Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

learn more… | top users | synonyms (2)

1
vote
2answers
119 views

Confused Logins and Users in SQL Server

In SQL Server, when setting permissions with a Grant statement, we do it on Users, not Logins. For example: CREATE LOGIN login1 WITH PASSWORD = 'sssssssss'; use mydb; CREATE USER user1 FOR LOGIN ...
1
vote
1answer
69 views

Group permissions in postgreSQL not inheriting to table level

I am moving to a group role from a lot of individual users and have one table that needs to have permissions SELECT, INSERT only. Lets say I have: user1 user2 newgroup Both of the users are in ...
1
vote
1answer
72 views

Alter default privileges for role

I have database called Blackacre and two roles who have access to it: johnrole and janerole. janerole has been granted ALL privileges and johnrole has only been granted the SELECT privilege. Problem ...
2
votes
1answer
104 views

How do you properly remove “REQUIRE SSL” from a single user?

I successfully granted REQUIRE SSL to a single user by doing... mysql -u"${targetMySqlUser}" -p"${targetMySqlPass}" -e "GRANT USAGE ON dbname.* TO 'dbusername'@'%' REQUIRE SSL;" but im failing on ...
2
votes
2answers
40 views

How do I detect execute permission granted to a role (when no ON clause was used)

I just spent hours trying to figure out how an app had privilege to execute stored procedures. TIL from StackExchange: Turns out the ON clause is optional for GRANT, allowing a role to be granted ...
2
votes
1answer
66 views

Unable to set user/group as principal on a proxy

I'm organizing permissions on our SQL Server instance. I want to stop using a SQL Server account, and instead grant permissions to Active Directory groups, and then add user and service accounts to ...
1
vote
1answer
108 views

Create Linked Server using Active Directory account

I was able to grant access in MSSQL to an Active Directory group and add a service account to that group. It's working fine, I'm able to use trusted connection to login on that MSSQL using both my ...
6
votes
1answer
176 views

Principle of least privilege for sql server agent jobs

I've just read this article which advocates using the sa account for ownership of sql server agent jobs. http://sqlmag.com/blog/sql-server-tip-assign-ownership-jobs-sysadmin-account He has a couple ...
4
votes
2answers
101 views

How to script permissions for all logins/users/tables/schemas

Over the years, I have used countless scripts and applications to generate all permissions for SQL Server databases. I have used both paid and free tools. I feel that not one of them seems to be ...
1
vote
1answer
90 views

Deny users permission to create tables in master

I have noticed that I can create tables, schemas, stored procedures etc. the master database. I don't know what is granting this permission. It's annoying, because when we open a *.sql file in SSMS, ...
3
votes
2answers
146 views

Grant Admin to an Active Directory account in SQL Server

I have a SQL Server 2012 instance, and an Active Directory group, which I can add Active Directory users to. I have my personal AD account (MyAccount) and a service account (ServiceAccount) in that ...
1
vote
0answers
54 views

ERROR 1 (HY000): Can't create/write to file (Errcode: 13 - Permission denied)

I've been struggling for a couple of days with this now and have been trying to use this thread amongst other google searches to resolve it but can't seem to get it to work. When I run this SELECT ...
0
votes
0answers
45 views

How can I prevent users from accessing certain data?

Here is a screenshot of my database in MS Access 2016: On the left, I have all my tables, queries and forms. I would like to prevent users from accessing these data as well as the VBA code (i.e "...
0
votes
0answers
45 views

how to force mysql 5.5 server to allow tls/ssl encrypted connections only?

given a mysql Server 5.5 community edition (which came with SLES 11sp4). i configured it to support TLS and it works fine. but i did not found any options or parameters to FORCE IT to do TLS/SSL ...
0
votes
0answers
21 views

MongoDB job on CentOS 7 has file permission errors

I have a CentOS 7 server and I've been trying to start using MongoDB. At some point, I changed group & file permissions for the following: /var/lib/mongo /var/run/mongodb /var/log/mongodb What ...
1
vote
1answer
90 views

-2147205987:[Microsoft][ODBC SQL Server Driver]][SQL Server]Cannot execute as the database principal because the principal “guest” does not exist

Recently moved SQL Server from a desktop to a virtual machine and now facing the below error message while connecting to SQL Server using SQL Authentication. -2147205987:[Microsoft][ODBC SQL ...
1
vote
0answers
20 views

How to set minimal permissions to change SQL Azure Firewall rules

I have a desktop app that connects to SQL Azure database. Some users have dynamic IP addresses, and it is not possible to get them to use fixed addresses. I've written an ASP.NET page hosted on the ...
1
vote
1answer
60 views

Can you provide rights to a snapshot without providing rights to the database?

