Questions tagged [row-level-security]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2
votes
1answer
16 views

restrict data from select with Row-Level Security when updating

I want to create an ordered list of labeltext, so I wrote the following initial script: Schema (PostgreSQL v10.0) create table tbl1 ( uid text primary key /* user id */ ); create table tbl2 ( uid ...
1
vote
1answer
27 views

Posgres Row Security Policy - Why Array faster than Bitstring?

I have a question: I have two row security policies to restrict the access to a table. The first policy uses an Array-Column "rights". The "rights" column is type 16-bit bit/integer array and each ...
0
votes
1answer
24 views

What is the benefit of creating an Oracle context over just granting package execution?

I have been programming oracle row-level security using DBMS_RLS for several years, but I have actually skipped creating contexts. I have seen the intermittent recommendations to CREATE CONTEXT and ...
0
votes
1answer
53 views

SQL Server RLS vs Oracle FGAC [closed]

What is the difference between SQL Server RLS and Oracle FGAC. How to decide which one to go for? We already have both the products in place and teams to support the products.
1
vote
1answer
81 views

Azure SQL Row Level Security Full Index Scan

We have implemented SQL Row-level security using SESSION_CONTEXT. From an architecture standpoint, this is a beautiful paradigm that allows our application to be clueless to the fact that only 1 ...
4
votes
1answer
75 views

Row level security and physical user creation is it an overhead

The database that I am currently working has RLS implemented as suggested in Microsoft blogs and a few user blogs. Example: creating a physical user and EXEC AS USER and selecting from tables for the ...
4
votes
1answer
149 views

Postgres Row Level Security policy optimizes poorly compared to inline version

I have a query which looks like this: SELECT post.id, post.author_id, post.published_at, post.content FROM post WHERE post.group_id = 1 ORDER BY post.published_at DESC, post.id LIMIT 5; ...
0
votes
1answer
123 views

SQLServer Row level security - Enforce from within database

Have a multi-tenant app running on a single sql 2016 db, I have a RLS (row level security ) predicate on customer_id (which is unique for each tenant) and the column exists in all tables. CREATE ...
0
votes
1answer
50 views

Data Security in MS SQL Server

How do I store the sensitive information on SQL server?. We have policy guidelines, DBA and Development engineers are not allowed to view the data as plain text. I am aware of the encryption ...
0
votes
1answer
108 views

Isolating access to tenant data in a multi-tenant database

We have a single SQL Server database for all tenants of a web-application. How can we ensure when a support engineer queries the DB directly via SSMS, they only touch data belonging to one tenant? ...
1
vote
1answer
125 views

Implement row-level security as a user table or millions of roles? [closed]

PostgresSQL 10.4 is our backend database for a consumer-facing app with millions of users. When implementing row-level security so each user can only access their own data, is it best practice to use ...
2
votes
1answer
3k views

Pros and cons of row level security Microsoft SQL Server

What are the pros and cons of row level security? We are porting a database from a desktop app to a web app and want to know the best way to make sure sensitive data is secured. For our application ...
0
votes
0answers
45 views

Should I store user_id in all tables to ease Row Level Policy checks

In a Postgres database serving classical multiuser web application, I’ve got multiple tables, including the user table. user_id integer is what row level security policy is based on in the ...
1
vote
0answers
90 views

Backup or export Azure SQL Database with Row-Level Security

I'm having difficulties exporting a Sql Azure database using Row-Level Security. When using the Export method the following error occurs: Error encountered during the service operation. Could ...
1
vote
0answers
76 views

2-dimension Row Level Security Design

I'm working on a SQL Server 2012 database where the entity [scenario] has a One-To-Many relationship with a [client] table. The users working with this database might have access to only a subset of ...
10
votes
1answer
920 views

SQL Server Row by Row Access

I have a table structured as so (Simplified) Name, EMail, LastLoggedInAt I have a user in SQL Server (RemoteUser) that should only be able to see data (Via a select query) where the LastLoggdInAt ...
0
votes
1answer
384 views

Create Security Policy without schemabinding

Create Security Policy without schemabinding? Is this a bad idea? I have an indexed view in another database that I need to use in my security predicate for row level security. I can either turn off ...
1
vote
1answer
338 views

