Securing SQL Server: DBAs Defending the Database

© Peter A. Carter 2018

Peter A. CarterSecuring SQL Serverhttps://doi.org/10.1007/978-1-4842-4161-5_4

4. Data-Level Security

Peter A. Carter¹ 

(1)

London, UK

 

Below the principal hierarchy, SQL Server provides a rich set of functionality for securing data. This chapter will discuss the appropriate use of schemas, ownership chaining, impersonation, row-level security, and dynamic data masking.

Schemas

Schemas provide a logical namespace for database objects and provide a layer of abstraction between objects and their owners. Every object within a database must be owned by a database user. In much older versions of SQL Server, this ownership was direct. In other words, a user named Luan could have owned 10 individual tables. From SQL Server 2005 onward, ...