1. Row Level Security in SQL Azure and in On Premise
December 3th, 2015
Geri Reshef,
MVP since 2013
DBA – Naya, eToro (
Communities - local
Moderator: Dan Brennan

2. Row Level Security (RLS):
Agenda
Row Level Security (RLS):
What is it?
The new solution in Azure & SQL 2016
Demo (The new and the classic technologies)
Conclusions
Q&A

3. Cloud First
SQL Azure
SQL Azure V12
On Premise

4. Read privileges & Row Level Security
RLS: Row Level Security
Data Masking,
Always Encrypted

5. Why RLS? Utilizations, advantages, characteristics
Regulatory Compliance
Internal rules of the firm
Protection of sensitive data
Security in the data layer (where it is implemented)
Prevention of SQL Injection
Minor changes in the codes
Transparent for the application
An efficient solution
Combined with the security system
The logic is implemented through a single function

6. The Architecture of the RLS
Inline User Defined Function Returns Table With Schemabinding
Security Policy
Directly
Through a policy table
Combined with the security system
Select From Table
Semi Join Inline function
Where .. In (Select .. From ..)
Where Exists (Select .. From ..)

7. Demo

8. RLS: The Limits of the New Technology
Not applicable to Views
The new technology functions only on SQL Azure V12
Not applicable to In Memory Tables
Read & Right privileges are not synchronized
Doesn’t support herency between tables

9. Questions?
Thank you!