Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

learn more… | top users | synonyms (2)

0
votes
1answer
20 views

Default privileges to execute function

I have a user that has select only access but was granted execute on a single function in our mysql db. The issues I'm running into is other more privileged users will drop and create this function ...
0
votes
0answers
11 views

RedShift Roles For Superuser-like Role with Read Only Access

I'm managing a RedShift cluster and our engineers need more access than is generally provided to them with their roles. Essentially they would require the right to read EVERYTHING in all tables but ...
3
votes
1answer
27 views

How to copy part of a database with inconsistent privileges?

I have a Postgres database and I would like to copy certain tables from a single schema into a new empty database. So far I have copied a schema-only dump from from the old DB and applied it to a ...
1
vote
1answer
29 views

Pre-checking execute privs for SPs

We have a number of DBs where EXECUTE privs are required on a SP by SP basic. We have other DBs where we don't need to do this at all. In the latter case, I understand that this is a blanket GRANT, ...
0
votes
0answers
28 views

What are the Computer Management Group Privileges actually granted? [migrated]

Someone wants to do something to database or it's server and they always ask for "Admin" privileges. Often on questioning it turns out they need to add a column to a table, so you grant db_owner on ...
0
votes
0answers
23 views

How do I keep all roles, users and permission on a database being dropped then restored with a different database with different permissions [duplicate]

The DBA at my job every week drops my test database and restores it with a copy of the live environment. The permissions on the live database are different then the test database(and need to be). ...
1
vote
1answer
33 views

Is it possible to set PostgreSQL roles with privileges this way?

I'm trying to develop a system, and for the first time I'm using PostgreSQL. I'm trying to organize and separate roles properly, but I'm losing my mind with it (about a week on this now). Following ...
4
votes
1answer
57 views

Why are duplicate permissions appearing on the securables GUI in SSMS?

Why are duplicate permissions appearing on the Securables GUI?
1
vote
0answers
19 views

Minimum permission needed for GRANT CRUD ON

I have a certificate set up to do cross database CRUD operations. The certificate is linked to a user in each destination database. I sign any stored procedures in the source database with the ...
1
vote
0answers
16 views

mysql/mariadb - prepared statement to create schema for users

I have the following scenario: mariaDB (mysql Ver 15.1 Distrib 5.5.49-MariaDB to be exact - I could bug the sysadmins to update if necessary) I want users to be able to create their own, distinct ...
0
votes
1answer
47 views

Using a third location for log shipping [closed]

I have a problem with log shipping in SQL Server 2012. I have tried to configure log shipping between server A and server B. The log destination is on my PC (shared folder). This scenario is working ...
1
vote
1answer
40 views

Why doesn't Oracle show my privileges?

I have a user that is able to drop, alter, create tables and indexes. But when I list the privileges for my Oracle user it does not show any CREATE TABLE or other such privileges. How am I able to do ...
3
votes
1answer
20 views

mysql replication and GRANT that doesn't quite grant

I am trying to set up mysql replication. All's well, but I see an error 1045 for the slave: mysql> show slave status\G *************************** 1. row *************************** ...
1
vote
1answer
16 views

MySQL: with CREATE_USER_PRIV, GETTING “Access denied” when attempting to change another user's password

In MySQL 5.6.27, user 'bmcrae' has create user privileges and is able to create a new user. However, when trying to change another user's password: SQL: SET PASSWORD FOR 'newuser' = PASSWORD('******...
0
votes
0answers
14 views

What is the 'auth_string' in 'GRANT' 'ON' SQL command in MySQL/MariaDB?

In the typical command to grant privileges: GRANT ALL PRIVILEGES ON databasename.* TO "wordpressusername"@"hostname" IDENTIFIED BY "password"; What is the "password" part? The documentation says it'...
0
votes
0answers
25 views

SQL Server group is missing after installation of SQL Server 2008 R2

I've installed SQL Server 2008 R2 and defined a local network service account to run the MSSQLSERVER service. Now I'd like to change the running user to a domain user. I know that this domain user ...
1
vote
2answers
47 views

User cannot select from table but their permission appear to show that they should be able to

I attempted to revoke delete permissions to most users in a database by using the deny and revoke sql commands and checking the deny box for delete when adding the table as a securable in the UI. ...
0
votes
1answer
20 views

MySQL Proxy on Current User

I'm trying to grant permissions to the current user logged in depending on their role, but it doesn't seem possible to have a select statement at the end of the GRANT PROXY # TO # command The code I ...
1
vote
1answer
33 views

Getting non owner to execute a job

I've attempted to implement solution three from the following Q & A: Allow non-sysadmin, non-owner of a SQL Server Agent job to execute it Table created and sproc created in msdb, inserted rows ...
5
votes
1answer
44 views

What permissions are required to return rows from information_schema.schemata?

