Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

learn more… | top users | synonyms (2)

2
votes
1answer
225 views

Teradata 15: Failed [5315 : HY000] An owner referenced by user does not have SELECT WITH GRANT OPTION access to DBC.RoleMembersV.RoleName

I am using Teradata 15. Using a powerful database user sysdba, I created the following view: REPLACE VIEW DBA_TABLES_TEST.ROLE_ALL_APP_USERS AS SELECT A.ROLENAME FROM DBC.ROLEMEMBERSV A ...
2
votes
2answers
33 views

Most restricting permissions for querying view with linked server

I've created view to query another server via linked server(SQL Server 2014). I need to grant permissions to developers to use this view. Granting only select is not enough and they got the ...
1
vote
1answer
93 views

What are the minimal MySQL grants for the debian-sys-maint user?

What are the minimal privileges that debian-sys-maint@localhost needs for the mysql service to work correctly? This answer on ServerFault suggests granting RELOAD only, but this is incorrect, as it ...
2
votes
1answer
84 views

Grant access only to System databases [closed]

Is it possible give an SA like permission minus any access to user databases? I want people to be able to collect information about Sql Server from the system databases but I want to make sure the ...
2
votes
0answers
37 views

InfluxDB - How can i limit the measures that an user can read by their tags?

I have some data that is collected by several sensors. Some users may own many of this sensors. So, i want to keep all the measures in a single database in InfluxDB. To differentiate the sensors i ...
5
votes
1answer
103 views

Monitor table permission changes

I need a solution to monitor table permission changes: how can I implement monitoring of every changes to granted permissions for a specific or any user on a specific table in SQL Server 2008 R2?
5
votes
1answer
140 views

How to run SQL services on NT SERVICE\MSSQLSERVER account if it is running earlier on LocalSystem

Recently just for experimental puprose, I have relocated the default (C:...) data\log file paths in server settings to new location (G:\DBA). Then I've moved the previously existing db's data\log ...
1
vote
2answers
25 views

How to get readonly access to mysql files via g+w permission 750 or 640?

The data-dir itself has permissions 700 thereby limiting access to the mysql user. I want other folks who I add to the mysql group to be able to read binlogs and download the *.frm, *.MYI, *.MYD ...
3
votes
1answer
58 views

Find signed procedures, functions, triggers, assemblies and by which certificates / asymmetric keys

I have created a few Certificates (via CREATE CERTIFICATE) and Asymmetric Keys (via CREATE ASYMMETRIC KEY) and used them to sign and counter-sign various Stored Procedures, User-Defined Functions (...
0
votes
1answer
104 views

SQL Server 2014 - Disabled All Admin Users [duplicate]

I made the most ridiculous thing. I accidentally disabled both remote logins and database accesses for the Administrator accounts (including the one with Windows Authentication (Administrator account) ...
2
votes
1answer
66 views

How to compare MySQL privileges granted to privileges used?

I have inherited a MySQL server that has a user with far too many privileges granted but I believe not all of these are required. Is there any way to compare the MySQL privileges granted to the MySQL ...
0
votes
1answer
33 views

PostgreSQL: access right problems

I have a "production" user and database on which I want to give right access on all the users belonging to a production group. Unfortunately, I don't succeed, keeping the access denied error. Can ...
-1
votes
1answer
703 views

SQL Server Management Studio crashes when attaching an mdf file

After the Windows 10 November update 1511, 10586 I cannot attach my databases with SSMS. It would just say that it has stopped working as shown below I checked the error log and so far this is what ...
1
vote
1answer
30 views

Postgres Access Roles

I'm trying to get my head around postgres roles. I want to create a database and have the owner role have all privileges on the database. I then want another role which cannot create tables but able ...
3
votes
1answer
65 views

Find current owner of custom data type?

In Postgresql, when I try to run ALTER TYPE x ADD VALUE y; on a custom datatype I get an error stating PG::Error: ERROR: must be owner of type x. I know this can be solved by running ALTER TYPE x ...
0
votes
1answer
83 views

SQL Agent Proxy - writing to logs is only allowed to jobs that are owned by sysadmin

I have a Windows 2012 RS and SQL Server 2012 Enterprise Edition. I have SQL Server maintenance jobs from ola.hallengren.com and the owner of the jobs were sa. The security team decided to change that ...
7
votes
3answers
763 views

what AD groups logins my user belongs to?

