Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

learn more… | top users | synonyms (2)

9
votes
1answer
67 views

When are privileges listed in \l and when not?

When are access privileges listed by \l, and when are they not? The access privileges listed by \l can change after a grant and revoke: $ createuser -EP my_readonly $ psql development development=# \...
1
vote
1answer
46 views

What are the default fixed server role members for SQL Server 2012

What are the default fixed server role members for newly created SQL Server 2012 instance using all default options. As given by EXEC sp_helpsrvrolemember
1
vote
1answer
56 views

Temporary permissions for DDL

I was hoping to use user impersonation to setup a user that has permissions to modify DDL, and only when I need to deploy DDL changes would I impersonate that user. This way I can use my windows ...
1
vote
1answer
54 views

Apply the select privilege to all users in mysql

I have 30 plus MySQL users their permissions vary from one another. I want to GRANT SELECT privilege to all of the 30 users. Is there any one command that I can use that can grant select to all 30 ...
2
votes
1answer
378 views

Granting access to the Job Activity Monitor

I'm trying to grant access to the Job Activity Monitor. On my model office server I can create a new login and add it to the SQLAgentReaderRole role in msdb, and the id has access to the monitor. ...
0
votes
1answer
1k views

GRANT EXECUTE ON PROCEDURE unable to USE database

I am attempting to grant a user execute privileges to a single stored procedure without any other privileges in a MySQL 5.1.45 instance. The stored procedure is defined with SQL SECURITY as DEFINER. ...
0
votes
1answer
99 views

What are the user privileges required to for an ssrs report owner to 'send email'

Yes, this question is a duplicate to: SSRS - rsAccessDenied error but that question is 2 years old and unanswered...so I thought I might try again. Our DBA has recently departed leaving behind a ...
1
vote
1answer
28 views

Methods of Denying login by specific SQL Authenticated user using Management Studio

I am trying to create a way of restricting/complicating access, for a particular user, to login to SQL Server, using Management Studio with SQL Server Authentication. I would like a way that also ...
0
votes
1answer
591 views

Steps to determine why NT AUTHORITY\SYSTEM has permission on one database, but not another

Have a service running under NT AUTHORITY\SYSTEM (Local System) and accessing local SQL Server database using Windows auth. On one database they have permission to read/write - on other database (on ...
3
votes
2answers
2k views

List all databases of a certain user ( SQL Server 2008 R2 )

I'm really looking for this answer for some time. I bet there is a post here but, I really can't find ( even on google ). I think it's a simple task. I want to list all databases for a specific user....
1
vote
1answer
49 views

Real-world scenarios for table with DENY SELECT and GRANT [INSERT/UPDATE/DELETE] [closed]

What is real-world scenarios for this type of permissions? May be it is generally not valid, and made by mistake? Should this kind of permissions be avoided (or prohibited)?
3
votes
1answer
141 views

Reg: Default Privileges on PostgreSQL Schemas

I have a situation where many users can create database objects across all the available schema. There is a generic user pg_dump_user used for by all the developers to dump the whole database to ...
1
vote
0answers
54 views

Allow user select from table in another user's schema that has policies set

I have an oracle10g database with 2 users - user A and user B. I want to select data from a table in user A's schema from user B. I have granted user B select privileges on the table in question but I'...
2
votes
2answers
82 views

How to identify database users and their owned schemas before dropping server logins?

While deleting logins, there might be a possibility that there are users in databases along with chances that they own schemas in those databases. Is there a way to find this out with a single select?...
3
votes
1answer
717 views

Domain Admin on AWS lacking user rights to edit the top 200 using the Management Studio interface

I setup an application + SQL Server on AWS. Everything works fine my SQL User can read/write to any table. Now I connected to the SQL Server using my domain admin account using windows authentication ...
2
votes
1answer
9k views

The user specified as a definer ('root'@'%') does not exist

I have a trigger defined as follow: USE `veeva_bi`; DELIMITER $$ DROP TRIGGER IF EXISTS veeva_bi.account_ai$$ USE `veeva_bi`$$ CREATE DEFINER = CURRENT_USER TRIGGER `veeva_bi`.`account_ai` AFTER ...
2
votes
2answers
374 views

Why can't user with SQLAgentOperatorRole delete his own SQL jobs

I created a login and a user. I assigned the user as the db owner of the database "test". Then I granted him the role SQLAgentOperatorRole so that he can delete/create/modify the jobs belonging to the ...
2
votes
1answer
40 views

What should be the command for following role creation requirement?

