Questions tagged [permissions]

Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

Filter by
Sorted by
Tagged with
3 votes
2 answers
2k views

INSERT denied on tables. but login has permission for it

I'm running a procedure from database X to database Y. On database Y there should be an insert from the user. In this picture , the first column is the Login, the second one is the role that have all ...
1 vote
0 answers
99 views

Can you synchronize user accounts with specific DB permissions with records found in a table?

Background / Current Setup I have a database in a SQL server that uses row level security to determine what records a user has access to. Users will have two methods to interact with the database. ...
12 votes
6 answers
9k views

How to deny access to SQL Server to certain login over SSMS, but allow over .Net SqlClient Data Provider

We have a situation where Developers do not have any UPDATE permissions, BUT they work with applications and see connection strings -> they know passwords from some SQL accounts (example SQLLogin1) ...
42 votes
3 answers
203k views

postgres: permission denied for schema

I am new to postgresql and I would grateful if you could please advise on how-to resolve the following error.. I have issued the followed commands: ip_spotlight-# REVOKE EXECUTE ON ALL FUNCTIONS IN ...
1 vote
1 answer
209 views

set a lower privilege permission on a specific database when a GRANT ALL exists on a pattern matching this database on MySQL

I have a user which has access (GRANT ALL) to a set of databases matching a wildcard pattern, now I would like to remove one specific database matching this wildcard from it's access. mysql> select ...
1 vote
0 answers
77 views

Azure SQL database make AD user see more databases in SSMS

I'm using Azure SQL databases and want to add a user from my company using Active Directory auth, so adding the user from external provider. The problem - by design Azure SQL creates AD users as ...
0 votes
1 answer
158 views

Postgres preventing update on "events" table but insert "warning" event

I'm facing a bit of a problem on some restrictions I'm trying to implement on my postgresql database. My dilemma is as follows: I have an event table that logs basically everything that happens on my ...
0 votes
4 answers
85k views

Creating an admin user in Oracle

How can I create a "root" (like on MySQL) in Oracle? I installed Oracle database on my system, for homework, for school (faculty) but it didn't give me the option to make a root user. Well at least I ...
9 votes
3 answers
45k views

Mysql Workbench crashing when connecting

I have created an user i intend to give access to one db only. But when i try connecting with him, the program crashes. When i connect with the root user, it works. create user 'test'@'localhost'; ...
1 vote
2 answers
2k views

SQL Server 2019 - using MSA as a proxy account

I'm thinking about using MSA (or gMSA) as proxies inside my SQL Server instances. This proxies would be used for example for running SSIS packages or xp_cmdshell command. But based on what I've ...
8 votes
3 answers
13k views

Access to the path 'c:\some\path' is denied for MSSQL CLR

I think this is a permissions problem, but I'm having trouble locating it. I have a group of CLRs on one server (SQL Server 2016) and they work as they should. All are marked UNSAFE and they do ...
1 vote
1 answer
327 views

How to remove user from login (user is already part of group) and keep the jobs?

I have a sql login for windows group. One of the members of ths group was also added as a sql login. This user has 1 job in which he is registered as the owner. I want to remove this user login ...
0 votes
1 answer
116 views

Does deleting the login retain the permissions given via group membership?

I have a windows group account added as login in sql server. The group contains around 100 members. The above windows group login is given specific database level permissions like db_datareader, ...
1 vote
1 answer
127 views

What is effective permission if windows user is added as login as well as via group membership; with only public permission given via the user login?

Link: https://learn.microsoft.com/en-us/sql/relational-databases/security/authentication-access/determining-effective-database-engine-permissions?view=sql-server-ver15#principals Remember that a ...
0 votes
1 answer
309 views

What is the permission that makes the user a SQL Server administrator?