I am not sure if I have chosen the right title for this question. what I am really after is, given a individual windows AD user, I would like to find out the list of the windows AD groups (logins) ...
1
vote
2answers
13 views

Not Able to access user privileges for root in mysql

I accidentally deleted all privileges for root and users. I would like to know how to restore them. I don't have access to USER privileges for any other user.
5
votes
2answers
185 views

SQL Server - granting permissions to an entire schema vs. object?

I'm very green when it comes to the world of database permissions management in SQL Sever. Let's keep an example simple. Say account 'admin' is the owner of schemas A, B, and C. There another ...
1
vote
1answer
111 views

postgres user cannot access location of new data directory

I moved my postgresql 9.3 data directory to a different drive, however, my postgres user cannot seem to access that new drive despite my best efforts. I am running on ubuntu 14.04 LTS x64. So I ...
5
votes
1answer
57 views

Checking SQL AlwaysOn backup target with fn_hadr_backup_is_preferred_replica, different answers with different permissions

I've implemented AlwaysON backup with Ola's script, those are running fine on designated server configured for backup. I would like to automatically check backups using sql-scripts fired from a ...
3
votes
1answer
167 views

SQL Server - SQL Agent - Allow a Group to own a job

Scenario There are three separate groups of users in our organisations (development, support, implementation). As it stands everyone is using a single login for everything. We are starting to move ...
0
votes
0answers
73 views

Modify MySQL information_schema (specially create_time) on AWS RDS?

I am trying to modify the create_time of an entire database, tables, etc. I have found that information_schema tables stores the creation date of the tables on the column CREATE_TIME. Unfortunately ...
4
votes
2answers
355 views

db_datareader, db_datawriter and db_owner permissions [duplicate]

First of all, sry because I am not a DBA and I'm not familiar with all the permissions. My question is, if I give a user db_owner permissions on one database. Do I need to give also db_datareader and ...
5
votes
1answer
61 views

Recover SA Password - PSTools - Not working

I'm on a new company, and the first thing I saw is that they don't even know how many instances they have. they don't have passwords and the old DBA had no Idea what he was doing. long story short, I ...
0
votes
1answer
3k views

error “--secure-file-priv option” when save selection to csv

I try to save a very large select (more than 70 milion rows into csv file) on Win 2012 R2 server I execute query as root , but I think there is still some problem with privileges select * INTO ...
1
vote
3answers
105 views

How to create a non-sa SQL Server login / access without control server permission

I have SQL Server, and I need to give access to other users to run basic queries (just select on 1 database). I have created a login for a user, and have amended their permissions, but once I deny ...
0
votes
2answers
165 views

What is the alternate to SA account in SQL Server? [closed]

My client is currently using SQL Server for their app. At this time they are using SA account everywhere. For security reasons we need to disable the SA account. The solution I've is create another ...
4
votes
1answer
437 views

Getting a proxy account to backup to a share using Ola Hallengrens backup script

I have a SQL Server 2012 Standard install where the Engine and Agent are running under the default NT Service accounts Engine - NT Service\MSSQLSERVER Agent - NT Service\SQLSERVERAGENT I am trying ...
1
vote
0answers
44 views

SQL Server 2014 proxy error

I'm rather confused by this one and can't see any options in previous posts about similar things. I've created a credential -> proxy account, that will run a PowerShell script. When I run the ...
2
votes
2answers
377 views

SQL Server logins and users — assign multiple logins to a single user? [duplicate]

In SSMS, since I can't assign multiple login objects to a single user object, what is a best practice to achieve an equivalent security model? For example, I have 20 logins and want to give them all ...
1
vote
1answer
133 views

Grant access to all objects (with a few exceptions) to a role

In SQL Server 2014, I want to create a role that will have access (select, delete, update, insert, execute) to all the tables, views, stored procedures, except a certain list of tables that contain ...
4
votes
1answer
110 views

sa doesn't have permissions to other database through synonyms with the Service Broker

