Questions tagged [permissions]
Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
1,582
questions
3
votes
2
answers
2k
views
INSERT denied on tables. but login has permission for it
I'm running a procedure from database X to database Y.
On database Y there should be an insert from the user.
In this picture , the first column is the Login, the second one is the role that have all ...
1
vote
0
answers
99
views
Can you synchronize user accounts with specific DB permissions with records found in a table?
Background / Current Setup
I have a database in a SQL server that uses row level security to determine what records a user has access to.
Users will have two methods to interact with the database. ...
12
votes
6
answers
9k
views
How to deny access to SQL Server to certain login over SSMS, but allow over .Net SqlClient Data Provider
We have a situation where Developers do not have any UPDATE permissions, BUT they work with applications and see connection strings -> they know passwords from some SQL accounts (example SQLLogin1) ...
42
votes
3
answers
203k
views
postgres: permission denied for schema
I am new to postgresql and I would grateful if
you could please advise on how-to resolve the following error..
I have issued the followed commands:
ip_spotlight-# REVOKE EXECUTE ON ALL FUNCTIONS IN ...
1
vote
1
answer
209
views
set a lower privilege permission on a specific database when a GRANT ALL exists on a pattern matching this database on MySQL
I have a user which has access (GRANT ALL) to a set of databases matching a wildcard pattern, now I would like to remove one specific database matching this wildcard from it's access.
mysql> select ...
1
vote
0
answers
77
views
Azure SQL database make AD user see more databases in SSMS
I'm using Azure SQL databases and want to add a user from my company using Active Directory auth, so adding the user from external provider.
The problem - by design Azure SQL creates AD users as ...
0
votes
1
answer
158
views
Postgres preventing update on "events" table but insert "warning" event
I'm facing a bit of a problem on some restrictions I'm trying to implement on my postgresql database.
My dilemma is as follows: I have an event table that logs basically everything that happens on my ...
0
votes
4
answers
85k
views
Creating an admin user in Oracle
How can I create a "root" (like on MySQL) in Oracle?
I installed Oracle database on my system, for homework, for school (faculty) but it didn't give me the option to make a root user. Well at least I ...
9
votes
3
answers
45k
views
Mysql Workbench crashing when connecting
I have created an user i intend to give access to one db only.
But when i try connecting with him, the program crashes. When i connect with the root user, it works.
create user 'test'@'localhost';
...
1
vote
2
answers
2k
views
SQL Server 2019 - using MSA as a proxy account
I'm thinking about using MSA (or gMSA) as proxies inside my SQL Server instances. This proxies would be used for example for running SSIS packages or xp_cmdshell command.
But based on what I've ...
8
votes
3
answers
13k
views
Access to the path 'c:\some\path' is denied for MSSQL CLR
I think this is a permissions problem, but I'm having trouble locating it.
I have a group of CLRs on one server (SQL Server 2016) and they work as they should. All are marked UNSAFE and they do ...
1
vote
1
answer
327
views
How to remove user from login (user is already part of group) and keep the jobs?
I have a sql login for windows group.
One of the members of ths group was also added as a sql login. This user has 1 job in which he is registered as the owner.
I want to remove this user login ...
0
votes
1
answer
116
views
Does deleting the login retain the permissions given via group membership?
I have a windows group account added as login in sql server. The group contains around 100 members.
The above windows group login is given specific database level permissions like db_datareader, ...
1
vote
1
answer
127
views
What is effective permission if windows user is added as login as well as via group membership; with only public permission given via the user login?
Link: https://learn.microsoft.com/en-us/sql/relational-databases/security/authentication-access/determining-effective-database-engine-permissions?view=sql-server-ver15#principals
Remember that a ...
0
votes
1
answer
309
views
What is the permission that makes the user a SQL Server administrator?
From the documentation: Determining Effective Database Engine Permissions
SQL Server administrators can see information about all logins and
users. Less privileged users usually see information about ...
0
votes
2
answers
7k
views
ORA 01031 Insufficient privileges on GRANT SELECT on ALL_CATALOG to a user as system user
Command:
GRANT SELECT ON ALL_CATALOG TO appdbuser
*
Error:
ERROR at line 1:
ORA-01031: insufficient privileges
PROBLEM:
I want my Oracle XE system user (<-important) to be able ...
