Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
3
votes
2answers
357 views
User can alter procedures without permission
I have a sql server user that our application is connecting as. The user has been granted db_datareader and db_datawriter as well as Grant Execute on each stored procedure that it needs to use.
...
2
votes
5answers
119 views
SELECT Statements only please
I have a user that wants to use SQL Server Management Studio (SSMS) to run SELECT statements. I don't want him to be able to modify data.
I can't regulate his permissions through Windows ...
3
votes
2answers
1k views
Select permission inside stored procedure?
I have granted a user execute permission for a stored procedure through SSMS, but when he tries to execute it, he gets the error:
The SELECT permission was denied on the object '[table name]', ...
0
votes
1answer
325 views
Depicting permissions to access table via E -R diagram
I am designing a database schema for a web application. Its a first time I am designing a database with a commercial aim. I have started with drawing E-R diagrams after going through requirements ...
5
votes
2answers
95 views
Will a SP which writes records fail if accessed by a db_datareader role?
I have a stored procedure which is accessed remotely by an app which is running on some kind of Java/WebSphere type platform. It takes one argument, returns some data and that's that.
Recently there ...
4
votes
1answer
64 views
Is it possible to encapsulate a table in MySQL?
I am new to Databases. I want the following:
UPDATEs in a database to happen only through a stored procedure
The user does not have GRANT UPDATE
The user has GRANT EXECUTE ON PROCEDURE
I tried it ...
7
votes
1answer
886 views
Broken NTFS Permissions for MSSQL$SQLEXPRESS
I have been "securing" our database server. To do this I removed some permissions from the folders that the SQL Express install created.
D:\SQL
D:\SQL\Data
D:\SQL\Backup
etc..
I kept the ...
0
votes
2answers
62 views
Tiered permissions to generate conditional data access
I am working to improve the confidentiality and access level of the information presented within a program interface over top of a MySQL database. My goal is to create a two tier system: one based on ...
2
votes
0answers
118 views
Oracle sqldeveloper Database Diff - not seeing indexes/sequences
I am using Oracle SQL Developer's database diff tool to compare schemas. (SQL developer version : 3.2.09) It works great on some environments, but in one, I can only see differences in tables - the ...
2
votes
2answers
2k views
mysql: Show GRANTs for all users
MySQL's SHOW GRANTS shows the permissions of the current user.
Is there a way to log in as root and show the permissions of all users?
5
votes
2answers
8k views
Granting Execute Permissions on Stored Procedures, Functions and Views
I am using a user which has read permission only. It basically has permission to
Connect
Execute
However, it does not have execute permissions on Functions and Stored Procedures. In part of my ...
5
votes
2answers
458 views
What permission is needed to set Database read-only?
I am dbowner of a database which I want to set read-only. (through sql management studio). When I try that I get a permission error (297)
Which role is needed to perform that action?
1
vote
0answers
1k views
Error Authenticating Proxy Account when Executing SSIS job
I have a SQL Server instance that runs 5 scheduled tasks each night, each of which run SSIS packages.
These packages have been running for years and the associated steps run via a Proxy Account ...
4
votes
2answers
494 views
BUILTIN\Administrators accidently removed
Hi, so recently when trying to fix another bug within my sql server 2008 R2 db I removed the BUILTIN\Administrators login from sysadmin. Now it will not let me change anything winthin the database. ...
1
vote
1answer
92 views
mysql: show which users have permissions to a DB
Is there a way to show all users that have permissions on a database?
I'm looking for something like:
> show_permissions_for_db <DB>;
+----------+----------------------+
| User | ...
2
votes
1answer
1k views
How do I install pgcrypto on Windows?
I would like to install pgcrypto in Windows. I have a file C:\Program\PostgreSQL\9.0\share\contrib\pgcrypto.sql but when I try to run it in psql I get an error:
C:: Permission denied
How do I solve ...
9
votes
1answer
332 views
Are there reasons why I should not set my db owner to [sa]?
Yesterday I asked this question regarding changing the dbo of multiple databases that I have. The change makes sense, but I want to be clear.
Is there any, good reason or circumstance why I should ...