I've been trying to get this Service Broker and timers thing to work for over a week straight now, so bear with me if this comes off as.. uh.. ragey. I'm also fairly inexperienced when it comes to SQL ...
0
votes
1answer
93 views

Cannot fix ERROR:ORA-01031: insufficient privileges

I have tried almost every solution on the internet however I still cannot fix this problem. I cannot login as sysdba every time I try SQL>connect /as sysdba I get the error ERROR:ORA-01031: ...
1
vote
1answer
42 views

Adding new user in Postgres

I am using AWS RDS PostgreSQL and currently up and running. I would like to know how I can add a new user but only grant SELECT on an existing DB. The way I connect to my RDS from my PC is by using a ...
1
vote
1answer
61 views

Stored Procedures execution permissions

So what I am trying to do is to limit the access to a stored procedure so that only another stored procedure may call it. Here is an example: create procedure Database_Deployment_Proc -- This ...
0
votes
1answer
84 views

User cannot create schema in PostgresSQL database

I'm trying to setup a "deployment" user which can create and alter tables on an existing database in addition to selecting, updating, inserting and deleting records. Here is what I've tried so far: -...
5
votes
1answer
284 views

Restrict Postgres roles by IP address outside of the pg_hba.conf file

I am currently adding Postgres support to a deployment tool that currently only supports MySQL. This tool dynamically provisions and configures a database, among other things. In MySQL, we can ...
1
vote
1answer
54 views

Forbid user to query internal SQL server information

I'm trying to forbid database user to get SQL server internal information. Script that creates DB user: CREATE USER [testuser] WITHOUT LOGIN WITH DEFAULT_SCHEMA=[dbo] DENY SELECT, INSERT, UPDATE, ...
0
votes
2answers
41 views

MySQL show all grants

I have over 100 system and admin users in my db server. Does anyone know how to show their grants by running a single query? Thank you very much.
1
vote
1answer
86 views

How do I GRANT for all tables across all schemas

I want to GRANT SELECT ON ALL TABLES TO foo; But postgres tells me I have a syntax error at "TO". It expects a GRANT like: GRANT SELECT ON ALL TABLES IN SCHEMA public TO foo; ...
2
votes
2answers
219 views

SQL Server REVOKE requires CASCADE

I have the following graph: B granted select on D and D granted select on E and E granted select on G. B has grant select with grant option and has granted select D with grant option. D has grant ...
4
votes
2answers
2k views

DDL_admin vs db_owner permissions

I'm taking over a project that involves removing and limiting permissions of all database users across our server farm. (fun times) One of the permissions currently being limited is db_owner ...
1
vote
2answers
64 views

DENY insert,update,delete to user (PostgreSQL)

I wonder if Postgres support the DENY command. I search in the documentation but I couldn't find anything about deny. I have GRANT ALL ON table1 TO user1 WITH GRANT OPTION but I don't want user1 to ...
0
votes
1answer
115 views

User databases inaccessible after physical restart

We have an unusual error happening on the SQL Server. After restarting the physical server where the SQL Server instance is installed, the user databases are not accessible. System databases are ...
1
vote
1answer
48 views

Active Directory group as a schema in SQL Server

In SQL Server 2008 R2 we have a database that is being maintained by a team of developers. Each of them should have permissions to perform DDL operations such as adding a column or creating a table. ...
1
vote
4answers
8k views

grant all privileges of all tables in database to a user

I use oracle 12c. I try to grant all privileges of all tables to a user. And in future I don't need to add any privileges to that user. I need to do this. I don't want to grant system tables to that ...
13
votes
1answer
1k views

Running SSIS package from SQL Agent job owned by a non-sysadmin domain user

I have two SSIS packages that run scheduled overnight (via SQL Server Agent) as part of a larger SSIS deployment, without any issues. Everything is using Windows authentication, and the scheduled job ...
0
votes
0answers
12 views

Storing default user type roles & module roles

I have multiple user types and each user type would need to be assigned different roles. However, I also build the application with Modules that can be selected by users when they subscribe. Each of ...
1
vote
0answers
21 views

Grant permission to update dbmail

We want to grant a user the ability to update their own mail connection profile used by db mail in msdb. For example, when the IT company maintaining the mail server wants to change the password. We ...