From the documentation: Determining Effective Database Engine Permissions SQL Server administrators can see information about all logins and users. Less privileged users usually see information about ...
0 votes
2 answers
7k views

ORA 01031 Insufficient privileges on GRANT SELECT on ALL_CATALOG to a user as system user

Command: GRANT SELECT ON ALL_CATALOG TO appdbuser * Error: ERROR at line 1: ORA-01031: insufficient privileges PROBLEM: I want my Oracle XE system user (<-important) to be able ...
0 votes
1 answer
380 views

Postgres Role access privileges

I am trying to assign select privs via a role for current and future tables, and i cant see to figure this out. Please advise. create role dev_role; grant usage on schema address to dev_role grant ...
0 votes
0 answers
454 views

MongoDB - Grant permission over one collection that exists on all databases

I have several databases on my MongoDB, all of them have or will have a collection called _schema. Currently, I'm granting permissions like this: db.grantRolesToUser("userA",[ {"role&...
0 votes
1 answer
144 views

Dropping everything in a database owned by a certain role -- not working

I want to delete everything in a certain database owned by a certain role. I've tried to do and nothing has been deleted. sudo -u postgres psql postgres=# \l List ...
0 votes
1 answer
1k views

fn_trace_gettable Error SQL Server 2008

When I Execute SELECT * FROM FN_TRACE_GETTABLE(N'E:\Trace_Files\trace1.trc', 1) It says "You do not have permission to run 'FN_TRACE_GETTABLE", What type of permission on server required to execute ...
1 vote
2 answers
743 views

Unable to delete server_principal due to granted permissions

I want to delete a server principal from my server because the member is not working at our company anymore. Unfortunately this principal is owner of objects / grantor of permissions because he ...
0 votes
0 answers
226 views

Remote Login Failure for User - Error No 18456

I setup a test user in a SQL Instance. I tested logging in from within the Windows Server and it worked fine. So password is fine and permissions are fine. From my PC I attempted to connect to SQL ...
1 vote
1 answer
12k views

Show all privileges given to a schema or user in postgres

I want to know what are the privileges a given schema or user has in Postgres. Like whether it can create a table, view, function, sequences or not. I found one query but it showed privileges on table ...
8 votes
3 answers
19k views

How do I detect execute permission granted to a role (when no ON clause was used)

I just spent hours trying to figure out how an app had privilege to execute stored procedures. TIL from StackExchange: Turns out the ON clause is optional for GRANT, allowing a role to be granted ...
6 votes
2 answers
11k views

psql is not prompting me for a password, then denies access

I'm using Postgres 9.4 on Debian Linux. I created a database with a user, cindex with access to the database. Yet when I try and login at the command line, I'm not even prompted for a password: ...
0 votes
1 answer
2k views

How to restrict Users to see only their databases where has access? [duplicate]

I need to restrict the list of database for our users in a SQL Instance In order to move forward this I revoked the view any database permission to the user desired. But I figured out that only ...
1 vote
2 answers
6k views

Postgres 10.5: Granting full schema access to a user that isn't the owner

So the underlying problem I'm having is trying to migrate my on premise Postgres 10.5 instance to RDS. RDS does NOT give end users the SuperUser role so I'm hitting tons of permissions issues when ...
3 votes
3 answers
8k views

how to script out database users and permissions in all user databases in the instance [closed]

Can anyone help, please? I would like to use Steve Kusen's script at Script DB Level Permissions v4.3 to loop through all the user databases automatically, using Aaron Bertrand's sp_ineachdb. Has ...
1 vote
0 answers
2k views

Create multi-user database schema with roles, permissions, and services

I am in the process of designing a user administration database and I am stuck in the creation of the tables and their relationships, in order to explain myself below I expose the requirements of the ...
2 votes
0 answers
3k views

Change database owner of Azure SQL Database

I want to change the database owner of an Azure SQL Database. I can do this via the server administration user. However I want to do it using a different user. Why? Because I have a process which ...
31 votes
5 answers
352k views

CREATE DATABASE permission denied in database 'master'. unable to get the permission

I am making a database in sql server and it shows an error that "CREATE DATABASE permission denied in database 'master'" I am using the administrator log in itself. What i need to do? Please suggest a ...
0 votes
1 answer
113 views

PSQL asks for password for a specific database

I am hosting two different databases (manage_invite and manage_invite_v49) on the same server. As you can see, when I try to connect them using the CLI, it demands the password for the second ...
5 votes
1 answer
2k views

How do I create an insert-only user for a Postgres table with an index?

