Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

learn more… | top users | synonyms (2)

2
votes
2answers
117 views

DENY access to EXEC for a role

I have a read-only database user that I do not want to be able to run the EXEC command. I ran the following: DENY EXECUTE to db_USERROLE_deny That completed successfully; however, when I sign in as ...
1
vote
2answers
20 views

How to grant permissions to users based on table information?

Say I have a table: +------------------------+ | Employees | +------+--------+--------+ | Dept | Name | Salary | +------+--------+--------+ | 1 | John | 10000 | | 1 | Mary | ...
0
votes
2answers
45 views

Grant select on tables with a specific naming pattern

How to grant select on all tables starting with VVC_? grant select on VVC_* to user1
4
votes
2answers
98 views

Is there a way in SQL Server to make a table only able to insert by trigger?

The title is pretty self explanatory but if your'e curious as to why I want this; I want this because I have an archive/log table that stores past values of an active table and due to this I don't ...
0
votes
0answers
28 views

How can I restrict users to see only tables they can SELECT from

I have a redshift database with many schemas and tables. I created a group of users and granted them with permissions to view (select) tables in some particular schema: CREATE GROUP data_viewers; ...
0
votes
1answer
79 views

Grant SELECT on all tables in Redshift

I am trying to assign SELECT privilege to a group in Redshift. So I created a group and a user in that group: CREATE GROUP data_viewers; CREATE USER <user> PASSWORD '<password>' IN GROUP ...
2
votes
1answer
42 views

Permissions on Trigger Problem

I am working with a database in MS-SQL 2008 R2, and I'm running into a problem. The basic setup is this: There are two tables of interest: dbo.Assesments and audit.Assesments. dbo.Assesments is the ...
2
votes
2answers
86 views

How do I prevent my clients viewing my database definition when it is installed on their server?

I want to give my database to the client to install on their server. However, I want to deny the client rights to see the tables and stored procedures and also want to restrict that database to run ...
1
vote
1answer
56 views

Group permissions in postgreSQL not inheriting to table level

I am moving to a group role from a lot of individual users and have one table that needs to have permissions SELECT, INSERT only. Lets say I have: user1 user2 newgroup Both of the users are in ...
1
vote
2answers
117 views

Confused Logins and Users in SQL Server

In SQL Server, when setting permissions with a Grant statement, we do it on Users, not Logins. For example: CREATE LOGIN login1 WITH PASSWORD = 'sssssssss'; use mydb; CREATE USER user1 FOR LOGIN ...
1
vote
1answer
56 views

Alter default privileges for role

I have database called Blackacre and two roles who have access to it: johnrole and janerole. janerole has been granted ALL privileges and johnrole has only been granted the SELECT privilege. Problem ...
2
votes
1answer
62 views

How do you properly remove “REQUIRE SSL” from a single user?

I successfully granted REQUIRE SSL to a single user by doing... mysql -u"${targetMySqlUser}" -p"${targetMySqlPass}" -e "GRANT USAGE ON dbname.* TO 'dbusername'@'%' REQUIRE SSL;" but im failing on ...
4
votes
1answer
8k views

How do I grant the privilege of connecting to SSIS?

Attempting to run SSIS packages using dtexec.exe, I got this error message: Could not load package "D:\Filename.dtsx" because of error 0xC00160AE. Description: Connecting to the Integration Services ...
3
votes
1answer
444 views

OPENQUERY and server permissions

when I run my stored procedure it is a complete success, even if I run it through exec. Running these: sp_GetServerLogins GO exec ( 'sp_GetServerLogins ') GO I get this: Needless ...
2
votes
2answers
36 views

How do I detect execute permission granted to a role (when no ON clause was used)

I just spent hours trying to figure out how an app had privilege to execute stored procedures. TIL from StackExchange: Turns out the ON clause is optional for GRANT, allowing a role to be granted ...
1
vote
1answer
28 views

Methods of Denying login by specific SQL Authenticated user using Management Studio

I am trying to create a way of restricting/complicating access, for a particular user, to login to SQL Server, using Management Studio with SQL Server Authentication. I would like a way that also ...
2
votes
3answers
256 views

Restrict user to only take COPY_ONLY backups

Is there a way to force users to only take a full backup with COPY_ONLY so they don't interfere with differential backups? Our developers need to take backups every now and then but they don't ...
2
votes
1answer
58 views

How to find out ALL the users that can connect to SSAS?

