Access control on Azure SQL Data warehouse





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}







0















Access Control setup on Tables inside DBO schema.



We are Denying select permission on some tables inside DBO schema as these tables have some critical data.



Issue: Even when Select query fails on the object. A user having create view grants can create a view on the same object.



Sample queries:
Select * from DBO.TABLE1 -- Fails as user does not have access.



Create view USER.VIEW1 as (Select * from DBO.TABLE1)
-- this goes through.



Question: How to restrict this from happening.









share







New contributor




Dhruv Saraswat is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.



























    0















    Access Control setup on Tables inside DBO schema.



    We are Denying select permission on some tables inside DBO schema as these tables have some critical data.



    Issue: Even when Select query fails on the object. A user having create view grants can create a view on the same object.



    Sample queries:
    Select * from DBO.TABLE1 -- Fails as user does not have access.



    Create view USER.VIEW1 as (Select * from DBO.TABLE1)
    -- this goes through.



    Question: How to restrict this from happening.









    share







    New contributor




    Dhruv Saraswat is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
    Check out our Code of Conduct.























      0












      0








      0








      Access Control setup on Tables inside DBO schema.



      We are Denying select permission on some tables inside DBO schema as these tables have some critical data.



      Issue: Even when Select query fails on the object. A user having create view grants can create a view on the same object.



      Sample queries:
      Select * from DBO.TABLE1 -- Fails as user does not have access.



      Create view USER.VIEW1 as (Select * from DBO.TABLE1)
      -- this goes through.



      Question: How to restrict this from happening.









      share







      New contributor




      Dhruv Saraswat is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.












      Access Control setup on Tables inside DBO schema.



      We are Denying select permission on some tables inside DBO schema as these tables have some critical data.



      Issue: Even when Select query fails on the object. A user having create view grants can create a view on the same object.



      Sample queries:
      Select * from DBO.TABLE1 -- Fails as user does not have access.



      Create view USER.VIEW1 as (Select * from DBO.TABLE1)
      -- this goes through.



      Question: How to restrict this from happening.







      azure





      share







      New contributor




      Dhruv Saraswat is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.










      share







      New contributor




      Dhruv Saraswat is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.








      share



      share






      New contributor




      Dhruv Saraswat is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.









      asked 2 mins ago









      Dhruv SaraswatDhruv Saraswat

      1




      1




      New contributor




      Dhruv Saraswat is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.





      New contributor





      Dhruv Saraswat is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






      Dhruv Saraswat is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






















          0






          active

          oldest

          votes












          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "182"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: false,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: null,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });






          Dhruv Saraswat is a new contributor. Be nice, and check out our Code of Conduct.










          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fdba.stackexchange.com%2fquestions%2f234007%2faccess-control-on-azure-sql-data-warehouse%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes








          Dhruv Saraswat is a new contributor. Be nice, and check out our Code of Conduct.










          draft saved

          draft discarded


















          Dhruv Saraswat is a new contributor. Be nice, and check out our Code of Conduct.













          Dhruv Saraswat is a new contributor. Be nice, and check out our Code of Conduct.












          Dhruv Saraswat is a new contributor. Be nice, and check out our Code of Conduct.
















          Thanks for contributing an answer to Database Administrators Stack Exchange!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fdba.stackexchange.com%2fquestions%2f234007%2faccess-control-on-azure-sql-data-warehouse%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          SQL Server 17 - Attemping to backup to remote NAS but Access is denied

          Always On Availability groups resolving state after failover - Remote harden of transaction...

          Restoring from pg_dump with foreign key constraints