Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

learn more… | top users | synonyms (1)

2
votes
2answers
70 views

How to identify database users and their owned schemas before dropping server logins?

While deleting logins, there might be a possibility that there are users in databases along with chances that they own schemas in those databases. Is there a way to find this out with a single ...
2
votes
0answers
347 views

Domain Admin on AWS lacking user rights to edit the top 200 using the Management Studio interface

I setup an application + SQL Server on AWS. Everything works fine my SQL User can read/write to any table. Now I connected to the SQL Server using my domain admin account using windows authentication ...
0
votes
0answers
43 views

Chicken and egg problem with JOIN tables and memberships

So I'm having a problem where users are able to access certain models that depend on a join model that doesn't exist at the time of the access. Quick overview of the use case: Basic school ...
1
vote
1answer
3k views

The user specified as a definer ('root'@'%') does not exist

I have a trigger defined as follow: USE `veeva_bi`; DELIMITER $$ DROP TRIGGER IF EXISTS veeva_bi.account_ai$$ USE `veeva_bi`$$ CREATE DEFINER = CURRENT_USER TRIGGER `veeva_bi`.`account_ai` AFTER ...
2
votes
2answers
198 views

Why can't user with SQLAgentOperatorRole delete his own SQL jobs

I created a login and a user. I assigned the user as the db owner of the database "test". Then I granted him the role SQLAgentOperatorRole so that he can delete/create/modify the jobs belonging to the ...
2
votes
1answer
37 views

What should be the command for following role creation requirement?

I need to create a role where the assigned user can access only the 'AdventureWorksDB" where he will have execute permission to all tables,views and stored procedures in the database. I wrote the ...
0
votes
1answer
58 views

Missing view privileges in USER_TAB_PRIVS

I can't figure out how to view the grant privileges I've given users on views -- FIRSTUSER@SQL> create view remotetabletest 2 as select * from A_TABLE where PKEY = '123456' 3 / ...
3
votes
1answer
35 views

How to allow users to run a function, but not access objects the function is accessing

I have a PL/PgSQL stored procedure that performs various operations on tables (SELECT, UPDATE, INSERT, TRUNCATE). I want users to be able to run the stored procedure, but not themselves perform those ...
4
votes
1answer
60 views

Limiting Domain Admins permissions on a SQL Server

I have a SQL Server 2012 machine and I want to limit the Domain Admins permissions. What can I do to make sure that the Domain Admins have read only permissions for the databases and nothing else for ...
0
votes
0answers
130 views

CREDENTIAL mapped to Login to gain access to file resource for Bulk INSERT

According to BOL, this should be a fairly straight-forward solution to my problem, but unfortunately, it is not working and I have not been able to find much online about using CREDENTIAL mapping. ...
3
votes
1answer
142 views

How to create a login and user that can only access one schema in one database

I have executed the following: USE [MyDatabase]; GO CREATE LOGIN [MyDomain\MyAccount] FROM WINDOWS WITH DEFAULT_DATABASE=[MyDatabase]; CREATE USER [MyDomain\MyAccount] FOR LOGIN [MyDomain\MyAccount]; ...
2
votes
1answer
136 views

What are the best practices for restricting write-access on a specific table?

I have a table, which I'd like to be read-only, except for a few specific stored procedures which need permissions to UPDATE rows in the table. After that, I want only a select group of additional ...
0
votes
1answer
41 views

Allowing a user to view/edit only a specific table in a database with ~50 tables

The database I'm working with has about 50 tables in it. A single user requires edit permissions on one of the tables, but should not have access to any other tables. I know how to deny her the ...
1
vote
1answer
205 views

Grant execute on specific type in Oracle

I have created a package and defined a type for collections as follows: create or replace package <schema>.<package> as ------------------------------------- type <type> is ...
1
vote
0answers
1k views

view server state permission was denied

The strangest thing is happening on my SQL Server Management Studio. When I right-click any table, I get a "VIEW SERVER STATE permission was denied on object 'server', database 'master'. (.Net ...
5
votes
1answer
470 views

Adding a local user account into SQL Server

I have a (developer) instance of SQL Server 2014 running in my machine. For quick background I'm on a small network like this: Workgroup: HOME Users HOME\PCA HOME\PCB HOME\PCC I'm HOME\PCA. Now ...
1
vote
2answers
50 views

Restrict Full access to certain User of Database

The scenario is the following: Given SQL Server Instance created and handled not by me Creation of Database and User on given Instance by me Question: To my limited understanding, the sa login ...
2
votes
1answer
64 views

How can I allow a user to query a view but not the underlying table in MySQL?

