Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

learn more… | top users | synonyms (2)

0
votes
1answer
1k views

DB2 Linked Server on SQL Server 2012 - Grant Access to Users

I have a linked server on SQL Server 2012 instance pointing to a DB2 database and I have Sys Admin access to that instance. I am unable to test connection to that DB2OLEDB database as I get below ...
1
vote
1answer
25 views

Creating a helper UDF or Stored Procedure and limiting external access

I'm looking for a recommended best practice for dividing functions and sprocs into a 'public API' and 'private implementation details'. I'm working on a security system and I want client apps to only ...
-1
votes
1answer
21 views

Select catalog role - Oracle

Does select_catalog_role if granted to a schema provide access only to dba tables and v$ views only and not to other schemas created for any application? The reason i'm asking this is I need to grant ...
0
votes
0answers
30 views

How can I return output from different DB2 selects using CASE statement

Can someone please help on this.. I have a situation where i need to check o/p of one query and based on results i need to check another query. SELECT CASE WHEN (SELECT count(*) FROM fcdp001....
0
votes
2answers
19 views

SharePoint Database Creation Failure

I wonder if this question will need to be moved to the SharePoint SE site, but I believe this could be a simple a SQL Server security fix. A little back story: Back in April we upgraded our ...
1
vote
0answers
16 views

How to give select privileges to database in postgreSQL [duplicate]

How can we give select access at database level in postgreSQL. At present I had created new user with select access on all tables in a schema using below syntax. grant select on all tables in ...
0
votes
1answer
44 views

EXEC xp_dirtree

I developed a stored procedure with a call to this extended SP EXEC xp_dirtree @path, 1, 1 Database: SQL Server 2008 R2 Express I run the store procedure from difrentes sources: ASP. Net with ...
0
votes
2answers
200 views

how to GRANT EXECUTE on MySQL

I updated the timezone on an AWS MySql instance, and tech support told me I also had to runt his command for each MySql user: GRANT EXECUTE ON PyupROCEDURE `mysql`.`store_time_zone` TO 'some_user'@'...
0
votes
1answer
350 views

Why would DBMS_METADATA.GET_DDL Fail when i have the SELECT_CATALOG_ROLE Role?

I am trying to get the DDL using METADATA_DBMS.GET_DDL for an object in a database, and I get the following error: ORA-31603: object "MY_PACKAGE" of type PACKAGE not found in schema "S1" ORA-06512: ...
0
votes
1answer
1k views

ClearDB Granting Created User Access

I added the ClearDB addon to Heroku, but upon using the created username to create a new database, the error appeared: Executing: CREATE SCHEMA `androidchatterdatabase` DEFAULT CHARACTER SET utf8 ; ...
2
votes
3answers
206 views

Use of IMPERSONATE permissions in SQL Server?

During some reading, got to know about the Impersonate permissions. From what I've read, it is more like creating a copy of the user with all the permission levels under a different name. I understand ...
0
votes
0answers
10 views

Connecting Remote Shares via Powershell

I had a big problem which I just happened to solve, but it's a permissions issue I don't quite understand. Unfortunately I'm in a tight bind and no amount of googling in the past week has really ...
0
votes
0answers
11 views

Drop user in redshift which has privilege on some object

I have a pretty standard problem that I can't resolve. I want to remove a user in redshift DROP USER u_A; which returns me: user "u_A" cannot be dropped because the user has a privilege on some object....
2
votes
1answer
1k views

ORA-16000 when trying to perform select on read only Oracle database

My application's SQL encounters an ORA-16000 error when trying to access a read only Oracle database. ORA-16000: database open for read-only access ORA-06512: at "SYS.XMLTYPE", line 272 ORA-06512: ...
1
vote
1answer
22 views

Postgres permission for EXPLAIN

I would like to give user a permission to perform EXPLAIN but not to execute the SELECT itself. Is this doable in PostgreSQL?
3
votes
2answers
532 views

Migration to databases Domain Users do not have access

I migrated databases to new servers, however the applications that were previously used with the databases are failing to load. I have changed the connections and etc. The jobs also seem to be failing....
0
votes
1answer
141 views

PostgreSQL error moving data directory to home folder

I have a problem with the moving of my data directory of PostgreSQL. I found many different ways, but none worked. The most sensible way for me was: Stop PostgreSQL Copy data from old folder to new ...
0
votes
0answers
21 views

SQL Server 2014 Dev Edition installation permissions issues

I am a guinea pig developer working with the IT team to devlop procedures for our teams to begin working with SQL Server 2014 Developer edition. We are having some permissons issues doing side-by-side ...
2
votes
0answers
24 views

Is it possible to deny RESTORE permissions to login with db_owner role membership?

