MicrosoftHi, great article, thank you for that!
I am testing out this pattern and it happens that:
1/ User must have permissions to use OPENROWSET
2/ Credentials must be included in the DATA_SOURCE
This means that a malicious (and clever) user could bypass the whole RLS mechanism by creating a SELECT statement using OPENROWSET and the underlying DATA_SOURCE.
I have not found a way to use OPENROWSET in the secured view without giving OPENROWSET permission to user.
Has any one a solution to this? What's the current status of things?
