Database Administrators Stack Exchange
Database Administrators Stack Exchange

Questions tagged [dynamic-data-masking]

17 questions
8
votes
2 answers

SQL Server: can dynamic data masking be safe when providing a database backup?

I have a SQL Server 2016 SP1 with data that I am ready to share with a partner (developer), except for a few columns, example: email varchar(64) MASKED WITH (FUNCTION = 'email()') NULL I give the partner the credentials for logging in to the test…
carlo.borreo
  • 1,477
  • 6
  • 22
  • 37
3
votes
1 answer

Dynamic Data Masking Issue when Concatenating Fields

You can reproduce the issue here: CREATE TABLE [dbo].[EmployeeDataMasking]( [RowId] [int] IDENTITY(1,1) NOT NULL, [EmployeeId] [int] NULL, [LastName] [varchar](50) MASKED WITH (FUNCTION = 'partial(2, "XXXX", 2)') NOT NULL, …
Randy Minder
  • 2,032
  • 4
  • 22
  • 41
3
votes
2 answers

Dynamic Data Masking Doesn't Seem To Work Correctly With ISNULL

Here is the code to reproduce the issue: CREATE TABLE [dbo].[EmployeeDataMasking]( [RowId] [int] IDENTITY(1,1) NOT NULL, [EmployeeId] [int] NULL, [LastName] [varchar](50) MASKED WITH (FUNCTION = 'partial(2, "XXXX", 2)') NOT NULL, …
Randy Minder
  • 2,032
  • 4
  • 22
  • 41
2
votes
3 answers

Making production data accessible to developers via masking

We want to provide developers in our organization masked data from production to help troubleshoot production issues. What would be the best way to approach it? I've read this article…
areller
  • 121
  • 3
2
votes
2 answers

Can't create indexed view against table with masked columns

I am trying to create an index on a view that references a table with a masked column (SQL Server 2016). The masked column is not the only one in that table, and it's not used in the view. create unique clustered index [IX_Name] on…
Dmitri Trofimov
  • 123
  • 1
  • 5
2
votes
1 answer

How to check which database roles can see `masked` columns?

In SQL Server 2016 SP1 standard edition we can use dynamic-data-masking. The masking of data is controlled using the built-in security, for example: REVOKE UNMASK TO user_who_cannot_see_senstive_data Of course, this is not working for the users…
gotqn
  • 4,348
  • 11
  • 52
  • 91
1
vote
0 answers

SQL Server replication with masking columns

Using a sql server, I have to replicate the database 'source' to the 'target'. It will be a pull subscription, ran as agent on the target. Some of the columns will have to be masked, so not to be shown to users at the 'target'. 1.) I know how to…
Dmitriy Ryabin
  • 111
  • 3
1
vote
2 answers

Problem with unmasking a database user during a sproc

I am having an issue with a stored procedure that refreshes dynamic data masking on a database. This sproc is run as a job against all databases on this server. The problem that I have is that I have a system database user that handles API calls to…
Tom H
  • 11
  • 1
1
vote
1 answer

Unable to Mask data after applying mask function in Azure Synapse table

I have created table prd.CustomerDimension CREATE TABLE [prd].[CustomerDimensions] ( [WWI Customer ID] [int] NOT NULL, [Customer] [nvarchar](100) NOT NULL, [Bill To Customer] [nvarchar](100) NOT NULL, [Category] [nvarchar](50) NOT…
Heta Desai
  • 21
  • 2
1
vote
2 answers

How to grant Unmask permission to a user at table level and column level in sql server?

How to grant unmask permission to a user for one particular table and to one particular column within a table? For example, if in table1 if column1 and column2 is masked and in table2 if column3 and column4 is masked, for user usr1 with select…
Venkat
  • 131
  • 1
  • 5
  • 14
1
vote
0 answers

Get current-processed column information in Oracle datapump

In order to mask data I am using REMAP_DATA parameter in Oracle datapump as follows: expdp \'/ as sysdba\' DIRECTORY=DUMP_DIR DUMPFILE=dumpfile.dmp LOGFILE=logfile.log SCHEMAS=user0 REMAP_DATA=user0.table1.col1:user0.pckg_mask.fun_mask…
Bibhuti Bhusan Padhi
  • 347
  • 1
  • 4
  • 15
1
vote
1 answer

Dynamic Data Masking performance overhead

I'm thinking of using the new dynamic data masking that has been introduced with SQL Server 2016 as part of our GDPR project . Does anyone else have experience of it? I am particularly interested if there is a performance overheard.
Andrew Lackenby
  • 199
  • 1
  • 15
0
votes
1 answer

Using Dynamic Data Masking in SQL Server set Custom String

I need to mask the data in the following table. For example, I need to mask the first_name of the user Roberto to something like NAME<>, So the end result should look like NAME1 Is this possible in SQL Server? My SQL Server details…
ravindu wijepala
  • 11
  • 4
0
votes
1 answer

How do I limit dynamic data masking with a where clause?

I am interested in using SQL Server dynamic data masking on a subset of rows within a table. Is it possible to do this? As an example, I have a table of users with email addresses. I do not want to mask records for my company's internal users. I…
Scott
  • 193
  • 7
0
votes
1 answer

dynamic data masking read uncommited

I have read about Dynamic Data Masking and one question is still in my mind. I am wondering what will happen is such scenario: 1. Dynamic Data Masking is set up on table 2. ETL process is loading new rows using NOLOCK hint (read uncommited) 3.…
Darkstorm
  • 3
  • 2
1
2