Skip to content

Get the most out of MSSQL !

Consultant & Trainer for all things MSSQL

  • Home
  • Company
  • Business Intelligence
  • Simply Better Business

Row level permissions in SQL Server

Posted on September 24, 2014March 20, 2021 by jayanth.kurup

We all know that SQL allows object level permissions down till the table, some of even know that it allows permissions at the column level too. But recently I was asked how to implement row level security at the table instead of column level security. In order to answer this I need to first explain the context. A user asked me how to implement security on a payslip table where the user is able to see only his payslip and not anybody else’s.  Now the assumption here is that we can grant select or update permissions against a particular row just like how we can grant select or update permission against a table.

For the first thing to note here is , we can do this only if we can view the data for that user , in other words when the query

FETCH PAYSLIPDATA FROM PAYSLIPTABLE FOR USERNAMECOLUMN = @USERNAME

So essentially the where condition acts like a filter to prevent the user from being able to view (or Update) another person’s data. The only question is how to populate the variable @username , we can store the login credentials in a session variable and pass that as the input at the time of login , or if the database has a windows account for every user in the company then we can replace

Replace the @username variable with the function SUSER_SNAME()

 Naturally this implementation requires that the payslip table store the domain account name for the user in order to do lookup and to extend this example all tables would need the username to be available in order filter at the row level.

Please Consider Subscribing

Subscribe

CategoriesDatabasesTagsaccount, administration, AI, Analysis Services, answer, assumption, AWS, Azure, Bangalore, Bengaluru, BigData, BLR, Business Intelligence, Cloud, column, company, condition, Consultant, Consulting, context, Corporate, count, cred, credential, Data, database, date, development, domain, Enabled Business Solutions, end, event, example, expert, fun, function, Grant, GRANT SELECT, implementation, index, India, input, Jayanth, Kurup, level, login, lookup, Migration, ML, ms sql server, MSBI, MSSQL, MYSQL, name, need, network, note, object, Oracle, part, permission, person, place, pop, power pivot, Power Query, PowerApps, PowerBI, Powershell, pre, Python, Query, question, RDBMS, red, Remote, row, row level security, sec, security, SELECT, session, sql, SQL 2000, SQL 2005, SQL 2008, sql 2008 r2, sql 2012, SQL 2014, SQL 2016, SQL 2017, SQl 2019, SSAS, SSIS, SSMS, SSRS, SUM, T-SQL, tab, Tables, text, thing, tools, trainer, Transact, tuning, update, update permission, Upgrade, Uri, user, username, variable, Very large database, view, Virtual, virtual machine, visual studio, VM, window, windows, word

jayanth.kurup

This post was written by Jayanth Kurup. A Microsoft SQL Server Consultant and Trainer based out of Bangalore, India. Jayanth has been working on MS SQL Server for over 15 years. He is a performance tuning and Business Intelligence expert. Having worked with companies like Microsoft, DELL, Wells Fargo, Thomson Reuters and many other fortune 100 companies. Some other technologies Jayanth works on include Microsoft Azure, PowerBI, Python and AWS. When he isn’t consulting or training, Jayanth like to travel, paint and read. He is also very active in social causes and the founder of Enabled Business Solutions. Visit his company by clicking the link in the menu or email him directly.

Post navigation

PreviousPrevious post: Metrics vs Mass appeal? What companies probably don’t yet understand.
NextNext post: Why BI professionals should believe in Aliens

The Latest

  • Monty Hall Simulation using T-SQL April 5, 2022
  • Query to quickly profile a column February 7, 2022
  • Outlook 2019 keeps asking for password multiple times December 9, 2021
  • Part 2:- Learning T SQL for beginners – Datatypes September 28, 2021
  • Part 1:- Learning T SQL for beginners- SQL, Tables and Nulls September 27, 2021
  • Query to find execution time of Jobs July 28, 2021
  • A simple script to decapitalize Column names July 19, 2021
  • My personal side effects with Covishield June 27, 2021
  • Setting up and Configuring CUDA, CUDNN and PYTorch for Python Machine Learning. June 3, 2021
  • keras.utils.generic_utils’ has no attribute ‘populate_dict_with_module_objects May 30, 2021

Find By Category

  • Azure
  • Databases
  • Events
  • Performance Tuning
  • PowerBI
  • Uncategorized
  • Website Design

Archive

  • April 2022 (1)
  • February 2022 (1)
  • December 2021 (1)
  • September 2021 (2)
  • July 2021 (2)
  • June 2021 (2)
  • May 2021 (2)
  • April 2021 (5)
  • March 2021 (10)
  • January 2021 (2)
  • November 2020 (2)
  • October 2020 (3)
  • September 2020 (4)
  • August 2020 (6)
  • July 2020 (1)
  • June 2020 (32)
  • May 2020 (18)
  • April 2020 (2)
  • March 2020 (4)
  • February 2020 (5)
  • January 2020 (1)
  • December 2019 (1)
  • November 2019 (14)
  • October 2019 (3)
  • September 2019 (1)
  • July 2019 (3)
  • June 2019 (2)
  • May 2019 (1)
  • April 2019 (2)
  • March 2019 (1)
  • January 2019 (4)
  • December 2018 (2)
  • November 2018 (4)
  • September 2018 (6)
  • August 2018 (2)
  • July 2018 (3)
  • June 2018 (4)
  • May 2018 (1)
  • April 2018 (4)
  • March 2018 (3)
  • February 2018 (3)
  • January 2018 (1)
  • December 2017 (2)
  • November 2017 (4)
  • August 2017 (2)
  • July 2017 (5)
  • May 2017 (1)
  • March 2017 (3)
  • January 2017 (3)
  • December 2016 (2)
  • November 2016 (2)
  • October 2016 (4)
  • September 2016 (1)
  • August 2016 (1)
  • July 2016 (1)
  • June 2016 (1)
  • May 2016 (2)
  • April 2016 (1)
  • March 2016 (14)
  • February 2016 (10)
  • January 2016 (19)
  • December 2015 (3)
  • November 2015 (5)
  • October 2015 (10)
  • September 2015 (9)
  • August 2015 (16)
  • July 2015 (13)
  • June 2015 (4)
  • May 2015 (2)
  • April 2015 (2)
  • March 2015 (7)
  • February 2015 (3)
  • January 2015 (22)
  • December 2014 (1)
  • November 2014 (5)
  • October 2014 (12)
  • September 2014 (5)
  • August 2014 (7)
  • July 2014 (41)
  • June 2014 (9)
  • May 2014 (12)
  • April 2014 (32)

Members Only

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
Proudly powered by WordPress