I need to create a role where the assigned user can access only the 'AdventureWorksDB" where he will have execute permission to all tables,views and stored procedures in the database. I wrote the ...
0
votes
1answer
126 views

Missing view privileges in USER_TAB_PRIVS

I can't figure out how to view the grant privileges I've given users on views -- FIRSTUSER@SQL> create view remotetabletest 2 as select * from A_TABLE where PKEY = '123456' 3 / FIRSTUSER@...
1
vote
1answer
136 views

Allow multiple users to see procedures and functions

I have GRANT ALL PRIVILEGES ON `test1`.* TO 'admin'@'%', GRANT ALL PRIVILEGES ON `test1`.* TO 'devel'@'%' (from SHOW GRANTS FOR some_user) and I have created simple procedure as admin in test1. And ...
2
votes
1answer
144 views

Unable to remove permission for mysql.user

I am trying to remove permission from mysql user to not be able to delete specific database. But if i run this command: revoke all privileges on test.* from 'demo'@'localhost'; or this revoke drop ...
3
votes
1answer
123 views

Allow multiple users to change functions in MySQL

I want to make multiple users and allow them to change procedures,functions and triggers in same DB. There must be user devel for developers and admin for admin, both can change developers DB, but ...
3
votes
1answer
45 views

How to allow users to run a function, but not access objects the function is accessing

I have a PL/PgSQL stored procedure that performs various operations on tables (SELECT, UPDATE, INSERT, TRUNCATE). I want users to be able to run the stored procedure, but not themselves perform those ...
4
votes
1answer
118 views

Limiting Domain Admins permissions on a SQL Server

I have a SQL Server 2012 machine and I want to limit the Domain Admins permissions. What can I do to make sure that the Domain Admins have read only permissions for the databases and nothing else for ...
4
votes
1answer
256 views

How to create a login and user that can only access one schema in one database

I have executed the following: USE [MyDatabase]; GO CREATE LOGIN [MyDomain\MyAccount] FROM WINDOWS WITH DEFAULT_DATABASE=[MyDatabase]; CREATE USER [MyDomain\MyAccount] FOR LOGIN [MyDomain\MyAccount]; ...
2
votes
1answer
283 views

What are the best practices for restricting write-access on a specific table?

I have a table, which I'd like to be read-only, except for a few specific stored procedures which need permissions to UPDATE rows in the table. After that, I want only a select group of additional ...
0
votes
1answer
47 views

Allowing a user to view/edit only a specific table in a database with ~50 tables

The database I'm working with has about 50 tables in it. A single user requires edit permissions on one of the tables, but should not have access to any other tables. I know how to deny her the ...
1
vote
1answer
800 views

Grant execute on specific type in Oracle

I have created a package and defined a type for collections as follows: create or replace package <schema>.<package> as ------------------------------------- type <type> is ...
1
vote
0answers
2k views

view server state permission was denied

The strangest thing is happening on my SQL Server Management Studio. When I right-click any table, I get a "VIEW SERVER STATE permission was denied on object 'server', database 'master'. (.Net ...
1
vote
1answer
138 views

Migrating mysql.user table from MySQL 5.5 to MySQL 5.6

I have a tricky question. I am migrating from MySQL 5.5 to MySQL 5.6. I want to migrate 45 users in MySQL 5.5 to MySQL 5.6 Questions Should I just take a dump of the MySQL 5.5 user table and ...
1
vote
2answers
60 views

Restrict Full access to certain User of Database

The scenario is the following: Given SQL Server Instance created and handled not by me Creation of Database and User on given Instance by me Question: To my limited understanding, the sa login ...
2
votes
1answer
92 views

How can I allow a user to query a view but not the underlying table in MySQL?

