A set of permissions.

learn more… | top users | synonyms (2)

0
votes
0answers
28 views

Permissions required to add user to fixed server role

We want to take a group out of sysadmin but grant them a role so they can do the following: add, change, remove database access on prod servers for users, groups and service accounts. create and ...
0
votes
1answer
15 views

PostgreSQL, display role members

Is there a way to visualize which users are mebers of a role in PostgreSQL / pgAdminIII, like role: council_stuff members: Harry Ben Steve Melinda
2
votes
2answers
115 views

DENY access to EXEC for a role

I have a read-only database user that I do not want to be able to run the EXEC command. I ran the following: DENY EXECUTE to db_USERROLE_deny That completed successfully; however, when I sign in as ...
1
vote
1answer
48 views

Group permissions in postgreSQL not inheriting to table level

I am moving to a group role from a lot of individual users and have one table that needs to have permissions SELECT, INSERT only. Lets say I have: user1 user2 newgroup Both of the users are in ...
2
votes
2answers
35 views

How do I detect execute permission granted to a role (when no ON clause was used)

I just spent hours trying to figure out how an app had privilege to execute stored procedures. TIL from StackExchange: Turns out the ON clause is optional for GRANT, allowing a role to be granted ...
0
votes
1answer
103 views

List of role permissions including other roles - how can I find out the roles that belong to other roles?

I can see the permissions of a role in a database using the scripts in List all permissions for a given role? However, It does not show me when the role belongs to a another role. For ...
1
vote
7answers
16k views

Why does “GRANT SELECT … TO Role;” does not allow members of Role to SELECT?

Please consider the following scenario on a Oracle 11g Database. The user ADMIN performs the following: CREATE USER Alice IDENTIFIED BY pwdalice; GRANT CREATE SESSION TO Alice; CREATE ROLE Viewer ...
1
vote
1answer
119 views

Grant access to all objects (with a few exceptions) to a role

In SQL Server 2014, I want to create a role that will have access (select, delete, update, insert, execute) to all the tables, views, stored procedures, except a certain list of tables that contain ...
0
votes
1answer
18 views

How do I allow users to add members to a specific database role?

I want to GRANT permissions to a new database role so that defined users can add and remove members from that role WITHOUT granting ALTER ANY ROLE permissions. Here's how my query runs/dies: CREATE ...
1
vote
2answers
45 views

Postgresql: how to remove a GRANT on multiple tables?

I have a big database with 40 schemas and plenty of tables inside each one. Some tables have a GRANT SELECT ON TABLE schema1.table1 TO user1grp. I no longer need user1grp group role. If I delete ...
3
votes
1answer
132 views

How to grant connect and read/write permission to ALL databases?

I want a SQL Server login that can READ, WRITE and View definition on all databases. After doing: USE master; GRANT VIEW ANY Definition TO [a]; It looks like I have to GRANT CONNECT and read/write ...
27
votes
4answers
41k views

How do I assign an entire Active Directory group security access in SQL Server 2008?

I would like to use integrated security with my internal application which is all on a domain. Unfortunately, I've never been able to get this to work well. I would like to assign an entire Exchange ...
2
votes
1answer
73 views

Restore superuser role to postgres user

I am looking for clear step by step instructions to restore superuser role to postgres user that comes at install. I had to perform the below instructions (which didn't work thus far), because in ...
0
votes
0answers
35 views

How i Implement Role Based Access Control in Mongodb

Currently I'm working on an ERP project. I want to set the Roles & Permissions via a RESTful Api. I'm using Mongodb and Nodejs. How can i implement this? Roles & Permissions are as follows:- ...
0
votes
0answers
11 views

Restrict postgresql roles based on rows in upper level table

We have a postgresql database, and it is expanding to be used by more groups. The data from these groups will all live together in the same tables, but we need to restrict access to the data based on ...
1
vote
1answer
30 views

Login Schema Role User Setup

Environment: Windows Server 2012 SQL Server 2014 Standard Public website (Site-A) on Server Private website (Site-B) on Server Windows App running on workstations SQL Server 2014 Standard: 2 ...
5
votes
3answers
7k views

How to get all roles that a user is a member of (including inherited roles)?

