1. Boris Hristov, SQL Server MVP
Securing SQL Azure DB?
Boris Hristov, SQL Server MVP

2. That’s not a marketing talk!
DISCLAIMER:
That’s not a marketing talk!

3. So who is this guy Boris?
@BorisHristov

4. Session’s Timeline coolness Dynamic Data Masking Row Level Security

5. Dynamic
Data Masking

6. “Have you ever…”

7. SELECT * FROM dbo.Customers
custid
FirstName
LastName
PhoneNumber
Address
CreditcardNumber 1
Boris
Hristov 2
Ivan
Donev 3
Stanislav
Zhelyaskov 4
Minchev

8. SELECT * FROM dbo.Customers
custid
FirstName
LastName
PhoneNumber
Address
CreditcardNumber 1
Boris
Hristov
xxxx-xxxx-xxxx-1111 2
Ivan
Donev
xxxx-xxxx-xxxx-2222 3
Stanislav
Zhelyaskov
xxxx-xxxx-xxxx-3333 4
Minchev
xxxx-xxxx-xxxx-4444

9. Dynamic
Data Masking
No data is changed

10. DEMO
Dynamic Data Masking

11. Row Level Security

12. “Have you ever…”

13. SELECT * FROM dbo.Orders
orderid
custid
orderdate
shipdate
shipcountry 1
4/20/ :15:49
Bulgaria 2
Germany 3 4 5

14. SELECT * FROM dbo.Orders
orderid
custid
orderdate
shipdate
shipcountry 1
4/20/ :15:49
Bulgaria 4 2 5 3

15. How is that possible?

16. No GUI, folks  -- user defined function
CREATE FUNCTION Security.fn_securitypredicate
AS sysname)
RETURNS TABLE
WITH SCHEMABINDING AS
RETURN SELECT 1 AS fn_securitypredicate_result
= USER_NAME()
OR USER_NAME() = 'Manager';
-- security policy
CREATE SECURITY POLICY SalesFilter
ADD FILTER PREDICATE Security.fn_securitypredicate(SalesRep)
ON dbo.Sales WITH (STATE = ON);

17. DEMO
Row Level Security

18. Cool, huh?

19. Not that fast…

20. Session’s Timeline coolness Dynamic Data Masking Row Level Security

21. DEMO
Row Level Security Issues

22. So is that a security feature then?

23. Or is that a programmability feature?

24. Summary RLS is great! Just be aware of the current issues.
Easily mask sensitive data with Dynamic Data Masking
A lot’s going on in SQL Azure DB

25. Thank you! Contacts: brshristov@live.com www.borishristov.com