2
votes
1answer
173 views
Active Directory domain being shutdown— Do I have to update my DBO accounts?
I manage a SQL Server machine (with SQL Server 2000 and 2005 installed) that was first created on an Active Directory domain that we are transitioning away from and are about to shut down. All of my ...
3
votes
1answer
313 views
DENY EXECUTE on one schema object hides other objects in same schema
I have five stored procedures in a schema [XTR], the users are all in one AD group [AD\Users] and have db_datareader and public assigned to them. On one of the stored procedures I don't want to give ...
2
votes
1answer
2k views
MySQL user permission on stored procedure
I've created a simple stored procedure:
mysql> CREATE FUNCTION hello (s CHAR(20))
-> RETURNS CHAR(50) DETERMINISTIC
-> RETURN CONCAT('Hello, ',s,'!');
Query OK, 0 rows affected, 1 ...
2
votes
2answers
1k views
SQL Server 2008 linked server to an Access 2007 DB that is in a protected directory on the Network
We have a SQL Server 2008 database that we are attempting to link with an Access 2007 DB (the maintainer works down the hall and refuses to migrate to SQL Server). We have the password to the database ...
4
votes
1answer
410 views
Is there a way to setup a user to run SPs, but not access the underlying data tables?
We have two database instances on two separate server boxes that are linked. The website user needs to be able to run stored procedures on DatabaseA which query DatabaseB tables, however it should not ...
1
vote
1answer
3k views
How do I grant execute permission to an Oracle database user?
I'm trying to call a Java function from Oracle database that does the following:
Process p = Runtime.getRuntime().exec("...");
When I try to run it, I get the following error:
ORA-29532: Java call ...
5
votes
2answers
131 views
MySQL Permissions Necessary To Reset Password
On my team there is a desire for some users to periodically update their MySQL password.
Our MySQL server is shared between a few projects (and certain users are assigned to certain projects). If I'm ...
6
votes
1answer
257 views
Is there a way to DENY CRUD operations on connections from linked server?
I have a SQL Server instance, RPT1 (2008 R2), that was set up for "power users" to run their own queries. This server is linked to our production reporting server, PRD1 (SQL Server 2008 instance), ...
7
votes
2answers
13k views
Grant permissions to run an SQL server job
I have a job on my MSSQL server 2005, that I want to allow any database user to run.
I'm not worried about security, since the input to the job's actual work comes from a database table. Just running ...
0
votes
1answer
157 views
How to troubleshoot/debug Oracle permission problems
An application is connecting to Oracle to do stuff. It's not working but I don't get any ORA errors in the application itself. I'm thinking its a permission problem. So my question is what is the best ...
1
vote
2answers
815 views
Allow db_owner to add/view existing logins to database
On our development server (SQL 2008 R2) we want local dbo's to be able to add existing logins on the server to the database. The problem is they can't view them, they can only see themselves in the ...
4
votes
1answer
429 views
How do I find out *why* a user has certain effective permissions?
I know that I can query effective permissions by using sys.fn_my_permissions:
USE myDatabase;
SELECT * FROM fn_my_permissions('dbo.myTable', 'OBJECT')
entity_name | subentity_name | ...
4
votes
3answers
3k views
Created user can access all databases in PostgreSQL without any grants
I must be missing something with regards to setting up PostgreSQL. What I'd like to do is create multiple databases and users that are isolated from each other so that a specific user only has access ...
2
votes
1answer
163 views
unreachable SQL Server for a group of computers
I'm deploying SQL Server 2008 Express in my company. I already installed, did a application, tested, gave permission to user.
All desktop users run the program without any problem. But the notebook ...
1
vote
1answer
581 views
Executing a stored procedure on remote database
I have 2 databases on the same server. DB-A and DB-B. DB-B has a user that has read and write access to database B. I would like to grant the user in DB-B execute permissions to 2 stored procedures in ...
8
votes
1answer
493 views
What are the security implications of sp_executesql?
By default, in SQL Server, the [public] role has EXECUTE rights on sp_executesql.
However, I've inherited a database server where the previous DBA has revoked the EXECUTE right on sp_executesql.
As ...