Let's say I have two Postgresql database groups, "authors" and "editors", and two users, "maxwell" and "ernest". create role authors; create role editors; create user maxwell; create user ernest; ...
2
votes
1answer
77 views

How can I create a role to create,update,delete stored procedures and views

what permissions do I need to give in order to achieve the above task to get users the capacity to create,update,delete stored procedures and views to a database role.
0
votes
1answer
32 views

Get rows from last insert statement by specific user

I have many users in my web app (not the postgres user). Each of them capable of inserting item transactions on their own location. How to get only rows just inserted by user_a?
5
votes
1answer
244 views

Server roles in SQL Server 2016

There are 3 new server roles in SQL Server 2016: mediumrc largerc xlargerc Any idea what these are for? Google doesn't give any information about these.
0
votes
1answer
29 views

PostgreSQL: access right problems

I have a "production" user and database on which I want to give right access on all the users belonging to a production group. Unfortunately, I don't succeed, keeping the access denied error. Can ...
1
vote
1answer
73 views

Cannot add new Server Role SQL Server 2014

It seems that I have the same problem as Yasser in this post I cannot add a new Server Role "SQL Server 2008 R2" but I am running SQL Server 2014. Basically when I right click on Server ...
1
vote
1answer
29 views

Postgres Access Roles

I'm trying to get my head around postgres roles. I want to create a database and have the owner role have all privileges on the database. I then want another role which cannot create tables but able ...
4
votes
2answers
164 views

SQL Server - granting permissions to an entire schema vs. object?

I'm very green when it comes to the world of database permissions management in SQL Sever. Let's keep an example simple. Say account 'admin' is the owner of schemas A, B, and C. There another ...
0
votes
0answers
17 views

PostgreSQL: Recommended way of user creation/management for development, test and production. I use Ruby on Rails

I am trying to think of the best (aka recommended or common professional practice) way to create users/roles in PostgreSQL database for development, test and production environments. I have to say ...
0
votes
0answers
33 views

Dealing with multiple user types, modules and requirements

I have the following database schema. Basically, it all comes down to this: - users can have multiple user types - some user types come with specific requirements for a complete profile - there are ...
0
votes
1answer
230 views

PostgreSQL Role Configuration

I am using PostgreSQL 9.3. I am working with a friend of mine on a project on which both of us would need access to the same database and all of the permissions on every table. So I created a Role ...
1
vote
1answer
16 views

No priviligies to create table in custom database

I'm using locally installed express edition of SQL server. CURRENT_USER = dbo, and I used win authentication. The database was successfully created this way: CREATE DATABASE [online_banking] ON ...
0
votes
0answers
25 views

Authorization required to use “listCollections” in MongoDB

I am using the Nagios-MongoDB plugin to monitor my new MongoDB setup. I am using a user with the clusterAdmin role, but it looks like it is not enough as I am getting this error: General MongoDB ...
0
votes
0answers
10 views

Storing default user type roles & module roles

I have multiple user types and each user type would need to be assigned different roles. However, I also build the application with Modules that can be selected by users when they subscribe. Each of ...
3
votes
0answers
80 views

Roles and policies in Postgresql 9.5 row-level security

Following the the info in posts like these i would like to use the role system and policies, i.e. each user in my system would have a db role. I want to model the following properties but i can't come ...
0
votes
1answer
188 views

Mongo error : Could not lock auth data update lock. on root user

i have a mongodb on 2.6.9. my connected user is root: mongo --username myadmin --password thepassword --port 27018 --host 127.0.0.1 admin MongoDB shell version: 2.6.9 connecting to: ...
6
votes
2answers
157 views

Scripting an application role with a hashed password

I need to script an application role with a hashed password, so I can copy it from one database to another. Consider the following example code, which uses an Application Role to provide elevated ...
-1
votes
2answers
36 views

Windows Authentication Server Role Verification

I am using SQL Server 2008 R2.I am connected with Windows Authentication, I wanted to verify/check whether the Login had a sysadmin Server Role using code. Is there any script to verify the same? ...
4
votes
2answers
189 views

postgres: how can I allow index creation but no table mutations or table drops by the same user?

