The access-control tag has no wiki summary.
5
votes
1answer
131 views
What must be in place to validate a XMLTYPE against a schema?
I have a procedure that generates an XMLTYPE and I want to validate it against a schema. The problem is that there seems to be a permissions issue running createSchemaBasedXML because when I run the ...
4
votes
2answers
2k views
Database logon trigger
To block a particular user and IP combination on an Oracle Database , I created the following trigger, and compiled without errors.
Create or replace trigger you_may_not_login
after logon on database
...
3
votes
1answer
544 views
Designing An ACL Based Permission System
I am trying to create a permissions system where everything is going to be stored in MySQL (or some database) and pulled using PHP for a project management system I am building. I am right now trying ...
2
votes
4answers
65 views
How to block user access to perform database application update?
Where I work we have a SQL Server database (Microsoft SQL Server 2008 R2) that serves as the back-end with two different user interfaces, a .NET web interface and a FoxPro interface.
Every month we ...
2
votes
1answer
389 views
acl to allow nested groups in owner attribute
I'm trying to create an ACL entry to allow users specified in the owner attribute of a group to manage the group, and also allow groups, including nested groups to be specified as owners.
I've got ...
2
votes
1answer
69 views
How to avoid large joins when determining which rows a user is authorized for?
Typical wep app situation: you have logged in users querying for resources exposed through an API. As a hypothetical example, company administrators quering for their employees' time sheets:
company ...
2
votes
1answer
68 views
How can I programmatically grant (and revoke) temporary database access in MySQL?
Suppose I have a datastore comprising many databases. For the purposes of this question, let's assume MySQL, but I suspect it might apply to many technologies. The stored records aren't particularly ...
1
vote
1answer
83 views
Are there any objective reasons to prefer a prefix over a suffix for an environment-specific login?
When creating environment specific logins (development, qa, staging, production, etc.) I'm faced with the choice of making the denotation a prefix or a suffix to the login name.
Examples
...
1
vote
2answers
226 views
Tables accessed during last periods in postgresql
I want to check that which tables are updated during the last period or say in descending order of accesstime of tables, then how can I view that for postgresql ?
1
vote
1answer
150 views
MySQL user created via command line can't access PHPMyAdmin
I'm trying to create a read-only user with access to one database in PHPMyAdmin. Since I'm a server newbie I followed some instructions line-by-line on setting up my database and PHPMyAdmin. As ...
1
vote
0answers
68 views
User defined content specific permissions with varying conditions. How to design tables?
I'm working on a privacy settings problem, which is proving to be cumbersome to design.
Essentially I have:
User created content
User can define access groups for content.
Access groups vary ...
1
vote
1answer
137 views
Dates in openldap acl rules
Is it possible to use dates in OpenLDAP's ACL entries? I'm looking to do something like to * by this/termDate < NOW none by * break
0
votes
4answers
347 views
Unable to access mysql database remotely
I ran this command-
[root@dev-img mysql]# mysql -u root -h 192.168.1.181 -e "use mysql;"
and this is the output I got-
ERROR 1045 (28000): Access denied for user 'root'@'192.168.1.65' (using ...
0
votes
1answer
208 views
How to find which tables and views a user has access to?
We have a SQL Server 2008 database and have restricted all tables and views away from a specific user ID. Over the years we have granted back tables and views one at a time based on user need.
We ...
0
votes
0answers
96 views
implementing DAC and MAC in Oracle
I want an example that might help me implement a dynamics modes of an access mode model.
From from page 58 of Secured Database Application Development:
Static Access Modes are:
use 1 ...