0
votes
1
answer
380
views
Postgres Role access privileges
I am trying to assign select privs via a role for current and future tables, and i cant see to figure this out. Please advise.
create role dev_role;
grant usage on schema address to dev_role
grant ...
0
votes
0
answers
454
views
MongoDB - Grant permission over one collection that exists on all databases
I have several databases on my MongoDB, all of them have or will have a collection called _schema. Currently, I'm granting permissions like this:
db.grantRolesToUser("userA",[
{"role&...
0
votes
1
answer
144
views
Dropping everything in a database owned by a certain role -- not working
I want to delete everything in a certain database owned by a certain role. I've tried to do and nothing has been deleted.
sudo -u postgres psql
postgres=# \l
List ...
0
votes
1
answer
1k
views
fn_trace_gettable Error SQL Server 2008
When I Execute
SELECT * FROM FN_TRACE_GETTABLE(N'E:\Trace_Files\trace1.trc', 1)
It says "You do not have permission to run 'FN_TRACE_GETTABLE", What type of permission on server required to execute ...
1
vote
2
answers
743
views
Unable to delete server_principal due to granted permissions
I want to delete a server principal from my server because the member is not working at our company anymore. Unfortunately this principal is owner of objects / grantor of permissions because he ...
0
votes
0
answers
226
views
Remote Login Failure for User - Error No 18456
I setup a test user in a SQL Instance.
I tested logging in from within the Windows Server and it worked fine. So password is fine and permissions are fine.
From my PC I attempted to connect to SQL ...
1
vote
1
answer
12k
views
Show all privileges given to a schema or user in postgres
I want to know what are the privileges a given schema or user has in Postgres. Like whether it can create a table, view, function, sequences or not.
I found one query but it showed privileges on table ...
8
votes
3
answers
19k
views
How do I detect execute permission granted to a role (when no ON clause was used)
I just spent hours trying to figure out how an app had privilege to execute stored procedures.
TIL from StackExchange: Turns out the ON clause is optional for GRANT, allowing a role to be granted ...
6
votes
2
answers
11k
views
psql is not prompting me for a password, then denies access
I'm using Postgres 9.4 on Debian Linux. I created a database with a user, cindex with access to the database. Yet when I try and login at the command line, I'm not even prompted for a password:
...
0
votes
1
answer
2k
views
How to restrict Users to see only their databases where has access? [duplicate]
I need to restrict the list of database for our users in a SQL Instance
In order to move forward this
I revoked the view any database permission to the user desired.
But I figured out that only ...
1
vote
2
answers
6k
views
Postgres 10.5: Granting full schema access to a user that isn't the owner
So the underlying problem I'm having is trying to migrate my on premise Postgres 10.5 instance to RDS. RDS does NOT give end users the SuperUser role so I'm hitting tons of permissions issues when ...
3
votes
3
answers
8k
views
how to script out database users and permissions in all user databases in the instance [closed]
Can anyone help, please?
I would like to use Steve Kusen's script at Script DB Level Permissions v4.3
to loop through all the user databases automatically, using Aaron Bertrand's sp_ineachdb. Has ...
1
vote
0
answers
2k
views
Create multi-user database schema with roles, permissions, and services
I am in the process of designing a user administration database and I am stuck in the creation of the tables and their relationships, in order to explain myself below I expose the requirements of the ...
2
votes
0
answers
3k
views
Change database owner of Azure SQL Database
I want to change the database owner of an Azure SQL Database. I can do this via the server administration user. However I want to do it using a different user. Why? Because I have a process which ...
31
votes
5
answers
352k
views
CREATE DATABASE permission denied in database 'master'. unable to get the permission
I am making a database in sql server and it shows an error that "CREATE DATABASE permission denied in database 'master'"
I am using the administrator log in itself.
What i need to do?
Please suggest a ...
0
votes
1
answer
113
views
PSQL asks for password for a specific database
I am hosting two different databases (manage_invite and manage_invite_v49) on the same server.
As you can see, when I try to connect them using the CLI, it demands the password for the second ...
5
votes
1
answer
2k
views
How do I create an insert-only user for a Postgres table with an index?
Here's my proposed schema:
CREATE TABLE Surveys (
id serial primary key,
user_email citext,
survey_data jsonb,
created_at timestamp default current_timestamp
);
CREATE INDEX ...
