Question

what database objects can be secured by restricting access with SQL statements
​

Answer 1

Answer:

Basically, a principal is the name given to anything to which you can assign permissions. In the same way, a securable is anything to which you can restrict access, such as a database or a table. In fact, securables can't be accessed until permission is granted to access them.

Answer 2

The database objects that can be secured by restricting access with SQL statements are:

• Database access should not be granted to all users; this means that all existing logins have System Admin privileges, which is not a good idea.
• If everything was set up correctly, they wouldn't have access to your new database by default.
• You can establish permissions under the database's security tab and provide "deny" permissions to other users, but if the present users are system admins, they can alter anything.
• Someone should 'own' the SQL server and have the necessary skills to set up all of the other users properly; otherwise, you're wasting your time.