Is it possible to give a user or group rights to a snapshot without giving them rights to the database if the database and snapshot both reside on the same instance?
1
vote
1answer
88 views

Privilege to set default database in MySQL

It turns out that a user cannot set default database if it does not have global (mysql.user) or any database-level permissions (mysql.db): MariaDB [(none)]> use mysql; ERROR 1044 (42000): Access ...
1
vote
1answer
53 views

Packaging SQL Server Express 2012 install won't install due to user rights

Is there a way force the above permission window to elevate the user permissions?
0
votes
1answer
19 views

How do I allow users to add members to a specific database role?

I want to GRANT permissions to a new database role so that defined users can add and remove members from that role WITHOUT granting ALTER ANY ROLE permissions. Here's how my query runs/dies: CREATE ...
1
vote
1answer
75 views

Hide Schemas and Tables

I have the following structure: Views dbo.vSales Sec.vSales Tables dbo.Security Sec.Products Sec.Countries Sec.Users I have 2 groups accessing my Database: Administrators Standard_User ...
1
vote
0answers
19 views

How would I access a system view in SQL Azure master database without logging into master?

My service needs to periodically read sys.resource_stats which is only in "master" database of SQL Azure server. The service currently only accesses a "regular" database in the same server. Accessing "...
1
vote
1answer
84 views

SSMS connects, Linked server fails

There's a SQL Server 2012 machine which I have login and password. It's a SQL Server login, not an AD one. I'm able to login using SSMS. But when I configure a linked server in my SQL Server I get ...
1
vote
1answer
46 views

special setup to create views in Oracle in default schema

When creating views in Oracle, do you need special setup for a given user if the view and table in which the view is reading from are in two different schemas? The user creating the view has dba ...
0
votes
2answers
85 views

What is the minimum privilege required to create a full text index?

I just created a full text catalog on my database. I now have a developer who needs the ability to create full text indexes on the tables in this database. The suggestion given in a previous ...
3
votes
1answer
50 views

MySQL replication and master users on slave server

Do the users initiating inserts on the master server also have to be on the slave with at least as many permissions for the replicated queries to be correctly executed? My understanding is that you ...
0
votes
1answer
67 views

should I give dbo permissions to NT AUTHORITY\NETWORK SERVICE?

We're in the process of assessing a new application that will require access to our MSSQL database I've set up a user that is a member of a role only giving it readonly access to certain views in the ...
2
votes
1answer
132 views

Grant select on all synonyms of schema to another schema in Oracle

I need to write a query for granting the select privilege to all synonyms and tables of one schema to another schema in Oracle. Example: Admin schema has all the tables. I want the User schema to ...
0
votes
1answer
26 views

Scripting execute permissions on stored procedure

My goal is to write a script which: Creates a stored procedure Grants execution permissions to a particular user on that new stored procedure On this SO question the recommendation is to add GRANT ...
1
vote
1answer
31 views

Permissions to execute a procedure on database a that reads a table on database b

A user in database a has execute permission on a stored procedurte in database a, that stored procedure reads table 1 in database b however when the user executes that procedure they get the following ...
3
votes
1answer
111 views

Effective SQL Server permissions when user is in several AD groups

Using Window Authentication via Active Directory Groups, if an Active Directory user exists in two different Active Directory Groups with different permissions to a database, which Active Directory ...
2
votes
1answer
60 views

stored procedure can select and update tables in other databases - minimal permissions granted

I recently had to make the stored procedure spPartyOrderAllocation_AllocateItems to select and update tables in other databases, while keeping the pemissions levels to the minimum. This was ...
3
votes
1answer
35 views

Select Permissions Multiple Schema

I have an interesting one that I have not had the pleasure of solving before. I have been asked by a client to implement some views for reporting purposes, the views will be accessed via PowerBI, ...
3
votes
1answer
160 views

How to grant connect and read/write permission to ALL databases?

