Stack Overflow
Stack Overflow

Questions tagged [row-level-security]

Row-level security is database security term which relates to the ability to define and enforce access control logic on rows of data such that a user can only retrieve the rows of data he or she is allowed to view.

Row-level security is database security term which relates to the ability to define and enforce access control logic on rows of data such that a user can only retrieve the rows of data he or she is allowed to view.

Several database vendors provide row-level security mechanisms. For instance:

  • Oracle provides Virtual Private Database (VPD), a free feature of the Oracle Enterprise Database.
  • MySQL provides fine-grained access control (FGAC). This is further detailed in this 2006 article.
  • IBM DB2 provides row/column-level access control (RCAC). This is further detailed in this IBM knowledge base.
  • SQL Server and Azure SQL Database provide Row-Level Security (RLS). This is further detailed in the MSDN product documentation.

In row-level security, a user can ask to view a set of data e.g. medical records. The database table (or view) contains a complete set of medical records but only returns those records the user is entitled to view. The authorization is typically driven through the configuration of VPD/RCAC/FGAC or through an access control policy e.g. doctors can view the medical records of patients they are assigned to.

Row-level security is becoming more prevalent with the rise of and , technologies that help standardize access control.

An extension of row-level security is the ability to apply cell-level security. This space has been coined as dynamic data masking by Gartner analyst Joseph Feiman (see this report and these videos on data masking).

There are several third party vendor solutions which provide row-level security / dynamic data masking:

  • GreenSQL
  • Informatica DDM
  • Axiomatics Data Access Filter MD

Additional information and vendors are listed on Wikipedia.

367 questions
0
votes
1 answer

Row Level Security (RLS) for a SSAS Tabular Model

I am new to SSAS technologies for developing analytical models. I have to build several tabular models for a huge application in which security is quite relevant. What I would like to do is to re-use the row level security existing in the sources of…
Simone Colucci
  • 11
  • 5
0
votes
0 answers

Row level security access across many schema SQL Server 2012

I would like to secure access to rows in tables. The problem is that I need to connect to data between databases and different schemas. I can more or less handle with it when my data is in one database and schema. The problem starts in views when…
Maciek
  • 3
  • 2
0
votes
0 answers

How can I secure my table with row level, using schema?

I'm trying to implement row level security permission to my data model. Because I'm using SQL Server 2012, I had to do this using views and users names joined with the views. (That's not the point but to those who are interested in I paste the link…
Maciek
  • 3
  • 2
0
votes
1 answer

Django Row Level Locking For Model Forms

I am using Python 3.5, Django 1.8 and PostgreSql 9.4. So I have one edit method where in get request I am rendering form and when user submit form it will get updated. Hers's the code def edit_case(request, case_id): case =…
Arjun Thakur
  • 635
  • 8
  • 21
0
votes
1 answer

Looking for tips on debugging Oracle row-level security functions

I'm looking for tips in debugging some of my row-level security predicates in an Oracle database. These predicates use a few concepts to determine whether the current user can see a record: current user's Oracle username current user's assigned…
Chris Farmer
  • 24,974
  • 34
  • 121
  • 164
0
votes
0 answers

Row-level security in Cloudera Impala

I need to implement row level security based on user id in Impala. The approach I am following right now is that I have a user to role mapping, and use that to form a master query as follows: create view dervied_view as select *, 1 as roleid from…
CodingInCircles
  • 2,565
  • 11
  • 59
  • 84
0
votes
1 answer

Row level select policy on Postgres (greenplum)

Im using a Greenploum database but im assuming its more or less the same as Postgres. I want to implement a row level security policy based on the value of a column which the table is partitioned by. I have a table. TABLE rank (id int, rank int,…
Nazilla
  • 581
  • 1
  • 7
  • 17
0
votes
0 answers

SQL Server 2012: How to set up table and row-level security (access control) for x user roles in y divisions?

I have n user roles that shall restrict the degree of access, e. g. Reader (read only) Author (select, insert, update, delete) Maintainer (e. g. create new tables or views for their organisational unit) in each of our m organisational units…
R Yoda
  • 8,358
  • 2
  • 50
  • 87
0
votes
1 answer

MYSQL Access Control

I want to implement column level and row level access control on data stored in my MySQL database. I am using NodeJS on my server, what's the way to go for this ? I see SAP Hana allows that but want to keep MySQL.
Vineet
  • 365
  • 1
  • 6
  • 20
0
votes
1 answer

Custom ACL for Row-Level Security

I have seen a few implementation of Row-Level ACL using a Permission table having a structure such as User_Id Subject_Class Subject_Id Permission_Id where Permission_Id is (Read, Write, Update, Delete, Approve, etc.) I was wondering if there is…
Daniel St-Jean
  • 117
  • 1
  • 2
  • 8
0
votes
1 answer

Expected UDT got NUMBER in Virtual Private Database Policy

I have following problem: I want to implement a 'Row Level Security Policy' to a table in my database and added this function: FUNCTION app_user_is_master_owner( schema_in IN VARCHAR2, object_in IN VARCHAR ) RETURN VARCHAR2 IS return_value…
mSchnell
  • 15
  • 6
0
votes
1 answer

How do I create multi level row level security in Tableau?

I am trying to use the automated row level security in tableau 8.1 but if I create the security at the highest level it doesn't pass the security to the children of the level. I can only achieve this by creating a massive excel sheet that has every…
user3466908
  • 1
  • 1
  • 1
0
votes
1 answer

How to Configure SQL Server User to filter tables for Multi-tenant App

We have a need to build an EXE app that runs on a customer's server that accesses our Multi-Tenant SQL database. We have a Column SubscriberId for each table that we use in our web app to limit users to just the records that belong to their…
user1778402
  • 41
  • 4
0
votes
1 answer

How to restrict DB user to view table data if he has SELECT permission

An Oracle DB user has SELECT permission on all the tables of a DB schema. Can i restrict the user to view the table data.The user should be able to select the table but should not be able to see the data. This specific requirement is required for…
Anuj
  • 197
  • 2
  • 11
0
votes
2 answers

Providing Access to Views in Hive

I am new to Hadoop/Hive. I have a question related to VIEWS in Hive. I have a requirement in Hive where I need to give access to specific rows of a table to some users and specific columns of a table to some users. I know we can create VIEWS in…
user2732748
  • 97
  • 4
  • 12
1 2 3
…
24
25