Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [row-level-security]

The tag has no usage guidance.

0
votes
1answer
39 views

Azure SQL Row Level Security Full Index Scan

We have implemented SQL Row-level security using SESSION_CONTEXT. From an architecture standpoint, this is a beautiful paradigm that allows our application to be clueless to the fact that only 1 ...
4
votes
1answer
51 views

Row level security and physical user creation is it an overhead

The database that I am currently working has RLS implemented as suggested in Microsoft blogs and a few user blogs. Example: creating a physical user and EXEC AS USER and selecting from tables for the ...
4
votes
1answer
70 views

Postgres Row Level Security policy optimizes poorly compared to inline version

I have a query which looks like this: SELECT post.id, post.author_id, post.published_at, post.content FROM post WHERE post.group_id = 1 ORDER BY post.published_at DESC, post.id LIMIT 5; ...
0
votes
1answer
76 views

SQLServer Row level security - Enforce from within database

Have a multi-tenant app running on a single sql 2016 db, I have a RLS (row level security ) predicate on customer_id (which is unique for each tenant) and the column exists in all tables. CREATE ...
0
votes
1answer
44 views

Data Security in MS SQL Server

How do I store the sensitive information on SQL server?. We have policy guidelines, DBA and Development engineers are not allowed to view the data as plain text. I am aware of the encryption ...
0
votes
1answer
73 views

Isolating access to tenant data in a multi-tenant database

We have a single SQL Server database for all tenants of a web-application. How can we ensure when a support engineer queries the DB directly via SSMS, they only touch data belonging to one tenant? ...
1
vote
1answer
91 views

Implement row-level security as a user table or millions of roles? [closed]

PostgresSQL 10.4 is our backend database for a consumer-facing app with millions of users. When implementing row-level security so each user can only access their own data, is it best practice to use ...
1
vote
1answer
2k views

Pros and cons of row level security Microsoft SQL Server

What are the pros and cons of row level security? We are porting a database from a desktop app to a web app and want to know the best way to make sure sensitive data is secured. For our application ...
0
votes
0answers
33 views

Should I store user_id in all tables to ease Row Level Policy checks

In a Postgres database serving classical multiuser web application, I’ve got multiple tables, including the user table. user_id integer is what row level security policy is based on in the ...
1
vote
0answers
86 views

Backup or export Azure SQL Database with Row-Level Security

I'm having difficulties exporting a Sql Azure database using Row-Level Security. When using the Export method the following error occurs: Error encountered during the service operation. Could ...
1
vote
0answers
62 views

2-dimension Row Level Security Design

I'm working on a SQL Server 2012 database where the entity [scenario] has a One-To-Many relationship with a [client] table. The users working with this database might have access to only a subset of ...
10
votes
1answer
917 views

SQL Server Row by Row Access

I have a table structured as so (Simplified) Name, EMail, LastLoggedInAt I have a user in SQL Server (RemoteUser) that should only be able to see data (Via a select query) where the LastLoggdInAt ...
0
votes
1answer
315 views

Create Security Policy without schemabinding

Create Security Policy without schemabinding? Is this a bad idea? I have an indexed view in another database that I need to use in my security predicate for row level security. I can either turn off ...
1
vote
1answer
287 views

Row level security in PostgreSQL for different groups

Need a little help with row-level security in Postgres. I have several tables and three group roles (group1, group2, and group3). I have several login roles that are members of each group, while "...
11
votes
1answer
4k views

Undesirable Nest Loop vs. Hash Join in PostgreSQL 9.6

I've a trouble with PostgreSQL 9.6 query planning. My query looks like this: SET role plain_user; SELECT properties.* FROM properties JOIN entries_properties ON properties.id = entries_properties....
5
votes
0answers
193 views

IS_MEMBER() in Azure SQLDB not working for AD groups?

I am trying set up RLS and want to leverage AD groups. DB is created in Azure, and I know AD is working as I can connect using AD acount with SSMS First test Local Machine, is working as expected (...
2
votes
2answers
1k views

Row level security with a single DB user and connection pooling

I'm using node-postgres to connect to a PostgreSQL 9.6 database with connection pooling enabled. All connections user the same database user. One reason I can't use multiple DB users is that as far as ...
2
votes
0answers
218 views

Postgresql row-level security generates different query plan from manually inserted WHERE clause

(Copied from my post to the postgresql mailing list https://www.postgresql.org/message-id/CADBa3wZpuYXwdry2g68NxYmAXOPvx0DLvdAU4kdo2GoPtxKu+Q@mail.gmail.com. Unfortunately I need at least 10 ...
1
vote
0answers
515 views

SQL Server 2016 - row level security by AD group membership

I'm wondering if it is possible to use row level security based on a users AD group membership. I would love to have something that could support users in different groups and some super users who ...
1
vote
1answer
250 views

Postgres Row Level Security and BDR

I am implementing a multi tenant web app using postgres. I want to use Row Level Security (RLS ) for data separation. RLS is available from PG version 9.5. However, at the same time, the HA / DR teams ...
1
vote
1answer
1k views

Optimize Row Level Security expression in Postgres

I have a table which contains millions of rows, categorized into a few categories (lets say numbers 1-5). An application that accesses the database uses one single database account. However, the ...
2
votes
1answer
423 views

Why can't I alter a security policy conditionally?

I have the following rather simple statement in SQL Server Mgmt Studio 2016 CTP 3.2: if exists(select null from sys.security_policies where name = 'OrganisationSecurityPolicy') begin alter ...
0
votes
2answers
1k views

Difference between TDE/VPD/Data Masking/OLS - Oralce

I've come across many kinds of data masking techniques used in Oracle database.. some are licensed some are included in enterprise edition itself.. leaving the licenses thing behind as it is ...
6
votes
0answers
374 views

Roles and policies in Postgresql 9.5 row-level security

Following the the info in posts like these i would like to use the role system and policies, i.e. each user in my system would have a db role. I want to model the following properties but i can't come ...
1
vote
1answer
195 views

Oracle row level security setup?

How can I configure a table such that a user can modify a row "owned" by that user, but not modify rows "owned" by other users?
1
vote
0answers
74 views

Row level security and full text searching

How do you approach the problem of resolving access permissions when matching tens of thousands of users with tens of millions of documents containing unstructured data? How do you even build and ...
4
votes
1answer
1k views

Row Level security or Multiple Tables

Im looking for documentation on best practices for the following scenario. A hosted application contains some "global" data and some "Per-tenant" data. A "Tenant" should have no access to another ...
0
votes
1answer
1k views

Which databases can have row and column level security based upon Active Directory? [closed]

I have various database types, Oracle 11g, MySQL 5, Sql Server 2012. I have direct access. I can have other databases if I need them such as PostgreSQL. What I'm doing is protecting data at the ...
2
votes
1answer
5k views

How to do Row Level Security in SSRS 2008 R2 (or 2012) with Active Directory Groups?

I would like to create a single report that filters data based on what Active Directory group the user is in. Through various searches I see that Row Level Security is possible in SSRS in the Report ...
5
votes
1answer
1k views

Webapp & MySQL: Row Level Security

I am trying to emulate row level security on a webapp I am developing using MySQL. Using this method: Creating a database with the the required tables where the data pertaining to all the users will ...