Comments on: Row-Based Security http://facility9.com/2009/02/04/row-based-security Jeremiah Peschka's ruminations on sql, ruby, c#, and other things Wed, 28 Jul 2010 14:05:12 -0400 http://wordpress.org/?v=2.9.2 hourly 1 By: K. Brian Kelley http://facility9.com/2009/02/04/row-based-security#comment-189 K. Brian Kelley Thu, 05 Feb 2009 01:55:48 +0000 http://facility9.com/?p=308#comment-189 There are some disclosure issues with row-level security in SQL Server. While they can be somewhat worked around in SQL Server 2000, I don't believe they can be in 2005 and 2008 because we don't have the same access to sysmessages. In any case, more here (look for the heading Row-Level Disclosure): http://technet.microsoft.com/en-us/library/cc966395.aspx There are some disclosure issues with row-level security in SQL Server. While they can be somewhat worked around in SQL Server 2000, I don’t believe they can be in 2005 and 2008 because we don’t have the same access to sysmessages. In any case, more here (look for the heading Row-Level Disclosure):

http://technet.microsoft.com/en-us/library/cc966395.aspx

]]>