Is it possible to deny RESTORE permissions to login with db_owner role membership? Is dbcreator required to RESTORE over an existing DB with a BACKUP of that DB? Or is that only needed when creating a ...
3
votes
2answers
78 views

If view A is built atop other views and tables, does a user need permission to only view A, or everything down?

I'm talking about SQL Server in particular. I suppose a user tried it and got an error (you don't have select permissions on hidden underlying view B not explicitly mentioned in query). The main view ...
9
votes
4answers
3k views

Property Size is not available for database

I recently restored a database to the same instance it was backed up from (SQL Server 2008 R2 Enterprise) and found that I couldn't access the database properties. I have done the following: ...
2
votes
1answer
727 views

Command fails as CmdExec job but succeeds from console

I have a SQL Server 2014 Agent Job (Type: "Operating system (CmdExec)", Run as: "SQL Server Agent Service Account", Owner: sa) that executes the following command: powershell -ExecutionPolicy Bypass -...
3
votes
1answer
60 views

How keep overview about database permissions?

As DB-Administrator I need to keep overview about my servers and databases in general - and from a security context about logins, users, db-roles and permissions in particular. It is possible to ...
9
votes
7answers
18k views

A query that lists all mapped users for a given login

When looking at the properties of a particular login, it's possible to see a list of users mapped to that login: I profiled SQL Server Management Studio (SSMS) and I see that SSMS connects to every ...
0
votes
2answers
39 views

Grant permissions to a user to grant select to specific tables in several schemas in Oracle

I administer a small datawarehouse in Oracle. My user dwhmanager was given the SELECT ANY TABLE privilege: GRANT SELECT ANY TABLE TO dwhmanager WITH ADMIN OPTION; The idea was to have the ability to ...
1
vote
1answer
52 views

Why can not user set current schema to SYS?

See the example bellow. User is created with dba (but not sysdba) privs. He's allows to access v$session (which is public synonym to view in schema SYS, having different name). When executing alter ...
1
vote
0answers
23 views

Windows Domain User with Admin privileges cannot access a drive with full permissions in psql

I have installed the standard PostgreSQL 9.5 from Enterprise DB with a domain-level postgres user who has domain-level admin group membership. I have explicitly added full permissions for this user to ...
127
votes
18answers
31k views

Should developers be able to query production databases?

Should developers be given permission to query (SELECT / read only) production databases? The previous place I worked, the development team had the db_datareader role; where I work now the ...
0
votes
1answer
24 views

secure specific tables in Data Warehouse

I'm newbie in this domain, I have a project that aim to create java application (Desktop Application) to manage roles based on users profile in a data warehouse. The thing that I'm not able to ...
0
votes
1answer
33 views

Default privileges to execute function

I have a user that has select only access but was granted execute on a single function in our mysql db. The issues I'm running into is other more privileged users will drop and create this function ...
0
votes
1answer
1k views

GRANT EXECUTE ON PROCEDURE unable to USE database

I am attempting to grant a user execute privileges to a single stored procedure without any other privileges in a MySQL 5.1.45 instance. The stored procedure is defined with SQL SECURITY as DEFINER. ...
0
votes
1answer
554 views

Restrict access to rows by usename

In my database i store data of different users (e.g. addresses or invoices) in the corresponding tables. I want to make sure that a logged in user only has access to it's own data in the tables (so ...
1
vote
3answers
707 views

Why does this procedure raise a privilege error?

