1. Serving Database Security with SQL Server Case

You are the DBA for Acme Corp. Youre asked to implement a new database server using Microsoft SQL Server 2014. In any implementation, security needs to be woven throughout the project, not implemented as an afterthought. Design an implementation that allows you to implement policies. The design should also include a role-based security structure.

The business requirements for the database are as follows:

• No user should have delete access to any object.
• Human Resources need to be able to fully manage employee data.
• Customer Service needs to be able to make changes to existing customers and view order data.
• Customer account managers need to be able to fully manage customer data and orders.
• Sales needs to able to view customer data and fully manage orders.
• Marketing needs to able to pull quarterly sales numbers for analysis.

The roles and corresponding permissions on tables are defined in the following tables. Please give statements to create corresponding roles, and grant/deny appropriate permissions according to the requirement. Assume all tables are defined in database Northwind, and roles should be created in this database too.

Table 4-10 HumanResources Table Employees Select Insert Update Delete Table 4-11 Customer Service Table Customers Orders Order Details Select Insert Update Delete Table 4-12 Account Managers Table Customers Orders Order Details Select Insert Update Delete Table 4-13 Sales Table Customers Orders Order Details Select Insert Update Delete Table 4-14 Marketing Table Territories Orders Order Details Select Insert Update Delete