0
votes
1
answer
27
views
Creating specific permisions for DB user
I need to give access to CREATE QUEUE and DROP QUEUE queries. Can`t find that information over the internet, only found that db_ddladmin or db_owner fixed database roles, or the sysadmin have that ...
0
votes
1
answer
372
views
Access.adp (2010) and SQL Server 2014
We are using Access .adp (Access 2010) frontend in combination with SQL Server 2014 backend. At the moment we have a big performance problem with the SQL function permissions(). We have ca. 400 Users ...
0
votes
0
answers
133
views
The user privileges I have assigned don't work when someone imports my .sql database file on mySQL
I'm new to SQLs and mySQL, I and my colleagues who are also new to SQLs are working on a database project and I have successfully queried its structures and inserted data into them.
I then created ...
7
votes
6
answers
50k
views
error "--secure-file-priv option" when save selection to csv
I try to save a very large select (more than 70 milion rows into csv file) on Win 2012 R2 server
I execute query as root , but I think there is still some problem with privileges
select *
INTO ...
1
vote
1
answer
3k
views
What permissions does the SQL Agent's user need to execute Powershell scripts?
I'm trying to create a job with a Powershell step. To recreate this:
create new job, give it a name
add a new job step, name it, type powershell, run as the SQL Agent, script: $test="test"
set the ...
0
votes
0
answers
917
views
How can I DENY a SQL Server Database User from seeing tables in a specific schema? VIEW DEFINITION doesn't seem to work
This is somewhat of an X/Y Problem: my original problem is that I want to use SSDT to maintain my database design, with the catch that my database design uses two schemas:
The dbo schema that ...
-1
votes
2
answers
148
views
Extremely safe Postgres table permissions
Let's say that I have four tables in my Postgres database, two of which are private and contain highly sensitive information (private1 and private2), and two that contain information I want to allow ...
1
vote
1
answer
2k
views
Confused by GRANT ALL PRIVILEGES causing Access Denied for database 'mysql'
I thought I understood grants in mysql, but this particular problem has me stumped.
I am logged in as the 'dbadmin' user on a mysql 5.6.27 database.
+---------------------------------------------------...
3
votes
1
answer
24k
views
DBeaver: Access denied for user 'root'@'localhost' (using password: YES)
Context: I am creating a new Schema and looking to import .sql file generated from mysql dump. I have server running: MySQL 8.0.19.
I am using DBeaver client Version 7.0.2 and have setup a new MySQL ...
1
vote
1
answer
10k
views
Cannot drop the user because it does not exist or you do not have permission
I am getting this message for some users when executing sp_revokedbaccess procedure for database users. Users I am trying to remove are selected from sys.database_principals with type = S, W or G (sql ...
0
votes
0
answers
2k
views
Privileges to select any table in Oracle
I'm using a Oracle database client application that connects to 1521 port to do "select" commands over every table in a Oracle db 12.1.
I told dba to create this role with these commands:
...
1
vote
1
answer
100
views
Can sys.database_permissions contain REVOKE?
The Microsoft documentation for sys.database_permissions mentions that the valid values for state are "D", "R", "G", "W". The corresponding values for ...
0
votes
1
answer
2k
views
Can't create schema for a db with PostgreSQL
Use psql -U postgres to login.
postgres=> CREATE DATABASE mydb;
postgres=> \c mydb;
You are now connected to database "mydb" as user "postgres".
When create schema, got
...
1
vote
1
answer
5k
views
ERROR 1 (HY000): Can't create/write to file (Errcode: 13 - Permission denied)
I've been struggling for a couple of days with this now and have been trying to use this thread amongst other google searches to resolve it but can't seem to get it to work.
When I run this SELECT ...
2
votes
1
answer
635
views
SQL statement to hide all system databases in Server from a server login [duplicate]
I want to create a Windows authentication server login and make it cannot see any system databases e.g.master, model.
I know that we can control view definition in database level e.g. database user, ...
1
vote
3
answers
5k
views
Are there any things to consider before granting VIEW SERVER STATE and VIEW DEFINITION to Developers?
I would like to grant below to permissions to Developers group, on Production SQL Server:
VIEW SERVER STATE
VIEW DEFINITION (server level)
This is done to make them able to query some of dynamic ...
1
vote
2
answers
181
views
Create a view in a user database that can access selected system database tables
Using the principle of least privilege, what access should I give to a Role "Checklist_role" that has read permission to a view "MaintenanceJobs_view" in a user database "...