Debezium Sql Server with Row Level Security

[Senthil Kumaran]

Hello team,

We have a scenario where we want to do Debezium snapshots with the SQL Server Row level security(RLS) enabled. Currently, the snapshot queries are for all the rows in the table. Now we want to enable snapshot with RLS.

https://learn.microsoft.com/en-us/sql/relational-databases/security/row-level-security?view=sql-server-ver16

With RLS, we want to run a sql statement(RLS context query) before the snapshot query starts on that connection so that SQL server predicate function filters data based on it. I do not see an option in debezium configuration to fire queries(RLS context query) before each snapshot query(snapshot). 

Note: For CDC, it is not a concern though, it is only on snapshot.

Thanks,

Senthil   

[jiri.p...@gmail.com]

Hi,

you can try https://debezium.io/documentation/reference/2.4/connectors/sqlserver.html#sqlserver-property-snapshot-select-statement-overrides

Also you can try https://debezium.io/documentation/reference/2.4/connectors/postgresql.html#postgresql-property-database-initial-statements - it is not documented for SQL Server but I belive it works there too.

J.

[Senthil Kumaran]

Hmmm. Interesting. Thanks for pointing to this documentation. Will try this out.