new version (January2012)
http://download.microsoft.com/download/8/8/0/880F282A-AA4E-4351-83C0-DFFA3B56A19E/SQL_Server_2012_RLS_and_CLS_White_Paper_January2012.docx
↧
New Comment on "Documentation"
↧
New Post: Issue with tn_RemoveMarking
Hi,
Is there an issue with the output for this function fn_RemoveMarking?
It seems to produce inconsistent sql for each category.
For some the modify() is "delete /Label/CAT1"
and then for others it is "delete /Label/CAT2[.sql:variable("@marking")]"
Assume they should be like the second type?
Thanks
Zack
↧
↧
New Post: Issue with tn_RemoveMarking
Ah silly me - it switches on the cardinality.
↧
Reviewed: SQL Server Label Security Toolkit 2.0 (feb 01, 2013)
Rated 1 Stars (out of 5) - your download get an older version of toolkit (1.5.1)
↧
Reviewed: SQL Server Label Security Toolkit 2.0 (feb 01, 2013)
Rated 1 Stars (out of 5) - your download get an older version of toolkit (1.5.1). This version doesn't work with SQL Server 2012
↧
↧
New Post: Adding a new Category post go live
Hi
I was thinking about the same issue , you are asking about .
Did you have any answers yet ?
I was thinking about the same issue , you are asking about .
Did you have any answers yet ?
↧
New Post: Adding a new Category post go live
After reading the new white paper , it is prohibited by design to add new category .So this case is not exist .
But I have new question here :-
I built new label policy and I applied it on an existing database , which already have data . How I can label the existing records with labels ? is it doable ?
I will be so grateful if anyone answered me .
But I have new question here :-
I built new label policy and I applied it on an existing database , which already have data . How I can label the existing records with labels ? is it doable ?
I will be so grateful if anyone answered me .
↧
New Post: Does the "SQL Server Label Security Toolkit 2.0" work with SQL 2012
I have been trying today to use the documentation along with the Toolkit to test out RLS. I am having no luck as it appears that some steps may have been skipped or changed. Has anyone been successful using this in a SQL 2012 environment?
↧
New Post: Does the "SQL Server Label Security Toolkit 2.0" work with SQL 2012
My fault ... Did not notice the additional docs and samples in the app directory ... Works Great, and thanks
↧
↧
Released: SQL Server Label Security Toolkit 1.5 (Mar 03, 2012)
SQL Server Label Security Toolkit installer.
↧
Updated Release: SQL Server Label Security Toolkit 1.5 (Mar 03, 2012)
SQL Server Label Security Toolkit installer.
↧
New Post: vwVisibleLabels not populating?
I'm implementing Row-level security with this toolkit and whitepaper but I'm having an issue with vwVisibleLabels not populating. I know my permissions are right and they all show up in tblMarking, but tblUniqueLabelMarking and tblUniqueLabel are blank when I look at them and by association vwVisibleLabels shows up empty as well. Anyone know why this happens? I thought it would show all security labels I have access to? Thanks a bunch.
↧
New Post: vwVisibleLabels not populating?
Be aware that there are no records in tblUniqueLabel and tblUniqueLabelMarking until you create labels as part of populating labelled data in your database. The main way to do this is with an application call to usp_GetSecLabelID or usp_GetSecLabelDetails. This sproc will either return the ID of an existing label that matches the inbound argument or create entries for a new tblUniqueLabel record and return the new ID. This is deliberate - it would not be a good idea to try to populate these tables with all possible labels. The number of resulting rows could be very large and affect performance. And there is no good reason to do this - most applications tend to use a small number of actual labels, as compared to the number of possible labels. Make sense? You can check the samples in the toolkit for illustration of inserting data along with calls to usp_GetSecLabelID. Also, make sure your login is not sysadmin. The T-SQL IS_MEMBER() function always returns 0 when the current user context is sysadmin, regardless of membership in other roles. So vwVisibleLabels always is empty if you are connected as sysadmin.
↧
↧
New Post: vwVisibleLabels not populating?
artrask wrote:
Be aware that there are no records in tblUniqueLabel and tblUniqueLabelMarking until you create labels as part of populating labelled data in your database. The main way to do this is with an application call to usp_GetSecLabelID or usp_GetSecLabelDetails. This sproc will either return the ID of an existing label that matches the inbound argument or create entries for a new tblUniqueLabel record and return the new ID. This is deliberate - it would not be a good idea to try to populate these tables with all possible labels. The number of resulting rows could be very large and affect performance. And there is no good reason to do this - most applications tend to use a small number of actual labels, as compared to the number of possible labels. Make sense? You can check the samples in the toolkit for illustration of inserting data along with calls to usp_GetSecLabelID. Also, make sure your login is not sysadmin. The T-SQL IS_MEMBER() function always returns 0 when the current user context is sysadmin, regardless of membership in other roles. So vwVisibleLabels always is empty if you are connected as sysadmin.Interesting. So currently on my Frontend I have a form that Queries "TableA" to provide specific columns. I am trying to replace "TableA" with a view of "TableA" that only shows records with the specified SecLabelID. If tblUniqueLabel and tblUniqueLabel only show new records that are added with the SecLabel, is there anyway to populate them with existing records I retroactively assign a SecLabelID? Thanks a Bunch.
↧
Created Unassigned: Simple solution for labeling each row without user security level requirement [13504]
I have a need to label the row of data as the data should be marked with a security level not the user. Is there a simple way to do this with label security toolkit? The user is irrevellent and has no bearing and this should label all data thru out the database at the row level both previous and each additional insert.
↧