Here's my proposed schema: CREATE TABLE Surveys ( id serial primary key, user_email citext, survey_data jsonb, created_at timestamp default current_timestamp ); CREATE INDEX ...
0 votes
1 answer
27 views

Creating specific permisions for DB user

I need to give access to CREATE QUEUE and DROP QUEUE queries. Can`t find that information over the internet, only found that db_ddladmin or db_owner fixed database roles, or the sysadmin have that ...
0 votes
1 answer
372 views

Access.adp (2010) and SQL Server 2014

We are using Access .adp (Access 2010) frontend in combination with SQL Server 2014 backend. At the moment we have a big performance problem with the SQL function permissions(). We have ca. 400 Users ...
0 votes
0 answers
133 views

The user privileges I have assigned don't work when someone imports my .sql database file on mySQL

I'm new to SQLs and mySQL, I and my colleagues who are also new to SQLs are working on a database project and I have successfully queried its structures and inserted data into them. I then created ...
7 votes
6 answers
50k views

error "--secure-file-priv option" when save selection to csv

I try to save a very large select (more than 70 milion rows into csv file) on Win 2012 R2 server I execute query as root , but I think there is still some problem with privileges select * INTO ...
1 vote
1 answer
3k views

What permissions does the SQL Agent's user need to execute Powershell scripts?

I'm trying to create a job with a Powershell step. To recreate this: create new job, give it a name add a new job step, name it, type powershell, run as the SQL Agent, script: $test="test" set the ...
0 votes
0 answers
917 views

How can I DENY a SQL Server Database User from seeing tables in a specific schema? VIEW DEFINITION doesn't seem to work

This is somewhat of an X/Y Problem: my original problem is that I want to use SSDT to maintain my database design, with the catch that my database design uses two schemas: The dbo schema that ...
-1 votes
2 answers
148 views

Extremely safe Postgres table permissions

Let's say that I have four tables in my Postgres database, two of which are private and contain highly sensitive information (private1 and private2), and two that contain information I want to allow ...
1 vote
1 answer
2k views

Confused by GRANT ALL PRIVILEGES causing Access Denied for database 'mysql'

I thought I understood grants in mysql, but this particular problem has me stumped. I am logged in as the 'dbadmin' user on a mysql 5.6.27 database. +---------------------------------------------------...
3 votes
1 answer
24k views

DBeaver: Access denied for user 'root'@'localhost' (using password: YES)

Context: I am creating a new Schema and looking to import .sql file generated from mysql dump. I have server running: MySQL 8.0.19. I am using DBeaver client Version 7.0.2 and have setup a new MySQL ...
1 vote
1 answer
10k views

Cannot drop the user because it does not exist or you do not have permission

I am getting this message for some users when executing sp_revokedbaccess procedure for database users. Users I am trying to remove are selected from sys.database_principals with type = S, W or G (sql ...
0 votes
0 answers
2k views

Privileges to select any table in Oracle

I'm using a Oracle database client application that connects to 1521 port to do "select" commands over every table in a Oracle db 12.1. I told dba to create this role with these commands: ...
1 vote
1 answer
100 views

Can sys.database_permissions contain REVOKE?

The Microsoft documentation for sys.database_permissions mentions that the valid values for state are "D", "R", "G", "W". The corresponding values for ...
0 votes
1 answer
2k views

Can't create schema for a db with PostgreSQL

Use psql -U postgres to login. postgres=> CREATE DATABASE mydb; postgres=> \c mydb; You are now connected to database "mydb" as user "postgres". When create schema, got ...
1 vote
1 answer
5k views

ERROR 1 (HY000): Can't create/write to file (Errcode: 13 - Permission denied)

I've been struggling for a couple of days with this now and have been trying to use this thread amongst other google searches to resolve it but can't seem to get it to work. When I run this SELECT ...
2 votes
1 answer
635 views

SQL statement to hide all system databases in Server from a server login [duplicate]

I want to create a Windows authentication server login and make it cannot see any system databases e.g.master, model. I know that we can control view definition in database level e.g. database user, ...
1 vote
3 answers
5k views

Are there any things to consider before granting VIEW SERVER STATE and VIEW DEFINITION to Developers?

I would like to grant below to permissions to Developers group, on Production SQL Server: VIEW SERVER STATE VIEW DEFINITION (server level) This is done to make them able to query some of dynamic ...
1 vote
2 answers
181 views

Create a view in a user database that can access selected system database tables

Using the principle of least privilege, what access should I give to a Role "Checklist_role" that has read permission to a view "MaintenanceJobs_view" in a user database "...

1
5 6
7
8 9
32