from happening.
Packaging Permissions in Stored ProceduresSQLBits 2019
Learn in this session how you can package any database- or server-level permission in a stored procedure with help of certificate signing or EXECUTE AS and why one method is to prefer over the other.
Packaging Permissions in Stored ProceduresSQLBits 2019
Learn in this session how you can package any database- or server-level permission in a stored procedure with help of certificate signing or EXECUTE AS and why one method is to prefer over the other.
Packaging Permissions in Stored ProceduresSQLBits 2019
Learn in this session how you can package any database- or server-level permission in a stored procedure with help of certificate signing or EXECUTE AS and why one method is to prefer over the other.
Packaging Permissions in Stored ProceduresSQLBits 2019
Learn in this session how you can package any database- or server-level permission in a stored procedure with help of certificate signing or EXECUTE AS and why one method is to prefer over the other.
Packaging Permissions in Stored ProceduresSQLBits 2019
Learn in this session how you can package any database- or server-level permission in a stored procedure with help of certificate signing or EXECUTE AS and why one method is to prefer over the other.
Packaging Permissions in Stored ProceduresSQLBits 2019
Learn in this session how you can package any database- or server-level permission in a stored procedure with help of certificate signing or EXECUTE AS and why one method is to prefer over the other.