I want a SQL Server login that can READ, WRITE and View definition on all databases. After doing: USE master; GRANT VIEW ANY Definition TO [a]; It looks like I have to GRANT CONNECT and read/write ...
0
votes
1answer
45 views

Changing own user permissions with Oracle SQL not being the DBA

I have been making changes to a couple of schemas of different environments (they belong to the same application). Sometimes I'll want to copy data from one environment to the other, and sometimes I'...
1
vote
1answer
27 views

Mysql error 1064, granting privileges

I'm trying to add privileges for a newly created user in my database (CLI). But i am getting an error, probably because i have a dash in my db name but how do you work around it? Error: You ...
1
vote
1answer
52 views

File permissions for SQL Server 2014 virtual account

I have two SQL Server 2014 instances installed on the same server - one for production, and one for development. I have set up a SQL Agent job that identifies the most recent backup from the ...
0
votes
0answers
70 views

How i Implement Role Based Access Control in Mongodb

Currently I'm working on an ERP project. I want to set the Roles & Permissions via a RESTful Api. I'm using Mongodb and Nodejs. How can i implement this? Roles & Permissions are as follows:- ...
1
vote
2answers
128 views

SQL Server CREATE and DROP TABLE Permissions in Stored Procedure Only

I'm attempting to create a stored procedure that's able to create and drop tables. A given user will have EXECUTE permissions on that stored procedure. Is there any way that the user would be able to ...
0
votes
1answer
56 views

Grant reference on type

What does GRANT REFERENCES ON TYPE::dbo.myType TO public exactly mean? I found this statement together with every single user defined type we have. I wonder if this is useful or not. AFAIK this ...
3
votes
1answer
71 views

Why does SQL Server need permissions to access data and log files?

When you want to attach a database, you can open them up if you put those mdf files in a folder such as: C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\DATA\ But SQL Server will ...
2
votes
1answer
89 views

How can I create a role to create,update,delete stored procedures and views

what permissions do I need to give in order to achieve the above task to get users the capacity to create,update,delete stored procedures and views to a database role.
0
votes
1answer
567 views

“Unable to Open BCP host data-file” using xp_cmdshell from SSMS but command line works

I have a stored procedure that runs on a job every once in a while to BCP some files left by an application I've written. I noticed the files were piling up and BCP wasn't picking them up so I ...
0
votes
0answers
92 views

create table in a different schema

I am trying to create a table on a different schema without using "create any table" privilege. I have an application user/schema. TABLESPACE_NAME USEDMB MAXMB ----------------...
1
vote
1answer
485 views

SELECT command denied to user ''@'localhost' for table 'pma_table_uiprefs'

I have got this error message in Vesta Control Panel, in phpMyAdmin: SELECT command denied to user ''@'localhost' for table 'pma_table_uiprefs' SELECT `prefs` FROM `phpmyadmin`.`...
3
votes
2answers
111 views

User has db_owner through AD group but cannot create table

We've setup a SQL Server 2012 Enterprise, and through certain domain user groups, users are granted access to several databases. For instance, group 'ADB' has for several databases following rights: ...
0
votes
0answers
44 views

Why default db privilleges are not applied on a new schema?

I have a user with all privileges granted by default in database properties. I create a new schema as postgres and table there. I expect that the user should have an access to this table but it looks ...
0
votes
1answer
62 views

Why can I drop table when logged in as not owner?

I read that only owner can drop table and no other user may be granted to do so. I created a table with owner postgres and then drop it as another user. What privileges should I revoke to disallow it?...
0
votes
0answers
21 views

domain group is db_owner of database, yet has no right for CREATE TABLE

We've setup a SQL Server (2012 Full Enterprise), and through certain domain user groups, have given certain access to several databases. For instance, group 'ADB' has for several databases following ...