Re: Using Views for Security

From: DebHerman (DebHerman_at_discussions.microsoft.com)
Date: 05/18/05


Date: Tue, 17 May 2005 22:51:01 -0700

Thanks for the reply, but I don't believe this article addressed what I am
trying to do, or if it did, I didn't recognise it. My problem is when I try
to go across databases, I don't get the same results as within the same
database. I'm not really looking for row level security. I want to give
users access to a view but not the the underlying tables. This works in the
same database but not across databases.
"Uri Dimant" wrote:

> Hi
> Read Vyas's article describing row level security
>
> http://vyaskn.tripod.com/row_level_security_in_sql_server_databases.htm
>
> "DebHerman" <DebHerman@discussions.microsoft.com> wrote in message
> news:373B1A28-B090-488A-89D1-1DFDF1FEA1FA@microsoft.com...
> > I am using SQL views to aid with security in my SQL Server implementation.
> > For example I create viewA as select field1, field2 from TAble1. I grant
> > select access to viewA to user1 but not access to the underlying table.
> As
> > long as the owner of viewA has permissions to the table user1 can access
> the
> > view but not the table. This works great. However I want to take this
> one
> > step further in that viewA acutally is created on tables in another
> database
> > on the same server. In this scenario I give select access to viewA to
> > User1. The owner of viewA rights to the table is the other database; he
> > even has dbo rights to the database. In this case user1 can't select from
> > viewA. User1 gets the error that he does not have rights to the table in
> the
> > other database. Is there something I am missing or is this not allowed. I
> > can't find any specific documentation regarding this. Thanks.
> >
>
>
>



Relevant Pages

  • New SecurityFocus Article
    ... Oracle Row Level Security: Part 2 ... or for a hosting company to store data for ... different companies in one database. ...
    (Focus-SUN)
  • Re: Using Views for Security
    ... you have to have the user defined in the database ... I'm not really looking for row level security. ... > users access to a view but not the the underlying tables. ... >> Read Vyas's article describing row level security ...
    (microsoft.public.sqlserver.security)
  • Re: Opening dbase in full screen with no way to "back end"
    ... I have a database that I want to open viewing a form (the ... "switchboard") full screen, without allowing users access to editing ...
    (microsoft.public.access.security)
  • Re: Do web services make sense for me?
    ... Web Service is one of the way involve your class. ... > As far as I can tell, I will still need to give the users access to my ... > database, because I have to have the ... > Ron L ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Do web services make sense for me?
    ... Web Service is one of the way involve your class. ... > As far as I can tell, I will still need to give the users access to my ... > database, because I have to have the ... > Ron L ...
    (microsoft.public.dotnet.languages.vb)