Securing SQL Server: DBAs Defending the Database

© Peter A. Carter 2016

Peter A. Carter, Securing SQL Server, 10.1007/978-1-4842-2265-2_4

4. Data-Level Security

Peter A. Carter¹ 

(1)Botley, UK

Below the principal hierarchy, SQL Server provides a rich set of functionality for securing data. This chapter discusses the appropriate use of schemas, ownership chaining, impersonation, row-level security, and dynamic data masking.

Note

Row-Level Security and dynamic data masking are new features of SQL Server 2016.

Schemas

Schemas provide a logical namespace for database objects. They also provide a layer of abstraction between objects and their owners. Every object within a database must be owned by a database user. In much older versions of SQL Server, this ownership was direct. In other words, a user named ...