Step 1. Create a Security Rule Set to Specify the Procedure Call and Process the Result Set
Step 1. Create a Security Rule Set to Specify the Procedure Call and Process the Result Set
The first rule set contains a rule that identifies the procedure call as a valid procedure call with a result set that you want to mask. You can use the Procedure Call matcher in this rule to give the name of the stored procedure, or you can use other matchers, for example the From Clause or Text matchers. The matcher works at the level of the SQL query. Use the Process Result action to specify the name of the second rule set that you create.
To create a security rule set, click on a domain node in the rule tree.
Click
Tree
Add Rule Set
.
The
Add Rule Set
window appears.
Enter a name for the security rule set, for example, "SQLServerRulesXML."
Click
OK
.
Within this rule set, create a rule to specify the stored procedure call and process the result set through the following rule set.
In the Management Console, click the security rule set that you created in the previous step.
Select
Tree
Security Rule Set
.
The
Rule Editor
appears.
Click
Action
Append Rule
.
The
Append Rule
window appears.
Enter a name for the rule, for example, "MaskEmpLastName."
For the
Matching Method
, you can select
Procedure Call
or another matcher to identify the procedure call. If you select Procedure Call, provide the name of the stored procedure.
For
Action Type
, select
Process Result
.
For
Ruleset Name for Resultset
, give the name of the next rule set that you will create to process the result set. For example, "MaskEmpXMLRS."