Solved

Security aspect of views in SQL Server

Posted on 2011-03-25
2
227 Views
Last Modified: 2012-06-21
Hi

I was reading an article on views. How they are useful and in what scenarios. My query is what is the security aspect of view. Is it safe and how can you justify it.


Regards
Karan  
0
Comment
Question by:KaranGupta
2 Comments
 
LVL 3

Assisted Solution

by:kumarnimavat
kumarnimavat earned 150 total points
ID: 35214414
0
 
LVL 28

Accepted Solution

by:
Ryan McCauley earned 350 total points
ID: 35215163
Views can ensure that people have easy access to only the data that they have rights to see. For example, if you grant a person rights to see only 3 of a table's 5 columns, you can create a view so they can do a "select *" from the view and see what they're allowed to see. In the same way, I person is only allowed to see HOUR details for full-time employees, you could add a where clause to the view "where emptype='FT'" and they'd just see those people.

They still have access to the tables, but it just makes viewing what they have access to easier, as opposed to forgetting to filter their results and being greeted with an "access denied" message constantly.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction Since I wrote the original article about Handling Date and Time in PHP and MySQL (http://www.experts-exchange.com/articles/201/Handling-Date-and-Time-in-PHP-and-MySQL.html) several years ago, it seemed like now was a good time to updat…
Password hashing is better than message digests or encryption, and you should be using it instead of message digests or encryption.  Find out why and how in this article, which supplements the original article on PHP Client Registration, Login, Logo…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now