Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

learn more… | top users | synonyms (1)

1
vote
1answer
9 views

Teradata 15: Failed [5315 : HY000] An owner referenced by user does not have SELECT WITH GRANT OPTION access to DBC.RoleMembersV.RoleName

I am using Teradata 15. Using a powerful database user sysdba, I created the following view: REPLACE VIEW DBA_TABLES_TEST.ROLE_ALL_APP_USERS AS SELECT A.ROLENAME FROM DBC.ROLEMEMBERSV A ...
1
vote
2answers
8 views

Most restricting permissions for querying view with linked server

I've created view to query another server via linked server(SQL Server 2014). I need to grant permissions to developers to use this view. Granting only select is not enough and they got the following ...
2
votes
1answer
76 views

Grant access only to System databases [closed]

Is it possible give an SA like permission minus any access to user databases? I want people to be able to collect information about Sql Server from the system databases but I want to make sure the ...
2
votes
0answers
7 views

InfluxDB - How can i limit the measures that an user can read by their tags?

I have some data that is collected by several sensors. Some users may own many of this sensors. So, i want to keep all the measures in a single database in InfluxDB. To differentiate the sensors i ...
5
votes
1answer
86 views

Monitor table permission changes

I need a solution to monitor table permission changes: how can I implement monitoring of every changes to granted permissions for a specific or any user on a specific table in SQL Server 2008 R2?
5
votes
1answer
44 views

How to run SQL services on NT SERVICE\MSSQLSERVER account if it is running earlier on LocalSystem

Recently just for experimental puprose, I have relocated the default (C:...) data\log file paths in server settings to new location (G:\DBA). Then I've moved the previously existing db's data\log ...
1
vote
2answers
16 views

How to get readonly access to mysql files via g+w permission 750 or 640?

The data-dir itself has permissions 700 thereby limiting access to the mysql user. I want other folks who I add to the mysql group to be able to read binlogs and download the *.frm, *.MYI, *.MYD ...
2
votes
1answer
30 views

Find signed procedures, functions, triggers, assemblies and by which certificates / asymmetric keys

I have created a few Certificates (via CREATE CERTIFICATE) and Asymmetric Keys (via CREATE ASYMMETRIC KEY) and used them to sign and counter-sign various Stored Procedures, User-Defined Functions ...
2
votes
1answer
28 views

How to compare MySQL privileges granted to privileges used?

I have inherited a MySQL server that has a user with far too many privileges granted but I believe not all of these are required. Is there any way to compare the MySQL privileges granted to the MySQL ...
-1
votes
1answer
72 views

SQL Server Management Studio crashes when attaching an mdf file

After the Windows 10 November update 1511, 10586 I cannot attach my databases with SSMS. It would just say that it has stopped working as shown below I checked the error log and so far this is what ...
1
vote
1answer
26 views

Postgres Access Roles

I'm trying to get my head around postgres roles. I want to create a database and have the owner role have all privileges on the database. I then want another role which cannot create tables but able ...
3
votes
1answer
37 views

Find current owner of custom data type?

In Postgresql, when I try to run ALTER TYPE x ADD VALUE y; on a custom datatype I get an error stating PG::Error: ERROR: must be owner of type x. I know this can be solved by running ALTER TYPE x ...
0
votes
1answer
42 views

SQL Agent Proxy - writing to logs is only allowed to jobs that are owned by sysadmin

I have a Windows 2012 RS and SQL Server 2012 Enterprise Edition. I have SQL Server maintenance jobs from ola.hallengren.com and the owner of the jobs were sa. The security team decided to change that ...
7
votes
3answers
149 views

what AD groups logins my user belongs to?

I am not sure if I have chosen the right title for this question. what I am really after is, given a individual windows AD user, I would like to find out the list of the windows AD groups ...
1
vote
2answers
9 views

Not Able to access user privileges for root in mysql

I accidentally deleted all privileges for root and users. I would like to know how to restore them. I don't have access to USER privileges for any other user.
4
votes
2answers
138 views

SQL Server - granting permissions to an entire schema vs. object?

