Row Level Security in SQL Azure and in On Premise December 3th, 2015 Geri Reshef, GeriReshef@GMail.com MVP since 2013 DBA – Naya, eToro (http://www.etoro.com) Communities - local Moderator: Dan Brennan

Row Level Security (RLS): Agenda Row Level Security (RLS): What is it? The new solution in Azure & SQL 2016 Demo (The new and the classic technologies) Conclusions Q&A

Cloud First SQL Azure SQL Azure V12 On Premise

Read privileges & Row Level Security RLS: Row Level Security Data Masking, Always Encrypted

Why RLS? Utilizations, advantages, characteristics Regulatory Compliance Internal rules of the firm Protection of sensitive data Security in the data layer (where it is implemented) Prevention of SQL Injection Minor changes in the codes Transparent for the application An efficient solution Combined with the security system The logic is implemented through a single function

The Architecture of the RLS Inline User Defined Function Returns Table With Schemabinding Security Policy Directly Through a policy table Combined with the security system Select From Table Semi Join Inline function Where .. In (Select .. From ..) Where Exists (Select .. From ..)

Demo

RLS: The Limits of the New Technology Not applicable to Views The new technology functions only on SQL Azure V12 Not applicable to In Memory Tables Read & Right privileges are not synchronized Doesn’t support herency between tables

Questions? GeriReshef@GMail.com Thank you!