I have an user called mycompany\aives that is not listed in the list of administrators in the SSAS, not belong to any of the AD (active directory) groups listed there, however, he can connect to ...
1
vote
1answer
81 views

Create Linked Server using Active Directory account

I was able to grant access in MSSQL to an Active Directory group and add a service account to that group. It's working fine, I'm able to use trusted connection to login on that MSSQL using both my ...
1
vote
1answer
77 views

Deny users permission to create tables in master

I have noticed that I can create tables, schemas, stored procedures etc. the master database. I don't know what is granting this permission. It's annoying, because when we open a *.sql file in SSMS, ...
3
votes
2answers
126 views

Grant Admin to an Active Directory account in SQL Server

I have a SQL Server 2012 instance, and an Active Directory group, which I can add Active Directory users to. I have my personal AD account (MyAccount) and a service account (ServiceAccount) in that ...
6
votes
1answer
176 views

Principle of least privilege for sql server agent jobs

I've just read this article which advocates using the sa account for ownership of sql server agent jobs. http://sqlmag.com/blog/sql-server-tip-assign-ownership-jobs-sysadmin-account He has a couple ...
4
votes
2answers
72 views

How to script permissions for all logins/users/tables/schemas

Over the years, I have used countless scripts and applications to generate all permissions for SQL Server databases. I have used both paid and free tools. I feel that not one of them seems to be ...
0
votes
0answers
35 views

How can I prevent users from accessing certain data?

Here is a screenshot of my database in MS Access 2016: On the left, I have all my tables, queries and forms. I would like to prevent users from accessing these data as well as the VBA code (i.e "...
1
vote
0answers
36 views

ERROR 1 (HY000): Can't create/write to file (Errcode: 13 - Permission denied)

I've been struggling for a couple of days with this now and have been trying to use this thread amongst other google searches to resolve it but can't seem to get it to work. When I run this SELECT ...
5
votes
2answers
947 views

Grant users privilege to use QUERYTRACEON 9481

Microsoft suggests using OPTION (QUERYTRACEON 9481) for queries that have "degraded" performance against SQL Server 2014 databases running under compatibility level 120. In my situation, "degraded" ...
3
votes
2answers
8k views

Copy SQL Logins and Permissions From One Server to Another

I need to duplicate all Logins and their associated database-level permissions from one server to another. I am using SQL Server 2008 R2 for Server A and SQL Server 2012 for Server B I am able to find ...
1
vote
1answer
74 views

-2147205987:[Microsoft][ODBC SQL Server Driver]][SQL Server]Cannot execute as the database principal because the principal “guest” does not exist

Recently moved SQL Server from a desktop to a virtual machine and now facing the below error message while connecting to SQL Server using SQL Authentication. -2147205987:[Microsoft][ODBC SQL ...
0
votes
0answers
36 views

how to force mysql 5.5 server to allow tls/ssl encrypted connections only?

given a mysql Server 5.5 community edition (which came with SLES 11sp4). i configured it to support TLS and it works fine. but i did not found any options or parameters to FORCE IT to do TLS/SSL ...
0
votes
0answers
19 views

MongoDB job on CentOS 7 has file permission errors

I have a CentOS 7 server and I've been trying to start using MongoDB. At some point, I changed group & file permissions for the following: /var/lib/mongo /var/run/mongodb /var/log/mongodb What ...
0
votes
1answer
115 views

List of role permissions including other roles - how can I find out the roles that belong to other roles?

I can see the permissions of a role in a database using the scripts in List all permissions for a given role? However, It does not show me when the role belongs to a another role. For ...
3
votes
1answer
649 views

Domain Admin on AWS lacking user rights to edit the top 200 using the Management Studio interface

I setup an application + SQL Server on AWS. Everything works fine my SQL User can read/write to any table. Now I connected to the SQL Server using my domain admin account using windows authentication ...
1
vote
1answer
47 views
1
vote
0answers
19 views

How to set minimal permissions to change SQL Azure Firewall rules

I have a desktop app that connects to SQL Azure database. Some users have dynamic IP addresses, and it is not possible to get them to use fixed addresses. I've written an ASP.NET page hosted on the ...
8
votes
3answers
2k views

Property Size is not available for database

I recently restored a database to the same instance it was backed up from (SQL Server 2008 R2 Enterprise) and found that I couldn't access the database properties. I have done the following: ...
1
vote
7answers
17k views

Why does “GRANT SELECT … TO Role;” does not allow members of Role to SELECT?