I'm very green when it comes to the world of database permissions management in SQL Sever. Let's keep an example simple. Say account 'admin' is the owner of schemas A, B, and C. There another ...
1
vote
1answer
22 views

postgres user cannot access location of new data directory

I moved my postgresql 9.3 data directory to a different drive, however, my postgres user cannot seem to access that new drive despite my best efforts. I am running on ubuntu 14.04 LTS x64. So I ...
5
votes
1answer
25 views

Checking SQL AlwaysOn backup target with fn_hadr_backup_is_preferred_replica, different answers with different permissions

I've implemented AlwaysON backup with Ola's script, those are running fine on designated server configured for backup. I would like to automatically check backups using sql-scripts fired from a ...
3
votes
1answer
50 views

SQL Server - SQL Agent - Allow a Group to own a job

Scenario There are three separate groups of users in our organisations (development, support, implementation). As it stands everyone is using a single login for everything. We are starting to move ...
0
votes
0answers
24 views

Modify MySQL information_schema (specially create_time) on AWS RDS?

I am trying to modify the create_time of an entire database, tables, etc. I have found that information_schema tables stores the creation date of the tables on the column CREATE_TIME. Unfortunately ...
4
votes
2answers
61 views

db_datareader, db_datawriter and db_owner permissions [duplicate]

First of all, sry because I am not a DBA and I'm not familiar with all the permissions. My question is, if I give a user db_owner permissions on one database. Do I need to give also db_datareader and ...
0
votes
1answer
324 views

error “--secure-file-priv option” when save selection to csv

I try to save a very large select (more than 70 milion rows into csv file) on Win 2012 R2 server I execute query as root , but I think there is still some problem with privileges select * INTO ...
1
vote
3answers
67 views

How to create a non-sa sql server login / access without control server permission

I have an ms sql server, and I need to give access to other users to run basic queries (just select on 1 database). I have created a login for a user, and have amended their permissions, but once I ...
0
votes
2answers
95 views

What is the alternate to SA account in SQL Server? [closed]

My client is currently using SQL Server for their app. At this time they are using SA account everywhere. For security reasons we need to disable the SA account. The solution I've is create another ...
4
votes
1answer
100 views

Getting a proxy account to backup to a share using Ola Hallengrens backup script

I have a SQL Server 2012 Standard install where the Engine and Agent are running under the default NT Service accounts Engine - NT Service\MSSQLSERVER Agent - NT Service\SQLSERVERAGENT I am trying ...
2
votes
2answers
142 views

SQL Server logins and users — assign multiple logins to a single user? [duplicate]

In SSMS, since I can't assign multiple login objects to a single user object, what is a best practice to achieve an equivalent security model? For example, I have 20 logins and want to give them all ...
0
votes
1answer
48 views

Cannot fix ERROR:ORA-01031: insufficient privileges

I have tried almost every solution on the internet however I still cannot fix this problem. I cannot login as sysdba every time I try SQL>connect /as sysdba I get the error ERROR:ORA-01031: ...
1
vote
1answer
28 views

Adding new user in Postgres

I am using AWS RDS PostgreSQL and currently up and running. I would like to know how I can add a new user but only grant SELECT on an existing DB. The way I connect to my RDS from my PC is by using a ...
1
vote
1answer
29 views

Stored Procedures execution permissions

So what I am trying to do is to limit the access to a stored procedure so that only another stored procedure may call it. Here is an example: create procedure Database_Deployment_Proc -- This ...
0
votes
1answer
30 views

User cannot create schema in PostgresSQL database

I'm trying to setup a "deployment" user which can create and alter tables on an existing database in addition to selecting, updating, inserting and deleting records. Here is what I've tried so far: ...
5
votes
1answer
176 views

Restrict Postgres roles by IP address outside of the pg_hba.conf file

I am currently adding Postgres support to a deployment tool that currently only supports MySQL. This tool dynamically provisions and configures a database, among other things. In MySQL, we can ...
1
vote
1answer
45 views

Forbid user to query internal SQL server information

I'm trying to forbid database user to get SQL server internal information. Script that creates DB user: CREATE USER [testuser] WITHOUT LOGIN WITH DEFAULT_SCHEMA=[dbo] DENY SELECT, INSERT, UPDATE, ...
1
vote
1answer
33 views

