Solved

Data Protection under SQL 2012.  (Column Protection)

Posted on 2016-08-08
6
48 Views
Last Modified: 2016-08-10
Been looking for the best way to protect a column of data IE ssn, salary within a table.  
I need to protect the ssn and salary field from people.   These folks will have access to SQL server Management tool. Is there a way to add security by users to column using sql 2012.  
Any other ideas that would work?
I looked at encryption, but the app that uses the data cannot handle the decrypt.  

Thanks
Terry
0
Comment
Question by:tambrosi
  • 3
  • 2
6 Comments
 
LVL 65

Assisted Solution

by:Jim Horn
Jim Horn earned 250 total points
ID: 41747325
For starters, how about creating a view that contains all columns except for the confidential ones, and then give users access to the view, and remove access to the table?
1
 
LVL 45

Accepted Solution

by:
Vitor Montalvão earned 250 total points
ID: 41747357
You can always DENY select on the columns that you want for the respective users (In SSMS right-click on the desired table name and select Properties and go to Permissions option).
DenyColumnSelect.PNG
0
 
LVL 45

Assisted Solution

by:Vitor Montalvão
Vitor Montalvão earned 250 total points
ID: 41747361
Or use T-SQL:
DENY SELECT ON TableName (ColumnName) TO UserName

Open in new window

0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 

Author Comment

by:tambrosi
ID: 41747469
Thanks for the info.   When I am under SSMS, and look at the 'Column Permissions" tab, it is greyed out.   Is there
special security that is required to see that tab to display the fields on a table.
Thanks
Terry
0
 
LVL 45

Expert Comment

by:Vitor Montalvão
ID: 41748291
When I am under SSMS, and look at the 'Column Permissions" tab, it is greyed out.   Is there
 special security that is required to see that tab to display the fields on a table.
You need to select an user or role first. After that the option will be enabled.
0
 

Author Closing Comment

by:tambrosi
ID: 41750187
Thanks for the comments on this.  Appreciated, I will be using a combination of both.
Appreciated!!
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

SQL Server engine let you use a Windows account or a SQL Server account to connect to a SQL Server instance. This can be configured immediatly during the SQL Server installation or after in the Server Authentication section in the Server properties …
International Data Corporation (IDC) prognosticates that before the current the year gets over disbursing on IT framework products to be sent in cloud environs will be $37.1B.
Using examples as well as descriptions, and references to Books Online, show the documentation available for date manipulation functions and by using a select few of these functions, show how date based data can be manipulated with these functions.
Via a live example, show how to shrink a transaction log file down to a reasonable size.

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now