SQL读取具有给定值的XML子节点与其他子节点匹配答案

【问题标题】：SQL Reading XML child nodes with given value matching with other child nodeSQL读取具有给定值的XML子节点与其他子节点匹配
【发布时间】：2020-04-16 00:17:46
【问题描述】：

我正在尝试使用 GPOGroupedAccessEnum 获取给定标识符的所有受托人。当我尝试获取给定标识符的所有子节点时，只会带来一个。我从表 xml 列中获取 xml。有多个 GPos，它具有标识符 Guid 和名称受托人名称和 GPOGroupedAccessEnum。我需要列出给定匹配标识符的所有受托人姓名和 GPOGroupedAccessEnum

   <report><GPO xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="fff" xmlns="http://www.microsoft.com/GroupPolicy/Settings">
<Identifier>
  <Identifier xmlns="http://www.microsoft.com/GroupPolicy/Types">{12121212-7C68-4R56-DF44-222222222}</Identifier>
  <Domain xmlns="http://www.microsoft.com/GroupPolicy/Types">TEST.net</Domain>
</Identifier>
<Name>TEST GPO</Name>
<IncludeComments>true</IncludeComments>
<CreatedTime>2017-07-13T14:20:24</CreatedTime>
<ModifiedTime>2018-01-19T14:37:56</ModifiedTime>
<ReadTime>2020-04-13T04:56:44.3177387Z</ReadTime>
<SecurityDescriptor>
  <Owner xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">
    <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-3294748472-2709727690-3963727160-512</SID>
    <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">TEST\Domain Admins</Name>
  </Owner>
  <Group xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">
    <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-3294748472-2709727690-3963727160-512</SID>
    <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">TEST\Domain Admins</Name>
  </Group>
  <PermissionsPresent xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">true</PermissionsPresent>
  <Permissions xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">
    <InheritsFromParent>false</InheritsFromParent>
    <TrusteePermissions>
      <Trustee>
        <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-9</SID>
        <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</Name>
      </Trustee>
      <Type xsi:type="PermissionType">
        <PermissionType>Allow</PermissionType>
      </Type>
      <Inherited>false</Inherited>
      <Applicability>
        <ToSelf>true</ToSelf>
        <ToDescendantObjects>false</ToDescendantObjects>
        <ToDescendantContainers>true</ToDescendantContainers>
        <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
      </Applicability>
      <Standard>
        <GPOGroupedAccessEnum>Read</GPOGroupedAccessEnum>
      </Standard>
      <AccessMask>0</AccessMask>
    </TrusteePermissions>
    <TrusteePermissions>
      <Trustee>
        <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-3294748472-2709727690-3963727160-519</SID>
        <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">TEST\Enterprise Admins</Name>
      </Trustee>
      <Type xsi:type="PermissionType">
        <PermissionType>Allow</PermissionType>
      </Type>
      <Inherited>false</Inherited>
      <Applicability>
        <ToSelf>true</ToSelf>
        <ToDescendantObjects>false</ToDescendantObjects>
        <ToDescendantContainers>true</ToDescendantContainers>
        <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
      </Applicability>
      <Standard>
        <GPOGroupedAccessEnum>Edit, delete, modify security</GPOGroupedAccessEnum>
      </Standard>
      <AccessMask>0</AccessMask>
    </TrusteePermissions>
    <TrusteePermissions>
      <Trustee>
        <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-18</SID>
        <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">NT AUTHORITY\SYSTEM</Name>
      </Trustee>
      <Type xsi:type="PermissionType">
        <PermissionType>Allow</PermissionType>
      </Type>
      <Inherited>false</Inherited>
      <Applicability>
        <ToSelf>true</ToSelf>
        <ToDescendantObjects>false</ToDescendantObjects>
        <ToDescendantContainers>true</ToDescendantContainers>
        <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
      </Applicability>
      <Standard>
        <GPOGroupedAccessEnum>Edit, delete, modify security</GPOGroupedAccessEnum>
      </Standard>
      <AccessMask>0</AccessMask>
    </TrusteePermissions>
    <TrusteePermissions>
      <Trustee>
        <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-3294748472-2709727690-3963727160-11559</SID>
        <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">TEST\MIS Staff</Name>
      </Trustee>
      <Type xsi:type="PermissionType">
        <PermissionType>Allow</PermissionType>
      </Type>
      <Inherited>false</Inherited>
      <Applicability>
        <ToSelf>true</ToSelf>
        <ToDescendantObjects>false</ToDescendantObjects>
        <ToDescendantContainers>true</ToDescendantContainers>
        <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
      </Applicability>
      <Standard>
        <GPOGroupedAccessEnum>Apply Group Policy</GPOGroupedAccessEnum>
      </Standard>
      <AccessMask>0</AccessMask>
    </TrusteePermissions>
    <TrusteePermissions>
      <Trustee>
        <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-11</SID>
        <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">NT AUTHORITY\Authenticated Users</Name>
      </Trustee>
      <Type xsi:type="PermissionType">
        <PermissionType>Allow</PermissionType>
      </Type>
      <Inherited>false</Inherited>
      <Applicability>
        <ToSelf>true</ToSelf>
        <ToDescendantObjects>false</ToDescendantObjects>
        <ToDescendantContainers>true</ToDescendantContainers>
        <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
      </Applicability>
      <Standard>
        <GPOGroupedAccessEnum>Read</GPOGroupedAccessEnum>
      </Standard>
      <AccessMask>0</AccessMask>
    </TrusteePermissions>
    <TrusteePermissions>
      <Trustee>
        <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-3294748472-2709727690-3963727160-512</SID>
        <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">TEST\Domain Admins</Name>
      </Trustee>
      <Type xsi:type="PermissionType">
        <PermissionType>Allow</PermissionType>
      </Type>
      <Inherited>false</Inherited>
      <Applicability>
        <ToSelf>true</ToSelf>
        <ToDescendantObjects>false</ToDescendantObjects>
        <ToDescendantContainers>true</ToDescendantContainers>
        <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
      </Applicability>
      <Standard>
        <GPOGroupedAccessEnum>Edit, delete, modify security</GPOGroupedAccessEnum>
      </Standard>
      <AccessMask>0</AccessMask>
    </TrusteePermissions>
  </Permissions>
  <AuditingPresent xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">false</AuditingPresent>
</SecurityDescriptor>
<FilterDataAvailable>true</FilterDataAvailable>