I am having trouble getting the following procedure to run on a remote MySQL database - the given error is privilege based (#1227). Locally, the procedure runs fine. QUESTIONS Could somebody help ...
3
votes
2answers
4k views

One MySQL user from 2 hosts not on same subnet

I've googled around for this with no luck. I have a master database with one slave. The perms for the slave are set and it runs fine. I'd like to add another slave using a clone of the original server....
0
votes
0answers
18 views

RedShift Roles For Superuser-like Role with Read Only Access

I'm managing a RedShift cluster and our engineers need more access than is generally provided to them with their roles. Essentially they would require the right to read EVERYTHING in all tables but ...
4
votes
1answer
3k views

SQL Server 2014 Replication - The process could not connect to Subscriber 'xxx'

I have just set up very basic transactional replication on SQL Server 2014. The Publisher and Distributor are one and the same. I have configured the Publisher to push to the Subscriber, so any and ...
3
votes
1answer
29 views

How to copy part of a database with inconsistent privileges?

I have a Postgres database and I would like to copy certain tables from a single schema into a new empty database. So far I have copied a schema-only dump from from the old DB and applied it to a ...
3
votes
2answers
2k views

db_owner Member Can't Delete on Tables

SQL server 2008 R2. A user is part of an AD group. That AD group has a SQL account in this instance. That group has the following access to a Database: db_datareader db_datawriter db_ddladmin ...
6
votes
3answers
4k views

db_owner unable to drop database - Error 615, SQL Server

I have a SQL Server 2012 database running on amazon EC2. I've created a user to be able to create, edit and drop databases. I gave the new user with dbcreator server role. My user can connect ...
2
votes
1answer
40 views

Wildcard in CREATE grant in MySQL

MySQL allows the use of wildcards for database names, in order to allow an user to operate only on a subset of databases: GRANT ALL PRIVILEGES ON `foobar%`.* TO 'user'@'%' IDENTIFIED BY 'somepassword'...
2
votes
1answer
34 views

Pre-checking execute privs for SPs

We have a number of DBs where EXECUTE privs are required on a SP by SP basic. We have other DBs where we don't need to do this at all. In the latter case, I understand that this is a blanket GRANT, ...
0
votes
0answers
24 views

How do I keep all roles, users and permission on a database being dropped then restored with a different database with different permissions [duplicate]

The DBA at my job every week drops my test database and restores it with a copy of the live environment. The permissions on the live database are different then the test database(and need to be). ...
4
votes
1answer
64 views
1
vote
1answer
33 views

Is it possible to set PostgreSQL roles with privileges this way?

I'm trying to develop a system, and for the first time I'm using PostgreSQL. I'm trying to organize and separate roles properly, but I'm losing my mind with it (about a week on this now). Following ...
1
vote
0answers
22 views

Minimum permission needed for GRANT CRUD ON

I have a certificate set up to do cross database CRUD operations. The certificate is linked to a user in each destination database. I sign any stored procedures in the source database with the ...
0
votes
1answer
49 views

Using a third location for log shipping [closed]

I have a problem with log shipping in SQL Server 2012. I have tried to configure log shipping between server A and server B. The log destination is on my PC (shared folder). This scenario is working ...
1
vote
0answers
20 views

mysql/mariadb - prepared statement to create schema for users

I have the following scenario: mariaDB (mysql Ver 15.1 Distrib 5.5.49-MariaDB to be exact - I could bug the sysadmins to update if necessary) I want users to be able to create their own, distinct ...
3
votes
1answer
22 views

mysql replication and GRANT that doesn't quite grant

I am trying to set up mysql replication. All's well, but I see an error 1045 for the slave: mysql> show slave status\G *************************** 1. row *************************** ...
1
vote
1answer
34 views

Getting non owner to execute a job

I've attempted to implement solution three from the following Q & A: Allow non-sysadmin, non-owner of a SQL Server Agent job to execute it Table created and sproc created in msdb, inserted rows ...
1
vote
1answer
46 views

Why doesn't Oracle show my privileges?

I have a user that is able to drop, alter, create tables and indexes. But when I list the privileges for my Oracle user it does not show any CREATE TABLE or other such privileges. How am I able to do ...