Please consider the following scenario on a Oracle 11g Database. The user ADMIN performs the following: CREATE USER Alice IDENTIFIED BY pwdalice; GRANT CREATE SESSION TO Alice; CREATE ROLE Viewer ...
0
votes
1answer
2k views

error “--secure-file-priv option” when save selection to csv

I try to save a very large select (more than 70 milion rows into csv file) on Win 2012 R2 server I execute query as root , but I think there is still some problem with privileges select * INTO ...
1
vote
1answer
58 views

Can you provide rights to a snapshot without providing rights to the database?

Is it possible to give a user or group rights to a snapshot without giving them rights to the database if the database and snapshot both reside on the same instance?
2
votes
1answer
203 views

SQL Agent doesn't have perms to run a PowerShell script

I recently upgraded SQL Server from Windows 2008 R2 & SQL Server 2008 R2 to Windows 2012 R2 & SQL Server 2014 SP1. One of the sql agent jobs fails to run. The job runs a PowerShell script to ...
1
vote
1answer
57 views

grant dbmail access to account

We have a server with a number of (increasing) databases, each of the "databases" needs to be able to use dbmail. Each (database's) mail account is different and configured via a custom ui. We created ...
0
votes
1answer
32 views

Permissions granted are insufficient for this operation

I am using Report Builder 3.0 and have been trying to run reports using AdventureWorks 2014 in SQL Server Express 2014. My report Server is http://John-PC/ReportServer_SQLExpress. When I click Run in ...
1
vote
0answers
21 views

Grant permission to update dbmail

We want to grant a user the ability to update their own mail connection profile used by db mail in msdb. For example, when the IT company maintaining the mail server wants to change the password. We ...
3
votes
2answers
132 views

Assigning permissions for sysmail_update_account_sp

I have a Microsoft SQL Server 2014. The mail system is configured via DBMail and there is one stored proc in main web app (having its own database) which executes msdb's sysmail_update_account_sp by ...
7
votes
2answers
2k views

Execution-Policy Error running Powershell Script in SQL Server Agent

Running a powershell script from SQL Server Agent in 2014 using my AD account via a credential. I am getting the following error. A job step received an error at line 1 in a PowerShell script. The ...
4
votes
1answer
96 views

sa doesn't have permissions to other database through synonyms with the Service Broker

I've been trying to get this Service Broker and timers thing to work for over a week straight now, so bear with me if this comes off as.. uh.. ragey. I'm also fairly inexperienced when it comes to SQL ...
1
vote
1answer
129 views

Grant access to all objects (with a few exceptions) to a role

In SQL Server 2014, I want to create a role that will have access (select, delete, update, insert, execute) to all the tables, views, stored procedures, except a certain list of tables that contain ...
1
vote
0answers
44 views

SQL Server 2014 proxy error

I'm rather confused by this one and can't see any options in previous posts about similar things. I've created a credential -> proxy account, that will run a PowerShell script. When I run the ...
5
votes
1answer
56 views

Recover SA Password - PSTools - Not working

I'm on a new company, and the first thing I saw is that they don't even know how many instances they have. they don't have passwords and the old DBA had no Idea what he was doing. long story short, I ...
5
votes
1answer
52 views

Checking SQL AlwaysOn backup target with fn_hadr_backup_is_preferred_replica, different answers with different permissions

I've implemented AlwaysON backup with Ola's script, those are running fine on designated server configured for backup. I would like to automatically check backups using sql-scripts fired from a ...
2
votes
3answers
185 views

script to show all the permissions for a table

inside my database I have a procedure called spGen2_tblIE_SchedProcess_Update. when I run this script select * from sys.objects where name = 'spGen2_tblIE_SchedProcess_Update' Inside the same ...