I have searched for this question but cannot find an answer. Or, the answers I have found have been related to SQL Server. This is for MySQL 5.x. Anyway, say I have a table called Employees and in ...
0
votes
1answer
37 views

Unexpected SELECT permissions

My user WebApp seems to have SELECT permissions on every table in every schema and I can't figure out why. WebApp is only in the Public role. Public doesn't own any schema. Explicit permissions ...
2
votes
1answer
266 views

MariaDB 10 InnoDB Partition with Data Directory

mysql --version mysql Ver 15.1 Distrib 10.0.20-MariaDB, for Linux (x86_64) using readline 5.1 I have a MariaDB 10 installed, though I tried with the 5.5 release in the CentOS repos. I'm ...
4
votes
2answers
50 views

Snooping-safe Vote tables

I have a table with both user_id and vote. They are stored together so each user can only give one vote. However it's also problematic because admins can simply read who voted what. Is there a way to ...
-3
votes
1answer
60 views

Implication of owned schemas for a user having db_owner privilege

Importance of "Schema owned by the user"? The user is db_owner for the db. Is it required to select owned schemas?, or else it will own all the schemas as it is a db_owner? Please provide me a detail ...
1
vote
1answer
85 views

Simple SSIS Package Failed User does not exist or has not permission

I created and build SSIS Package with "Transfer SQL Server Objects Task". I Copied the package.dtsx to network folder with permissions set to everyone. I created the SSIS Job where i set path ...
3
votes
1answer
85 views

SQL Server: UPDATE permission for table variable

SQL Server 2012 I have a maintenance script that I wrote for some of my operators. They are members of the fixed db_datareader and db_datawriter roles. Part of the script creates a table variable, ...
3
votes
1answer
249 views

Unable to change database owner to a user that is already mapped as user

I ran into this problem. Trying to change a database owner to acct1; however, I get the following error message when doing so: The proposed new database owner is already a user in the database ...
1
vote
1answer
71 views

SQL Server 2008 R2 copy Schema with all user security permissions

I have a prod support request from a high value user to adjust the settings on a company-wide dashboard so that he can manage a section of his workflow currently being excluded from these reports. ...
0
votes
2answers
630 views

What is the privilege for account unlock in Oracle [closed]

I want to understand the privileges better, but I'm not able to find some useful info using Google. I thought that I needed ALTER USER privilege to be able to unlock user and change password. But ...
3
votes
1answer
53 views

`chown -R` equivalent for PostgreSQL

We occasionally have the problem that, when upgrading some software and database, inexperienced (or overworked, not excluding myself) sysadmins (we don’t have separate DBAs except for Oracle) run the ...
0
votes
1answer
216 views

Why would DBMS_METADATA.GET_DDL Fail when i have the SELECT_CATALOG_ROLE Role?

I am trying to get the DDL using METADATA_DBMS.GET_DDL for an object in a database, and I get the following error: ORA-31603: object "MY_PACKAGE" of type PACKAGE not found in schema "S1" ORA-06512: ...
-2
votes
3answers
240 views

Why does connecting to '127.0.0.1' work whilst 'localhost' fails?

I have noticed that although the listening host in postgresql.conf is localhost connecting to a database via psql fails unless the host is changed 127.0.0.1. I have also noticed MySQL display the ...
7
votes
1answer
159 views

Purpose of owning a schema in SQL Server

I've been spending the last few days cleaning up database permissions, grouping them all into AD groups and removing orphaned users. This has lead me to a recurring scenario: Find a user that owns ...
1
vote
1answer
94 views

How to change default security on SQL Server database so that everyone can use it?

