sqlserverlst Discussions Rss Feed

New Post: Does the "SQL Server Label Security Toolkit 2.0" work with SQL 2012

AllenEllison — Thu, 13 Jun 2013 20:39:00 GMT

My fault ... Did not notice the additional docs and samples in the app directory ... Works Great, and thanks

New Post: Does the "SQL Server Label Security Toolkit 2.0" work with SQL 2012

AllenEllison — Thu, 13 Jun 2013 19:45:02 GMT

I have been trying today to use the documentation along with the Toolkit to test out RLS. I am having no luck as it appears that some steps may have been skipped or changed. Has anyone been successful using this in a SQL 2012 environment?

New Post: Adding a new Category post go live

ABUKHAZNEH — Wed, 13 Feb 2013 11:34:32 GMT

After reading the new white paper , it is prohibited by design to add new category .So this case is not exist .

But I have new question here :-

I built new label policy and I applied it on an existing database , which already have data . How I can label the existing records with labels ? is it doable ?

I will be so grateful if anyone answered me .

New Post: Adding a new Category post go live

ABUKHAZNEH — Tue, 12 Feb 2013 21:03:46 GMT

Hi

I was thinking about the same issue , you are asking about .
Did you have any answers yet ?

New Post: Issue with tn_RemoveMarking

Zack321 — Thu, 17 Jan 2013 15:00:30 GMT

Ah silly me - it switches on the cardinality.

New Post: Issue with tn_RemoveMarking

Zack321 — Thu, 17 Jan 2013 14:50:51 GMT

Hi,

Is there an issue with the output for this function fn_RemoveMarking?

It seems to produce inconsistent sql for each category.

For some the modify() is "delete /Label/CAT1"

and then for others it is "delete /Label/CAT2[.sql:variable("@marking")]"

Assume they should be like the second type?

Thanks

Zack

New Post: Label security for multi-tenant hierarchy?

shankarnrk — Sat, 15 Sep 2012 11:18:04 GMT

Hi Alex,

Please take a look at www.techcello.com. We have implemented multi-tenant hierarchy and expose it as API. Ours is a platform built on top of .NET. So, if you would like to build an application involving tenant hierarchy, you can easily consume our APIs and build your business application quickly.

Few of the use cases:

- Distributor/dealer kind of business applications. An enterprise has multiple distributors (at top level) in different countries/cities and they have sub-dealers to reach out to end customers. If you are trying to build an inventory system or customer relationship system or billing system for this kind of setup, it can quite become tricky with privileges and data access.

- Loyalty management system for a chain of stores: Imagine an ISV trying to build a loyalty management system providng services for multiple brands and multiple stores. You need to have some kind of tenant hierarchy between stores.

Thank you.

info@techcello.com

New Post: Adding a new Category post go live

rahilbukhari — Wed, 15 Aug 2012 10:31:57 GMT

If we need to add a new category after the system has gone live, what is the recommended way to do this? I can't see any function that enables this and I imagine that adding a new record in the category table isn't enough due to references in views/functions/sp's.

Is the only way to maintain this through the Desginer? This will involve dropping everything in the target security database and then running the "Apply" process. Correct me if I'm wrong here.

Many Thanks.

Rahil

New Post: Label security for multi-tenant hierarchy?

alexkey — Thu, 29 Mar 2012 14:46:13 GMT

Hi,

We're looking at possible solutions to provide some sort of hierarchical multi tenancy.

I'm starting to realise that this isn't a pure multi-tenancy problem, as my research generally shows that multi tenancy is more around creating complete segmentation between tenants - whereas we need this to act in a hierarchy... so perhaps this could be more though of as a row level access problem?

For example, people within a unit at the top of the hierarchy can see data below them.

But also people within a unit at the top can create data which they can give read access to people below them in the hierarchy.

It seems unwise to come up with our own architecture for this problem when if we apply our problem to the labelling concept.

However, this sort of labelling seems appropriate when the are controllable number of predefined "markings" (I think I've got the right terminology), but would this scale well when applied to business units where there would be hundreds with a large depth?

-thanks for your help

Alex.