I have searched for this question but cannot find an answer. Or, the answers I have found have been related to SQL Server. This is for MySQL 5.x. Anyway, say I have a table called Employees and in ...
0
votes
1answer
41 views

Unexpected SELECT permissions

My user WebApp seems to have SELECT permissions on every table in every schema and I can't figure out why. WebApp is only in the Public role. Public doesn't own any schema. Explicit permissions ...
2
votes
1answer
387 views

MariaDB 10 InnoDB Partition with Data Directory

mysql --version mysql Ver 15.1 Distrib 10.0.20-MariaDB, for Linux (x86_64) using readline 5.1 I have a MariaDB 10 installed, though I tried with the 5.5 release in the CentOS repos. I'm ...
4
votes
2answers
54 views

Snooping-safe Vote tables

I have a table with both user_id and vote. They are stored together so each user can only give one vote. However it's also problematic because admins can simply read who voted what. Is there a way to ...
-2
votes
1answer
241 views

Implication of owned schemas for a user having db_owner privilege

Importance of "Schema owned by the user"? The user is db_owner for the db. Is it required to select owned schemas?, or else it will own all the schemas as it is a db_owner? Please provide me a detail ...
1
vote
1answer
103 views

Simple SSIS Package Failed User does not exist or has not permission

I created and build SSIS Package with "Transfer SQL Server Objects Task". I Copied the package.dtsx to network folder with permissions set to everyone. I created the SSIS Job where i set path to ...
3
votes
1answer
124 views

SQL Server: UPDATE permission for table variable

SQL Server 2012 I have a maintenance script that I wrote for some of my operators. They are members of the fixed db_datareader and db_datawriter roles. Part of the script creates a table variable, ...
3
votes
1answer
492 views

Unable to change database owner to a user that is already mapped as user

I ran into this problem. Trying to change a database owner to acct1; however, I get the following error message when doing so: The proposed new database owner is already a user in the database ...
1
vote
1answer
81 views

SQL Server 2008 R2 copy Schema with all user security permissions

I have a prod support request from a high value user to adjust the settings on a company-wide dashboard so that he can manage a section of his workflow currently being excluded from these reports. ...
0
votes
2answers
367 views

MySQL Add/Grant user if it does not exist

I am trying to create a update/install script that adds a user and database only if it's a fresh install. The script uses a randomly generated password for the user, so using the GRANT statement as ...
0
votes
2answers
2k views

What is the privilege for account unlock in Oracle [closed]

I want to understand the privileges better, but I'm not able to find some useful info using Google. I thought that I needed ALTER USER privilege to be able to unlock user and change password. But ...
3
votes
1answer
73 views

`chown -R` equivalent for PostgreSQL

We occasionally have the problem that, when upgrading some software and database, inexperienced (or overworked, not excluding myself) sysadmins (we don’t have separate DBAs except for Oracle) run the ...
0
votes
1answer
350 views

Why would DBMS_METADATA.GET_DDL Fail when i have the SELECT_CATALOG_ROLE Role?

I am trying to get the DDL using METADATA_DBMS.GET_DDL for an object in a database, and I get the following error: ORA-31603: object "MY_PACKAGE" of type PACKAGE not found in schema "S1" ORA-06512: ...
-1
votes
3answers
488 views

Why does connecting to '127.0.0.1' work whilst 'localhost' fails?

I have noticed that although the listening host in postgresql.conf is localhost connecting to a database via psql fails unless the host is changed 127.0.0.1. I have also noticed MySQL display the ...
7
votes
1answer
214 views

Purpose of owning a schema in SQL Server

I've been spending the last few days cleaning up database permissions, grouping them all into AD groups and removing orphaned users. This has lead me to a recurring scenario: Find a user that owns ...
1
vote
1answer
108 views

How to change default security on SQL Server database so that everyone can use it?

I have a database hosted on my machine that I want co-workers to be able to access and edit through a program I created. My current connection string is: Server=MyMachine;Database=MyDatabase;...
3
votes
1answer
2k views

Confused by GRANT ALL PRIVILEGES ON *.* (…) WITH GRANT OPTION

Normally I manage users on my databases via phpMyAdmin, but since I do everything else in standalone programs such as SQLyog or HeidiSQL, I wanted the ability to manage users remotely from these ...
3
votes
1answer
470 views

OPENQUERY and server permissions

when I run my stored procedure it is a complete success, even if I run it through exec. Running these: sp_GetServerLogins GO exec ( 'sp_GetServerLogins ') GO I get this: Needless ...
4
votes
3answers
162 views

PostgreSQL GRANT ALL on mutliple tables using LIKE

I have more than 100 tables named public.test_* How can I easily GRANT ALL access to the user test to all that tables at once? I tried with: GRANT ALL ON TABLE public.test_* TO test; But it is ...