8
October 1-2 Ølensvåg

October 1-2 Ølensvåg. AppFrame SQL – Security Session Code: SQL-201-Security Speaker(s): Jekaterina Golouchova

Embed Size (px)

Citation preview

Page 1: October 1-2 Ølensvåg. AppFrame SQL – Security Session Code: SQL-201-Security Speaker(s): Jekaterina Golouchova

October 1-2Ølensvåg

Page 2: October 1-2 Ølensvåg. AppFrame SQL – Security Session Code: SQL-201-Security Speaker(s): Jekaterina Golouchova

AppFrame SQL – Security

Session Code: SQL-201-SecuritySpeaker(s): Jekaterina Golouchova

Page 3: October 1-2 Ølensvåg. AppFrame SQL – Security Session Code: SQL-201-Security Speaker(s): Jekaterina Golouchova

Agenda:

• SQL Server Security• Authentication• Authorization

• AppFrame Security• Domains• Master Groups and Groups• Table Views – atbv/atbx• Triggers• sstp_Database_Maintenance_ApplyPermissions

Page 4: October 1-2 Ølensvåg. AppFrame SQL – Security Session Code: SQL-201-Security Speaker(s): Jekaterina Golouchova

SQL Server Security

• Server• Login

• SQL Server Authentication• Windows Authentication

• Roles• sysadmin• securityadmin

• Database• User• Roles

• db_owner• db_accessadmin• db_securityadmin• af_User

Page 5: October 1-2 Ølensvåg. AppFrame SQL – Security Session Code: SQL-201-Security Speaker(s): Jekaterina Golouchova

AppFrame Security

Page 6: October 1-2 Ølensvåg. AppFrame SQL – Security Session Code: SQL-201-Security Speaker(s): Jekaterina Golouchova

Table Views – atbv/atbx

CREATE VIEW [dbo].[atbv_CRM_ClientsPositions] AS SELECT * FROM atbl_CRM_ClientsPositions WITH (NOLOCK) WHERE EXISTS (SELECT * FROM dbo.sviw_System_MyPermissionsCurrentDomain WITH (NOLOCK) WHERE Domain = atbl_CRM_ClientsPositions.Domain AND TableID = 'atbl_CRM_ClientsPositions')

CREATE VIEW [dbo].[atbx_CRM_ClientsPositions] AS SELECT * FROM atbl_CRM_ClientsPositions WITH (NOLOCK) WHERE EXISTS (SELECT * FROM dbo.sviw_System_MyPermissions WITH (NOLOCK) WHERE Domain = atbl_CRM_ClientsPositions.Domain AND TableID = 'atbl_CRM_ClientsPositions')

Page 7: October 1-2 Ølensvåg. AppFrame SQL – Security Session Code: SQL-201-Security Speaker(s): Jekaterina Golouchova

Triggers

Page 8: October 1-2 Ølensvåg. AppFrame SQL – Security Session Code: SQL-201-Security Speaker(s): Jekaterina Golouchova

Apply Permissions