3
votes
2answers
951 views
Maintaining or Re-Gaining access after SQL Server database restore without SYSADMIN rights?
I am struggling with maintaining or re-gaining access after restoring an SQL Server database (2008 R2, if that makes any difference). Here is what I am trying:
SQLServer login APPUSER is member of ...
9
votes
1answer
4k views
CREATE DATABASE vs. CREATE ANY DATABASE permissions
In Microsoft SQL Server, what is the difference between the CREATE DATABASE and CREATE ANY DATABASE permissions?
I am unable to find an authoritative answer. The best I can infer is that either (a) ...
1
vote
2answers
450 views
Move (Restore) SQL Server 2005 database which does not exist before
I did not ready about this but found out after trying to restore a database from remote server and it wont restore if the database did not exist before. What I would do is
create a .bak file ...
3
votes
0answers
165 views
Deny view definition at DB level and symmetric keys MS SQL Server 2005
I don't want a restricted database role to be able to view table and stored procedure definitions and code.
So I do
deny view definition to some_db_role
It does appear though that this is not ...
1
vote
1answer
3k views
Oracle: what permission is necessary to “grant create table” to another user?
What permission should A have in order to grant B permission to create a table?
logged in as user A, I execute
grant create table to B;
and receive the following error:
SQL Error: ORA-01031: ...
4
votes
5answers
5k views
User Permissions Messed Up following a Backup -> Restore Operation
I had to move several SQL Server 2008 databases to our new db server so I backed them all up (to .bak files), copied these files over to the new box and restored them (all done using SQL Management ...
1
vote
3answers
749 views
SQL Server : Execute as multiple users simultaneously?
I need to query a proprietary database where the software vendor has set tight permissions on each schema (one username per schema), and each schema-user is only allowed to read from their own schema.
...
1
vote
1answer
285 views
Giving selective permissions in a database
I have a user [AD\dbusersgroup_limitedrights] that should have on two schema's
[ICD] and [XCD] within a database only SELECT and EXECUTE rights, however for each of the users in the ...
2
votes
1answer
1k views
CREATE DATABASE Permission denied in database 'master' error
I'm working with a tool that as one of the automated steps will attach databases from my file system to my local SQL Express 2008 instance. The tool requires a login in the sysadmin server role, for ...
1
vote
2answers
568 views
Can I restore the defult SQL Server Public Role?
I setup a new user login and attached it to a specific database on my server. I then opened up management studio on my local pc, connected to the database using the server IP and selecting the ...
3
votes
1answer
1k views
select permission was denied on the object 'sysjobs'
The select permission was denied on the object 'sysjobs', database 'msdb', schema 'dbo'.
I have already tried to grant sqlagentoperatorrole and it didn't work. How do I resolve this error?
6
votes
8answers
608 views
Granting SA privileges for Developers on the development box
In spite of our vehement protests, our management has decided that the development team must be granted 'sa' rights on the development server. The catch is that we, the DB support group are still ...
2
votes
1answer
337 views
How to make it impossible for a postgres user to delete databases?
What yould be the sql statement (that the user postgres will execute) so it will be impossible for the postgres user user1 to delete (drop) databases?
Or can I add a rule into some config file?
3
votes
1answer
606 views
How do you gain access to embedded MySQL database via localhost command line?
We run an application (Windows 2003 server) and would like to have database connectivity -- contacted the company and they do not have any documentation on how to do so. A quick glance at the ...
2
votes
1answer
693 views
Possible to detach a database from SQL Server while retaining file permissions?
When a user detaches a database from MS SQL Server, it sets the owner of the data and log files to that user. It also removes all non-owner permissions from the files. This is partially explained at ...
-4
votes
1answer
3k views
T-SQL to list all the user mappings with database roles/permissions for a User
I am looking for a t-sql script which can list the databases and and the respective roles/privileges mapped for a particular user. Using SQL Server 2008 R2.
Regards
Mohammed
3
votes
2answers
127 views
SQL 2005 Permission Precedence
Very simple question -
I have two database roles (Basic, Admin). Say I explicitly deny the Basic role from deleting from table A and grant that to the Admin role. If I am a user who is in both ...
