Andreas Wolter • 2/10/2025

SQL Server security admins, attention: Auditing is missing attempts to change permissions, leading to repudiation and miss elevation attempts

Read Original

The article reveals a critical security auditing gap in SQL Server 2022 and Azure SQL Managed Instance where the SERVER_OBJECT_PERMISSION_CHANGE_GROUP audit action fails to log permission change attempts. This prevents non-repudiation and can miss elevation of privilege attempts. The author provides a code sample to test the issue and recommends a temporary workaround using scheduled snapshots of system permissions.

0 comments
#Database Security #SQL Server #Azure SQL
SQL Server security admins, attention: Auditing is missing attempts to change permissions, leading to repudiation and miss elevation attempts

Comments

No comments yet

Be the first to share your thoughts!

Browser Extension

Get instant access to AllDevBlogs from your browser

Top of the Week

1
Quoting Thariq Shihipar
Simon Willison • 2 votes
2
Top picks — 2026 January
Paweł Grzybek • 1 votes
3
In Praise of –dry-run
Henrik Warne • 1 votes
4
Deep Learning is Powerful Because It Makes Hard Things Easy - Reflections 10 Years On
Ferenc Huszár • 1 votes
5
Vibe coding your first iOS app
William Denniss • 1 votes
6
AGI, ASI, A*I – Do we have all we need to get there?
John D. Cook • 1 votes
7
Dew Drop – January 15, 2026 (#4583)
Alvin Ashcraft • 1 votes