I have a database hosted on my machine that I want co-workers to be able to access and edit through a program I created. My current connection string is: ...
3
votes
1answer
794 views

Confused by GRANT ALL PRIVILEGES ON *.* (…) WITH GRANT OPTION

Normally I manage users on my databases via phpMyAdmin, but since I do everything else in standalone programs such as SQLyog or HeidiSQL, I wanted the ability to manage users remotely from these ...
3
votes
1answer
271 views

OPENQUERY and server permissions

when I run my stored procedure it is a complete success, even if I run it through exec. Running these: sp_GetServerLogins GO exec ( 'sp_GetServerLogins ') GO I get this: Needless ...
4
votes
3answers
99 views

PostgreSQL GRANT ALL on mutliple tables using LIKE

I have more than 100 tables named public.test_* How can I easily GRANT ALL access to the user test to all that tables at once? I tried with: GRANT ALL ON TABLE public.test_* TO test; But it is ...
2
votes
3answers
117 views

All My Databases Are Gone?

Today I changed my username and password in MySQL and I logged into phpmyadmin to see that all my databases were gone. I've tried changing the datapath but then I realized I didn't see any of my ...
1
vote
0answers
37 views

Log shipped database server user SID is created automatically

We have a production server "prod" which has a user say 'test' that lets the users connect to the application and a logon trigger which stops them from connecting to the server through SSMS. I ...
0
votes
0answers
49 views

SQL Server Phantom Login

I have log shipped a database from one SQL Server 2008 R2 server to another in standby mode for reporting purposes. Permissions are granted via a Windows AD Group called DOMAIN\DB Access Group which ...
-1
votes
1answer
180 views

Permission Denied on a database created by the same user

I run this command: psql --username=openerp --dbname=sf_template_20150608111121 --no-password \ --command="update pg_database set datallowconn = false \ where datname = ...
1
vote
2answers
468 views

Collation conflict when running dynamic sql FOR XML PATH

I am getting the following error message when running the query below: Cannot resolve the collation conflict between "Latin1_General_CI_AS" and "Latin1_General_BIN" in the equal to operation ...
0
votes
1answer
42 views

postgresql : find privileges in meta informations

With PostgreSQL 9.4 on linux centos 6.6. I give a privilege to a user with something like : ALTER DEFAULT PRIVILEGES FOR ROLE DBNAME_adm IN SCHEMA DBNAME_adm GRANT SELECT,INSERT,UPDATE,DELETE ON ...
1
vote
1answer
81 views

Grant privilege to see column names in null constraint violations when inserting in views

My database has two schemas, one with the actual tables and one that is used by an application. The application schema doesn't have any privileges on the actual tables. Instead there is a view for ...
0
votes
1answer
59 views

Does the scope for 'Alter Any Database' operate similar to 'Create Any Database'?

Does the scope for 'Alter Any Database' operate similar to 'Create Any Database', as in, only those databases created by Login-A under the 'Create Any Database' umbrella can be altered, and not the ...
1
vote
1answer
33 views

SQL Server 2012 Error 9512 when modifying user login

We are attempting to grant access to a database to one of our employees. We open up his user properties in Security -> Logins, navigate to the User Mappings page, select the database, select db_owner ...
1
vote
1answer
2k views

Permissions required to alter a database file

Totally at the beginning in administering a database. Using EMS SQL Manager ... latest version. How do I over come below ALTER DATABASE joneslocker2 MODIFY FILE ( NAME = joneslocker2, ...
0
votes
0answers
277 views

Cannot access MS Access DB with non-Admin users

I have created several users in a MS Access database using "User-Level Security Wizard" in Access 2013. The problem: I am only able to log in with users belonging to Admins group. Other users ...
0
votes
0answers
354 views

Postgres 9.4 - How to really grant all privileges on a database to another user?

Just a heads up, I'm fairly new at this whole DBA thing. Okay, with that out of the way I've been struggling mightily lately with granting access to a database in postgres to a user. Let's call the ...
-1
votes
1answer
372 views

MongoDB denying API access, while console shell works

I am a MongoDB newbie, with a MongoDB instance running on a Ubuntu machine. If I login onto the machine's console and run mongo -u username -p password databasename I have permissions for the ...
0
votes
1answer
34 views

insert error foreign key permission

I have a problem with permissions, and I don't find where I messed up (v 9.4) I have a database DB1 owned by Bill, with 2 schemas pat and tom. Both schemas are identical , pat is owned by pat, tom by ...
1
vote
1answer
41 views

How can I setup a Login which can run an automated Database Refresh without giving away too much priv?

I would like to re-ask and extend the question posed in this thread if I may: SQL Server permissions to create, restore, delete only some databases I am also attempting to setup an 'isolated' ...