QuestionQ59

VerifiedSecure, optimize, and deploy database solutions

A development team uses GitHub Copilot Chat in Microsoft SQL Server Management Studio (SSMS) to generate and execute Transact-SQL queries against an Azure SQL database named DB1. DB1 has tables that store sensitive customer data.

You need to ensure that every Transact-SQL query executed from GitHub Copilot Chat in SSMS is constrained by the same permissions as the developer’s database login.

What stops GitHub Copilot Chat-executed queries from accessing data beyond the developer’s authorized access?

Explanation

GitHub Copilot Chat in SSMS executes queries under the connected developer’s database login and permissions. Copilot has no separate or elevated database permissions, so Azure SQL permission enforcement prevents access to objects or data the developer is not authorized to access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!