I am setting up a postgres server with what is going to be a (mostly) read-only workload. I would like to allow myself and colleagues to create/drop indices as we see fit, without allowing ...
5
votes
3answers
3k views

Do roles have an owner in oracle?

Suppose that I have logged in to oracle database using user X, then user X creates some roles using create role command. I want to know that is user X the owner of the roles? Can I select all roles ...
2
votes
1answer
58 views

Microsoft TDE Permissions For Changing Keys

I am setting up roles as a layer of protection inside of MSSQL. One of the roles will only have the ability to change database encryption keys for TDE on the database server. The server will be using ...
2
votes
1answer
119 views

PostgreSQL - Who or what is the “PUBLIC” role?

I was looking at information_schema.role_table_grants when I saw public in grantee column, then I've checked at information_schema.enabled_roles but this role_name does not exist. => Who or what is ...
3
votes
3answers
104 views

Oracle data dictionary, tell built-in roles apart from custom roles

In Oracle, if you describe the DBA_ROLES view, you only get three columns: SQL> describe dba_roles; Name Null Type ------------------------------------------------ ROLE ...
12
votes
1answer
9k views

postgresql: how do I dump and restore roles for a cluster?

Where are roles stored in a cluster, and how do I dump them? I did a pg_dump of a db and then loaded it into a different cluster, but I get a lot of these errors: psql:mydump.sql:3621: ERROR: role ...
2
votes
2answers
313 views

Why can't user with SQLAgentOperatorRole delete his own SQL jobs

I created a login and a user. I assigned the user as the db owner of the database "test". Then I granted him the role SQLAgentOperatorRole so that he can delete/create/modify the jobs belonging to the ...
2
votes
1answer
39 views

What should be the command for following role creation requirement?

I need to create a role where the assigned user can access only the 'AdventureWorksDB" where he will have execute permission to all tables,views and stored procedures in the database. I wrote the ...
6
votes
1answer
58 views

I want to add a user/login to role in another database without switching databases

I have a role / login in a 'new' database mynewdb with a role "emailsender". I have scripted a profile for sp_send_dbmail and am now trying to script adding the the login to the DatabaseMailUserRole ...
1
vote
2answers
153 views

Role to view SQL server job log

We have a monitoring tool that can check if Microsoft SQL Server jobs have run successfully. What I want to do is create a user that has as little permission as possible but it must be able to watch ...
1
vote
1answer
99 views

With LocalAdmin become sysadmin SQL Server

I am a local Admin on my machine. Same old thing, my account wasnt added when SQL Server was installed, and I don't want to have to reinstall SQL Server. I went through this blog and it worked until ...
1
vote
2answers
525 views

Restoring the superuser account on the postgres server

I have a complete curious situation with a postgres dbms. I have installed the database and due to a misconfiguration of my installation scripts I made the superuser role to be a regular user. Now I ...
4
votes
1answer
2k views

How to view the query of another session in pg_stat_activity without being super user?

I have a Postgresql 9.2 database. Two users are created on this database. When I perform the following query as superuser, I can see everything. select * from pg_stat_activity However, is it ...
1
vote
1answer
282 views

Query for hierarchical RBAC scenario

I have a SQLite database with a hierarchical role-based access control (RBAC) data model. In this model, users are granted permissions to perform certain actions against various resources either ...
1
vote
1answer
100 views

Database Role seemingly lost permission

I have a windows application that accesses a SQLServer database. Sometime within the last week or so it stopped working on other peoples machines with an exception thrown indicating they did not have ...