In postgres (I'm on 9.3.4) what permissions are required to return rows for select * from information_schema.schemata The 9.3 documentation says "are owned by a currently enabled role". Does that ...
0
votes
0answers
31 views

Bypass or Override SQL Server DB related error during WSUS Setup Installation?

When trying to install the latest WSUS release from here: Windows Server Update Services 3.0 SP2 We tried it once with the DB and then someone suggested detaching the DB and moving to another drive ...
3
votes
1answer
30 views

Granting only SELECT permissions on specific views to a specific user

I have landed in a scenario were I have to let a user inside a database which is not his. Hence I want to make sure that he is only able to SELECT from the views that I deem he can read from. I have ...
2
votes
1answer
35 views

Wildcard in CREATE grant in MySQL

MySQL allows the use of wildcards for database names, in order to allow an user to operate only on a subset of databases: GRANT ALL PRIVILEGES ON `foobar%`.* TO 'user'@'%' IDENTIFIED BY 'somepassword'...
0
votes
0answers
20 views

Why do my queries are not routed to a correct queue for my user group in Redshift

I was following this tutorial to configure query queues on Redshift. So I created a parameter group, modified parameter group settings and created a queue. It has Query Groups set up as data_team (...
0
votes
0answers
29 views

Permissions required to add user to fixed server role

We want to take a group out of sysadmin but grant them a role so they can do the following: add, change, remove database access on prod servers for users, groups and service accounts. create and ...
3
votes
3answers
169 views

SQL Logins in db_owner role on database cannot create stored procedures

I started locking down permissions in our test environment by removing sysadmin permission from generic accounts. The first account, used by several developers, is a local SQL login. I gave the ...
0
votes
2answers
45 views

Grant select on tables with a specific naming pattern

How to grant select on all tables starting with VVC_? grant select on VVC_* to user1
1
vote
2answers
21 views

How to grant permissions to users based on table information?

Say I have a table: +------------------------+ | Employees | +------+--------+--------+ | Dept | Name | Salary | +------+--------+--------+ | 1 | John | 10000 | | 1 | Mary | ...
0
votes
1answer
67 views

PL/SQL Can't grant privileges while logged as system

I can't grant the execute privilege on DBMS_LOB (I need it to operate on files), even when I'm logged as system. What can I do? Granting DBA ROLE doesn't help at all. Error starting at line 7 in ...
0
votes
0answers
29 views

How can I restrict users to see only tables they can SELECT from

I have a redshift database with many schemas and tables. I created a group of users and granted them with permissions to view (select) tables in some particular schema: CREATE GROUP data_viewers; ...
2
votes
1answer
43 views

Permissions on Trigger Problem

I am working with a database in MS-SQL 2008 R2, and I'm running into a problem. The basic setup is this: There are two tables of interest: dbo.Assesments and audit.Assesments. dbo.Assesments is the ...
0
votes
1answer
83 views

Grant SELECT on all tables in Redshift

I am trying to assign SELECT privilege to a group in Redshift. So I created a group and a user in that group: CREATE GROUP data_viewers; CREATE USER <user> PASSWORD '<password>' IN GROUP ...
4
votes
2answers
99 views

Is there a way in SQL Server to make a table only able to insert by trigger?