How do I GRANT for all tables across all schemas

I want to GRANT SELECT ON ALL TABLES TO foo; But postgres tells me I have a syntax error at "TO". It expects a GRANT like: GRANT SELECT ON ALL TABLES IN SCHEMA public TO foo; ...
2
votes
2answers
93 views

SQL Server REVOKE requires CASCADE

I have the following graph: B granted select on D and D granted select on E and E granted select on G. B has grant select with grant option and has granted select D with grant option. D has grant ...
4
votes
2answers
159 views

DDL_admin vs db_owner permissions

I'm taking over a project that involves removing and limiting permissions of all database users across our server farm. (fun times) One of the permissions currently being limited is db_owner ...
0
votes
1answer
67 views

User databases inaccessible after physical restart

We have an unusual error happening on the SQL Server. After restarting the physical server where the SQL Server instance is installed, the user databases are not accessible. System databases are ...
1
vote
1answer
38 views

Active Directory group as a schema in SQL Server

In SQL Server 2008 R2 we have a database that is being maintained by a team of developers. Each of them should have permissions to perform DDL operations such as adding a column or creating a table. ...
13
votes
1answer
372 views

Running SSIS package from SQL Agent job owned by a non-sysadmin domain user

I have two SSIS packages that run scheduled overnight (via SQL Server Agent) as part of a larger SSIS deployment, without any issues. Everything is using Windows authentication, and the scheduled job ...
0
votes
0answers
7 views

Storing default user type roles & module roles

I have multiple user types and each user type would need to be assigned different roles. However, I also build the application with Modules that can be selected by users when they subscribe. Each of ...
0
votes
1answer
57 views

How to deny drop, delete permission for a table?

I want to give Create , alter , read permission on object to user but not insert , update ,delete,drop permission to user , How can i do it in sql server 2008?
1
vote
2answers
73 views

Permissions needed for dbms_metadata.get_ddl in a function

Oracle Enterprise 11.2.0.3 I'm receiving: ORA-31603: object "string of type "string" not found in schema "string" when executing a function that calls dbms_metadata.get_ddl. I know that ...
0
votes
2answers
33 views

grant access to user 'root' to all databases, but least specific one

I've got the users: root, lmanager. And too, a few databases: db1, db2, db3,... I want to grant all privileges to user 'root' over all databases, except for the db2. The user 'lmanager' will get all ...
2
votes
2answers
36 views

Transferring grants from one mysql DB to another

I would like to migrate a mysql DB from one server (Server A) to another (Server B). I took a Mysqldump and imported into the B. Now, I would also like to export all the grants from A to B, to do so ...
1
vote
1answer
94 views

The process cannot access the file because it is being used by another process

I'm using SQL Server 2008 R2. Absolutely new to DBA role, but I've worked with SQL and VS for a while. I've installed the 2 aforementioned softwares on my home computer. If I have VS2010 open and ...
4
votes
1answer
41 views

How do I set permissions for Package Body

Here's my situation (slightly envaguened to protect the innocent): I have a package on a Test system and a package on Prod system that need to have identical permissions to access exiting packages and ...
1
vote
1answer
25 views

permissions for schema compare and view job history

I need to grant these permissions, what would be the minimum level I could grant so that they can do their job? I am looking at SQL Server Agent Fixed Database Roles and also Database Engine ...
0
votes
1answer
84 views

PostgreSQL error moving data directory to home folder

I have a problem with the moving of my data directory of PostgreSQL. I found many different ways, but none worked. The most sensible way for me was: Stop PostgreSQL Copy data from old folder to new ...
1
vote
2answers
113 views

how to sucessfully revoke view any definition (or any other server permissions)?

I had to grant a server permissions to an active directory group, in order to solve a LIVE Bug: GRANT VIEW ANY DEFINITION TO [mycompany\webDevSeniors] GO after the permission was no longer needed I ...
1
vote
1answer
37 views

grant dbmail access to account

We have a server with a number of (increasing) databases, each of the "databases" needs to be able to use dbmail. Each (database's) mail account is different and configured via a custom ui. We created ...
1
vote
1answer
267 views

Command fails as CmdExec job but succeeds from console

I have a SQL Server 2014 Agent Job (Type: "Operating system (CmdExec)", Run as: "SQL Server Agent Service Account", Owner: sa) that executes the following command: powershell -ExecutionPolicy Bypass ...