github/sql-server-samples
1
0
Fork 0
mirror of https://github.com/Microsoft/sql-server-samples.git synced 2025-12-08 14:58:54 +00:00
Code Issues Releases Wiki Activity

update RLS sample to work with v2 of wwi

Browse Source 
City IDs are no longer hard-coded
This commit is contained in:
Jos de Bruijn
2017-06-16 11:51:46 -07:00
parent 6540dc9439
commit cbdb8751e3
1 changed files with 24 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
samples/databases/wide-world-importers/sample-scripts/row-level-security/DemonstrateRLS.sql
+24 -9
View File
@@ -78,6 +78,7 @@ GO
GRANT SELECT, UPDATE ON Sales.Customers TO [Great Lakes Sales];
GRANT SELECT ON [Application].Cities TO [Great Lakes Sales];
GRANT SELECT ON [Application].StateProvinces TO [Great Lakes Sales];
GRANT SELECT ON [Application].Countries TO [Great Lakes Sales];
GO
@@ -94,20 +95,37 @@ GO
-- where are those customers?
-- note the spatial results tab
SELECT c.Border
SELECT c.Border
FROM [Application].Countries AS c
WHERE c.CountryName = N'United States'
UNION ALL
SELECT c.DeliveryLocation
FROM Sales.Customers AS c;
SELECT c.DeliveryLocation
FROM Sales.Customers AS c
GO
-----------------------------------------------------------------------
-- updating rows that are accessible to a non-accessible row is blocked
-----------------------------------------------------------------------
DECLARE @GreatLakesCustomerID INT
DECLARE @NonGreatLakesCityID INT
UPDATE Sales.Customers -- Attempt to update
SET DeliveryCityID = 3 -- to a city that is not in the Great Lakes Sales Territory
WHERE DeliveryCityID = 32887; -- for a customer that is in the Great Lakes Sales Territory
-- pick a customer in the Great Lakes sales territory
SELECT TOP 1 @GreatLakesCustomerID=c.CustomerID
FROM Sales.Customers c JOIN Application.Cities ci ON c.DeliveryCityID=ci.CityID
JOIN Application.StateProvinces sp ON ci.StateProvinceID=sp.StateProvinceID
WHERE sp.SalesTerritory=N'Great Lakes'
-- pick a City outside of the Great Lakes sales territory
SELECT @NonGreatLakesCityID=c.CityID
FROM Application.Cities c JOIN Application.StateProvinces sp ON c.StateProvinceID=sp.StateProvinceID
WHERE CityName=N'Seattle' AND sp.StateProvinceCode=N'WA'
UPDATE Sales.Customers -- Attempt to update
SET DeliveryCityID = @NonGreatLakesCityID -- to a city that is not in the Great Lakes Sales Territory
WHERE CustomerID = @GreatLakesCustomerID; -- for a customer that is in the Great Lakes Sales Territory
GO
-- revert the impersonation
REVERT;
GO
@@ -133,9 +151,6 @@ REVOKE SELECT ON [Application].Cities FROM [Website];
REVOKE SELECT ON [Application].Countries FROM [Website];
GO
EXEC [Application].Configuration_RemoveRowLevelSecurity;
GO
DROP USER GreatLakesUser;
GO