Solved

Data Protection under SQL 2012.  (Column Protection)

Posted on 2016-08-08
6
64 Views
Last Modified: 2016-08-10
Been looking for the best way to protect a column of data IE ssn, salary within a table.  
I need to protect the ssn and salary field from people.   These folks will have access to SQL server Management tool. Is there a way to add security by users to column using sql 2012.  
Any other ideas that would work?
I looked at encryption, but the app that uses the data cannot handle the decrypt.  

Thanks
Terry
0
Comment
Question by:tambrosi
  • 3
  • 2
6 Comments
 
LVL 65

Assisted Solution

by:Jim Horn
Jim Horn earned 250 total points
ID: 41747325
For starters, how about creating a view that contains all columns except for the confidential ones, and then give users access to the view, and remove access to the table?
1
 
LVL 47

Accepted Solution

by:
Vitor Montalvão earned 250 total points
ID: 41747357
You can always DENY select on the columns that you want for the respective users (In SSMS right-click on the desired table name and select Properties and go to Permissions option).
DenyColumnSelect.PNG
0
 
LVL 47

Assisted Solution

by:Vitor Montalvão
Vitor Montalvão earned 250 total points
ID: 41747361
Or use T-SQL:
DENY SELECT ON TableName (ColumnName) TO UserName

Open in new window

0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 

Author Comment

by:tambrosi
ID: 41747469
Thanks for the info.   When I am under SSMS, and look at the 'Column Permissions" tab, it is greyed out.   Is there
special security that is required to see that tab to display the fields on a table.
Thanks
Terry
0
 
LVL 47

Expert Comment

by:Vitor Montalvão
ID: 41748291
When I am under SSMS, and look at the 'Column Permissions" tab, it is greyed out.   Is there
 special security that is required to see that tab to display the fields on a table.
You need to select an user or role first. After that the option will be enabled.
0
 

Author Closing Comment

by:tambrosi
ID: 41750187
Thanks for the comments on this.  Appreciated, I will be using a combination of both.
Appreciated!!
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article I will describe the Copy Database Wizard method as one possible migration process and I will add the extra tasks needed for an upgrade when and where is applied so it will cover all.
I have a large data set and a SSIS package. How can I load this file in multi threading?
This video shows, step by step, how to configure Oracle Heterogeneous Services via the Generic Gateway Agent in order to make a connection from an Oracle session and access a remote SQL Server database table.
Viewers will learn how to use the UPDATE and DELETE statements to change or remove existing data from their tables. Make a table: Update a specific column given a specific row using the UPDATE statement: Remove a set of values using the DELETE s…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now