Security Tasks (Modeling Services)
[This content is no longer valid. For the latest information on "M", "Quadrant", SQL Server Modeling Services, and the Repository, see the Model Citizen blog.]
The SQL Server Modeling Services database is a central storage location for enterprise data models. For example, model instances could contain information about deployment environments, mission-critical applications, and operational data from those applications. Securing both read access and write access to this data is one of the most important functions of an Modeling Services administrator.
Modeling Services Security Model
The Modeling Services implements a claims-based security model. An example of a claim is a Windows SID. Modeling Services administrators grant claims permissions to perform specific operations on resources. Modeling Services Folders are the most common secured resource. Folders contain model instance data in the form of rows in database tables. Tables that follow the Modeling Services Folder design pattern add a Folder column to indicate the Modeling Services Folder associated with each row. For more information about Modeling Services Folders, see SQL Server Modeling Services Folder Design Patterns. Views in the Modeling Services gate access to the underlying base tables. These views ensure that users see only those rows that belong to Modeling Services Folders for which they have read operation permissions. The views use triggers to allow modifications to the underlying base tables, using similar security checks for update operation permissions on the Modeling Services Folders assigned to the changed rows. For more information about how views interact with Modeling Services Folders to provide security, see View Design Patterns.
In This Section
The following topics explain how to perform common security tasks in the Modeling Services database:
See Also
Concepts
SQL Server Modeling Services Administration
SQL Server Modeling Services Architecture