这是选择语句，但它只返回一条记录。

select  Main.value('(*:SecurityDescriptor/*:Permissions/*:TrusteePermissions/*:Trustee/*:SID)[1]','varchar(100)') as SIDs
    , Main.value('(*:SecurityDescriptor/*:Permissions/*:TrusteePermissions/*:Trustee/*:Name)[1]','varchar(100)') as SecuiyName
    , Main.value('(*:SecurityDescriptor/*:Permissions/*:TrusteePermissions/*:Standard/*:GPOGroupedAccessEnum)[1]','varchar(100)') as permission
from  @XMLwithOpenXML 
    cross apply XMLData.nodes('report/*:GPO') main(Main) 
where
    Main.value('(*:Identifier/*:Identifier)[1]','varchar(100)') = '{12121212-7C68-4R56-DF44-222222222}'

这是我得到的结果。它只是获得第一个子节点，但还有更多要列出。

【问题讨论】：

您发布的 xml 缺少一些元素。
嗨，威廉，我在上面的 xml 中添加了，所以 xml 现在可以工作了，但是我的问题还是一样，你可以检查一下吗

标签： sql xml xml-parsing sqlxml

【解决方案1】：

我整理了你的 XML。

我更新了 nodes() 查询以获取所有 TrustedPermissions，但前提是身份与该 1212 GUID 匹配

select  Main.value('(*:Trustee/*:SID)[1]','varchar(100)') as SIDs
    , Main.value('(*:Trustee/*:Name)[1]','varchar(100)') as SecuiyName
    , Main.value('(*:Standard/*:GPOGroupedAccessEnum)[1]','varchar(100)') as permission
from  @xml.nodes('report/*:GPO[*:Identifier/*:Identifier="{12121212-7C68-4R56-DF44-222222222}"]/*:SecurityDescriptor/*:Permissions/*:TrusteePermissions') main(Main)

【讨论】：