DDM for blob

Question

Post reply

DDM for blob

ramana3327

SSCoach

Points: 19722
More actions
September 6, 2023 at 5:43 pm

#4280886

How to enable dynamic data masking for blob data?

Viewing 8 posts - 1 through 7 (of 7 total)

You must be logged in to reply to this topic. Login to reply

Jeff Moden SSC Guru Points: 1004406 More actions · Answer 1

ramana3327 wrote:

How to enable dynamic data masking for blob data?

I guess my question is, what have you tried? I see no limitations in the documentation for the likes of VARCHAR(MAX) in the DDM documentation at the following link:

https://learn.microsoft.com/en-us/sql/relational-databases/security/dynamic-data-masking

Give it try and see what happens. I'm thinking that there's no difference between a VARCHAR(100) and a VARCHAR(MAX).

My disclaimer is, I've never used DDM before because it's not actually secure. If I did need to do it, I'd go to the link above and follow the instructions and any additional links it provides.

--Jeff Moden

RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

Change is inevitable... Change for the better is not.

Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

ramana3327 SSCoach Points: 19722 More actions · Answer 2

The data type is image. I used the function default. Can we use any other way of masking?

If you have a column with data type image. If you need to migrate the database to different server using backup & restore method. Do we need to consider anything while restoring the backup?

ramana3327 SSCoach Points: 19722 More actions · Answer 3

Thank you.

The data type is image. I used the function default. Can we use any other way of masking?

If you have a column with data type image. If you need to migrate the database to different server using backup & restore method. Do we need to change anything after restoring the backup?

This reply was modified 1 year, 3 months ago by ramana3327.

Jeff Moden SSC Guru Points: 1004406 More actions · Answer 4

Again, I've not used DDM but, according to the documentation, it looks like the only function that will work with the IMAGE datatype is the DEFAULT function.

As for backups and restores, all of this appears to be stored in the database. I suspect the masking will travel with the database but, if it were me, I'd make a test database and test to make sure that guess is true because they say nothing about it in the documentation.

--Jeff Moden

RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

Change is inevitable... Change for the better is not.

Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

Jeff Moden SSC Guru Points: 1004406 More actions · Answer 5

@Everyone...

Any help here on this question? I've not used DDM and so I'm only able to shoot from the hip based on what the documentation says.

--Jeff Moden

RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

Change is inevitable... Change for the better is not.

Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

DesNorton SSC-Insane Points: 24399 More actions · Answer 6

I have never used DDM.

But, a few observations

Image data type is deprecated, and should be replaced with varbinary(max)

Since the data in image and (var)binary fields is not human readable, what is gained by masking it?

How to post data/code on a forum to get the best help.

ramana3327 SSCoach Points: 19722 More actions · Answer 7

ramana3327

SSCoach

Points: 19722

September 25, 2023 at 11:03 am

#4293568

Thank you.