From c947a272038437ca9ffd20bd0c31ad208c72fcfd Mon Sep 17 00:00:00 2001 From: Jovan Popovic Date: Fri, 5 Oct 2018 22:01:33 +0200 Subject: [PATCH] Fixed RLS predicate in dublocated code Added access to WebApi in the duplicated RLS predicate --- .../Stored Procedures/Configuration_ApplyRowLevelSecurity.sql | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/samples/databases/wide-world-importers/wwi-ssdt/wwi-ssdt/Application/Stored Procedures/Configuration_ApplyRowLevelSecurity.sql b/samples/databases/wide-world-importers/wwi-ssdt/wwi-ssdt/Application/Stored Procedures/Configuration_ApplyRowLevelSecurity.sql index b3204af0..da7def4b 100644 --- a/samples/databases/wide-world-importers/wwi-ssdt/wwi-ssdt/Application/Stored Procedures/Configuration_ApplyRowLevelSecurity.sql +++ b/samples/databases/wide-world-importers/wwi-ssdt/wwi-ssdt/Application/Stored Procedures/Configuration_ApplyRowLevelSecurity.sql @@ -28,7 +28,7 @@ RETURN (SELECT 1 AS AccessResult INNER JOIN [Application].StateProvinces AS sp ON c.StateProvinceID = sp.StateProvinceID WHERE c.CityID = @CityID) + N'' Sales'') <> 0 - OR (ORIGINAL_LOGIN() = N''Website'' + OR (ORIGINAL_LOGIN() = N''Website'' OR ORIGINAL_LOGIN() = N''WebApi'' AND EXISTS (SELECT 1 FROM [Application].Cities AS c INNER JOIN [Application].StateProvinces AS sp