Skip to content

Commit 5727092

Browse files
authored
Merge pull request #21169 from Madhumitatripathy/patch-2
Update dynamic-data-masking.md
2 parents fffc720 + 36f19c9 commit 5727092

1 file changed

Lines changed: 5 additions & 4 deletions

File tree

docs/relational-databases/security/dynamic-data-masking.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -90,7 +90,8 @@ WHERE is_masked = 1;
9090
Adding a dynamic data mask is implemented as a schema change on the underlying table, and therefore cannot be performed on a column with dependencies. To work around this restriction, you can first remove the dependency, then add the dynamic data mask and then re-create the dependency. For example, if the dependency is due to an index dependent on that column, you can drop the index, then add the mask, and then re-create the dependent index.
9191

9292
Whenever you project an expression referencing a column for which a data masking function is defined, the expression will also be masked. Regardless of the function (default, email, random, custom string) used to mask the referenced column, the resulting expression will always be masked with the default function.
93-
93+
94+
Cross database queries spanning two different Azure SQL databases or databases hosted on different SQL Server Instances and involve any kind of comparison or join operation on MASKED columns will not provide correct results because the results returned from the remote server is already in MASKED form and not suitable for any kind of comparison or join operation locally.
9495

9596
## Security Note: Bypassing masking using inference or brute-force techniques
9697

@@ -168,12 +169,12 @@ REVERT;
168169

169170
`1 Rxxxxxo Tamburello xxxx RXXX@XXXX.com 91`
170171

171-
where the number in DiscountCode is random for every query result
172+
where the number in DiscountCode is random for every query result.
172173

173-
### Adding or Editing a Mask on an Existing Column
174+
### Adding or Editing a Mask on an Existing Column
174175
Use the **ALTER TABLE** statement to add a mask to an existing column in the table, or to edit the mask on that column.
175176
The following example adds a masking function to the `LastName` column:
176-
177+
177178
```sql
178179
ALTER TABLE Data.Membership
179180
ALTER COLUMN LastName ADD MASKED WITH (FUNCTION = 'partial(2,"xxxx",0)');

0 commit comments

Comments
 (0)