The title is pretty self explanatory but if your'e curious as to why I want this; I want this because I have an archive/log table that stores past values of an active table and due to this I don't ...
1
vote
2answers
117 views

Confused Logins and Users in SQL Server

In SQL Server, when setting permissions with a Grant statement, we do it on Users, not Logins. For example: CREATE LOGIN login1 WITH PASSWORD = 'sssssssss'; use mydb; CREATE USER user1 FOR LOGIN ...
1
vote
1answer
58 views

Group permissions in postgreSQL not inheriting to table level

I am moving to a group role from a lot of individual users and have one table that needs to have permissions SELECT, INSERT only. Lets say I have: user1 user2 newgroup Both of the users are in ...
1
vote
1answer
64 views

Alter default privileges for role

I have database called Blackacre and two roles who have access to it: johnrole and janerole. janerole has been granted ALL privileges and johnrole has only been granted the SELECT privilege. Problem ...
2
votes
1answer
66 views

How do you properly remove “REQUIRE SSL” from a single user?

I successfully granted REQUIRE SSL to a single user by doing... mysql -u"${targetMySqlUser}" -p"${targetMySqlPass}" -e "GRANT USAGE ON dbname.* TO 'dbusername'@'%' REQUIRE SSL;" but im failing on ...
2
votes
2answers
36 views

How do I detect execute permission granted to a role (when no ON clause was used)

I just spent hours trying to figure out how an app had privilege to execute stored procedures. TIL from StackExchange: Turns out the ON clause is optional for GRANT, allowing a role to be granted ...
2
votes
1answer
63 views

Unable to set user/group as principal on a proxy

I'm organizing permissions on our SQL Server instance. I want to stop using a SQL Server account, and instead grant permissions to Active Directory groups, and then add user and service accounts to ...
1
vote
1answer
82 views

Create Linked Server using Active Directory account

I was able to grant access in MSSQL to an Active Directory group and add a service account to that group. It's working fine, I'm able to use trusted connection to login on that MSSQL using both my ...
6
votes
1answer
176 views

Principle of least privilege for sql server agent jobs

I've just read this article which advocates using the sa account for ownership of sql server agent jobs. http://sqlmag.com/blog/sql-server-tip-assign-ownership-jobs-sysadmin-account He has a couple ...
4
votes
2answers
79 views

How to script permissions for all logins/users/tables/schemas

Over the years, I have used countless scripts and applications to generate all permissions for SQL Server databases. I have used both paid and free tools. I feel that not one of them seems to be ...
1
vote
1answer
80 views

Deny users permission to create tables in master

I have noticed that I can create tables, schemas, stored procedures etc. the master database. I don't know what is granting this permission. It's annoying, because when we open a *.sql file in SSMS, ...
3
votes
2answers
133 views

Grant Admin to an Active Directory account in SQL Server

I have a SQL Server 2012 instance, and an Active Directory group, which I can add Active Directory users to. I have my personal AD account (MyAccount) and a service account (ServiceAccount) in that ...
1
vote
0answers
37 views

ERROR 1 (HY000): Can't create/write to file (Errcode: 13 - Permission denied)

I've been struggling for a couple of days with this now and have been trying to use this thread amongst other google searches to resolve it but can't seem to get it to work. When I run this SELECT ...
0
votes
0answers
36 views

How can I prevent users from accessing certain data?

Here is a screenshot of my database in MS Access 2016: On the left, I have all my tables, queries and forms. I would like to prevent users from accessing these data as well as the VBA code (i.e "...
0
votes
0answers
37 views

how to force mysql 5.5 server to allow tls/ssl encrypted connections only?

given a mysql Server 5.5 community edition (which came with SLES 11sp4). i configured it to support TLS and it works fine. but i did not found any options or parameters to FORCE IT to do TLS/SSL ...
0
votes
0answers
20 views

MongoDB job on CentOS 7 has file permission errors

I have a CentOS 7 server and I've been trying to start using MongoDB. At some point, I changed group & file permissions for the following: /var/lib/mongo /var/run/mongodb /var/log/mongodb What ...
1
vote
1answer
75 views

-2147205987:[Microsoft][ODBC SQL Server Driver]][SQL Server]Cannot execute as the database principal because the principal “guest” does not exist

Recently moved SQL Server from a desktop to a virtual machine and now facing the below error message while connecting to SQL Server using SQL Authentication. -2147205987:[Microsoft][ODBC SQL ...
1
vote
0answers
19 views

How to set minimal permissions to change SQL Azure Firewall rules

I have a desktop app that connects to SQL Azure database. Some users have dynamic IP addresses, and it is not possible to get them to use fixed addresses. I've written an ASP.NET page hosted on the ...