Row level security in PostgreSQL for different groups

Need a little help with row-level security in Postgres. I have several tables and three group roles (group1, group2, and group3). I have several login roles that are members of each group, while "...
11
votes
1answer
6k views

Undesirable Nest Loop vs. Hash Join in PostgreSQL 9.6

I've a trouble with PostgreSQL 9.6 query planning. My query looks like this: SET role plain_user; SELECT properties.* FROM properties JOIN entries_properties ON properties.id = entries_properties....
6
votes
2answers
353 views

IS_MEMBER() in Azure SQLDB not working for AD groups?

I am trying set up RLS and want to leverage AD groups. DB is created in Azure, and I know AD is working as I can connect using AD acount with SSMS First test Local Machine, is working as expected (...
3
votes
2answers
2k views

Row level security with a single DB user and connection pooling

I'm using node-postgres to connect to a PostgreSQL 9.6 database with connection pooling enabled. All connections user the same database user. One reason I can't use multiple DB users is that as far as ...
2
votes
0answers
226 views

Postgresql row-level security generates different query plan from manually inserted WHERE clause

(Copied from my post to the postgresql mailing list https://www.postgresql.org/message-id/CADBa3wZpuYXwdry2g68NxYmAXOPvx0DLvdAU4kdo2GoPtxKu+Q@mail.gmail.com. Unfortunately I need at least 10 ...
1
vote
0answers
559 views

SQL Server 2016 - row level security by AD group membership

I'm wondering if it is possible to use row level security based on a users AD group membership. I would love to have something that could support users in different groups and some super users who ...
1
vote
1answer
256 views

Postgres Row Level Security and BDR

I am implementing a multi tenant web app using postgres. I want to use Row Level Security (RLS ) for data separation. RLS is available from PG version 9.5. However, at the same time, the HA / DR teams ...
1
vote
1answer
2k views

Optimize Row Level Security expression in Postgres

I have a table which contains millions of rows, categorized into a few categories (lets say numbers 1-5). An application that accesses the database uses one single database account. However, the ...
2
votes
1answer
490 views

Why can't I alter a security policy conditionally?

I have the following rather simple statement in SQL Server Mgmt Studio 2016 CTP 3.2: if exists(select null from sys.security_policies where name = 'OrganisationSecurityPolicy') begin alter ...
0
votes
2answers
1k views

Difference between TDE/VPD/Data Masking/OLS - Oralce

I've come across many kinds of data masking techniques used in Oracle database.. some are licensed some are included in enterprise edition itself.. leaving the licenses thing behind as it is ...
6
votes
0answers
388 views

Roles and policies in Postgresql 9.5 row-level security

Following the the info in posts like these i would like to use the role system and policies, i.e. each user in my system would have a db role. I want to model the following properties but i can't come ...
1
vote
1answer
229 views

Oracle row level security setup?

How can I configure a table such that a user can modify a row "owned" by that user, but not modify rows "owned" by other users?
1
vote
0answers
79 views

Row level security and full text searching

How do you approach the problem of resolving access permissions when matching tens of thousands of users with tens of millions of documents containing unstructured data? How do you even build and ...
4
votes
1answer
1k views

Row Level security or Multiple Tables

Im looking for documentation on best practices for the following scenario. A hosted application contains some "global" data and some "Per-tenant" data. A "Tenant" should have no access to another ...
0
votes
1answer
1k views

Which databases can have row and column level security based upon Active Directory? [closed]

I have various database types, Oracle 11g, MySQL 5, Sql Server 2012. I have direct access. I can have other databases if I need them such as PostgreSQL. What I'm doing is protecting data at the ...
2
votes
1answer
5k views

How to do Row Level Security in SSRS 2008 R2 (or 2012) with Active Directory Groups?

I would like to create a single report that filters data based on what Active Directory group the user is in. Through various searches I see that Row Level Security is possible in SSRS in the Report ...
5
votes
1answer
2k views

Webapp & MySQL: Row Level Security

I am trying to emulate row level security on a webapp I am developing using MySQL. Using this method: Creating a database with the the required tables where the data pertaining to all the users will ...