Lesson Learned #134: Row Level Security and Session Context

by Scott Muniz | Sep 11, 2020 | Uncategorized

This article is contributed. See the original author and article here.

Today, I worked on a service request that our customer needs to avoid that some users could retrieve some rows but depending on a specific value of customer application. In this situation, I suggested to use sp_set_session_context that allows to save some details in the session context and use it during the duration of the session. 

The first thing that I need to do, is, for example, run the following TSQL command every time that I stablished a connection to the SQL Database – EXEC sp_set_session_context ‘Allow’, 1

The value 1 means that I will be able to see the data and 0 not. 

Right now, I need to create the function using this code:

CREATE FUNCTION SecPred1(@Allow int) 
RETURNS TABLE 
WITH SCHEMABINDING
AS 
RETURN SELECT 1 AS valor where @Allow=1

And I’m going to create a dummy table:

CREATE TABLE Protegido1
  (ID int IDENTITY PRIMARY KEY,
   Nombre varchar(100) MASKED WITH (FUNCTION = 'partial(1,"XXXXXXX",0)') NULL,
   Apellido varchar(100) NOT NULL,
   NrTlf varchar(12) MASKED WITH (FUNCTION = 'default()') NULL,
   Email varchar(100) MASKED WITH (FUNCTION = 'email()') NULL, 
   UserID int );


   INSERT Protegido1 (Nombre, Apellido, NrTlf, Email, UserId) VALUES 
('Roberto', 'Torres', '91551234567', 'RTorres@contoso.com', 5),
('Juan', 'Galvin', '95551234568', 'JGalvin@contoso.com', 5),
('José', 'Garcia', '95551234569', 'Jgarcia@contoso.net',1);

Finally, I’m going to apply this function to the security context:

CREATE SECURITY POLICY [secpol1] ADD FILTER PREDICATE [dbo].[SecPred1](CONVERT(int,SESSION_CONTEXT(N'Allow') )) on [dbo].[Protegido1]

For example, if I change the value to 0 using the following TSQL: EXEC sp_set_session_context ‘Allow’, 0 and I run the command select * from Protegido1 I don’t have any results but if I changed to 1, for example, EXEC sp_set_session_context ‘Allow’, 1 I’m going to obtain all the values. 

Enjoy!

Universal Print preview available for Windows 10 Enterprise and Education

by Scott Muniz | Sep 11, 2020 | Uncategorized

This article is contributed. See the original author and article here.

If your organization has Windows 10 Enterprise E3 or E5, or Windows 10 Education A3 or A5, you are now eligible to enable the Universal Print public preview in your tenant. Universal Print is a Microsoft 365 subscription-based service that can help you centralize print management. The solution is fully integrated with Azure Active Directory and supports single sign-on scenarios.

Today, organizations with the following licensing subscriptions are eligible to participate in the Universal Print public preview:

• Windows 10 Enterprise E3 or E5
• Windows 10 Education A3 or A5
• Microsoft 365 Enterprise E3 and E5
• Microsoft 365 Education A3 and A5

Stay tuned to the Universal Print Blog for updates on eligibility for Microsoft 365 F3 and Microsoft 365 Business Premium, both of which are on the roadmap,

For step-by-step instructions on how to participate in the Universal Print public preview, and related resources, see accessing the Universal Print public preview.

Universal Print preview licensing questions

by Scott Muniz | Sep 11, 2020 | Uncategorized

This article is contributed. See the original author and article here.

As of today, organizations with Microsoft 365 and Windows 10 Enterprise and Education subscriptions are eligible to enable the Universal Print preview.

Microsoft 365 brings together Office, Enterprise Mobility + Security, and Windows 10 Enterprise to empower people with the most innovative productivity tools. In previous weeks, we enabled the Universal Print preview for Microsoft 365 Enterprise and Education subscriptions. For Microsoft 365 Enterprise, Microsoft 365 E3 and E5 subscriptions are currently eligible for Universal Print. On the Microsoft 365 Education side of the house, Microsoft 365 A3 and A5 subscriptions are eligible.

Today, we are adding Windows 10 Enterprise E3 and E5, as well as Windows 10 Education A3 and A5 to the list of subscriptions eligible for the Universal Print preview. Enable the trial in in your tenant today!

If your organization subscribes to Office 365 and/or Enterprise Mobility + Security, but not Windows 10 E3, E5, A3 or A5, you are not eligible for Universal Print.

Microsoft 365 F3 and Microsoft 365 Business Premium will be eligible for Universal Print in the future. They are still on our “to-do” list, so stay tuned for updates!

To learn more, please read accessing the Universal Print public preview for step-by-step instructions, support links, and answers to frequently asked questions.

And don’t forget to participate in the community discussions (we are there too!) and share your ideas and feature requests as you try it out.

Try Universal Print today!

Cumulative Update #22 for SQL Server 2017 RTM

by Scott Muniz | Sep 10, 2020 | Uncategorized

This article is contributed. See the original author and article here.

The 22nd cumulative update release for SQL Server 2017 RTM is now available for download at the Microsoft Downloads site. Please note that registration is no longer required to download Cumulative updates.
To learn more about the release or servicing model, please visit:
• CU22 KB Article: https://support.microsoft.com/en-us/help/4577467
Starting with SQL Server 2017, we adopted a new modern servicing model. Please refer to our blog for more details on Modern Servicing Model for SQL Server
• Microsoft® SQL Server® 2017 RTM Latest Cumulative Update: https://www.microsoft.com/download/details.aspx?id=56128
• Update Center for Microsoft SQL Server: https://docs.microsoft.com/en-us/sql/database-engine/install-windows/latest-updates-for-microsoft-sql-server