Allowing users to access only the data they are authorized to access.

learn more… | top users | synonyms

2
votes
0answers
11 views

Snooping-safe Vote tables

I have a table with both user_id and vote. They are stored together so each user can only give one vote. However it's also problematic because admins can simply read who voted what. Is there a way to ...
-3
votes
1answer
15 views

Implication of owned schemas for a user having db_owner privilege

Importance of "Schema owned by the user"? The user is db_owner for the db. Is it required to select owned schemas?, or else it will own all the schemas as it is a db_owner? Please provide me a detail ...
0
votes
2answers
41 views

Cannot Decrypt the encrypted columns from the database backup on local machine

I've a SQL server 2014 running on one of our server. We're in the process of implementing security steps for our databases. I've encrypted a column in one of the table in the database on the server. ...
3
votes
2answers
24 views

How do I connect to mysql without having to type an empty password?

I just installed MySQL, and by default the root user has no password. If I connect with this command: mysql --port=3307 --host=127.0.0.1 -uroot -p It asks me to enter a password, I just hit return, ...
1
vote
1answer
50 views

Trying to restore users/passwords for a MySQL server

I had a system failure, but I managed to save the /var/lib/mysql library on my linux system. I have since rebuilt a new Linux (Ubuntu) system (LAMP). I copied the old /var/lib/mysql/mysql folder to ...
1
vote
2answers
30 views

Role to view SQL server job log

We have a monitoring tool that can check if Microsoft SQL Server jobs have run successfully. What I want to do is create a user that has as little permission as possible but it must be able to watch ...
0
votes
0answers
16 views

Is it secure to disclose the key value of tables

I am currently working on a web application. And the application would link user to data with primary key of some table so user can find the key value (int). Is the application still safe? Or should ...
1
vote
1answer
46 views

How to change default security on SQL Server database so that everyone can use it?

I have a database hosted on my machine that I want co-workers to be able to access and edit through a program I created. My current connection string is: ...
0
votes
0answers
17 views

Why is Activity Monitor Login blank, and what is that process doing?

I observe regularly occurring User processes (User Process = 1) connecting from load-balanced application servers to a database server (see Environment Details below) on the same internal network, ...
2
votes
1answer
40 views

Is it secure to set default value for password field? [closed]

I'm looking at an application where admins can "invite" users by email and invited users. Invited users then are sent a unique URL and are inserted into a MySQL database with status pending and an ...
3
votes
1answer
26 views

Partially contained databases and Windows Logins - best practices?

In versions of SQL Server prior to 2012, in order for anyone to log in to a database using Windows credentials, you first had to create a server-level login, them map that login to a user for each ...
0
votes
1answer
61 views

Error using view to limit data access between databases in SQL Server [duplicate]

I am trying to limit user access to data through a view. I have a database full of replicated data that I do not want the users to be able to access, I also have a reporting database in which I will ...
0
votes
0answers
27 views

Accessing database from a number of servers

I have a few servers that access a database, and I was wondering what is the best way to handle access to the database. Is it secure that each server will be able to access the database, or should I ...
0
votes
1answer
47 views

How many database users/admins should be created for a website?

I have created a CMS website that only had one database connection for both the admin area and the user area and it only had one user("root") with no password, and now I want to upload it, but I am ...
2
votes
2answers
59 views

How to safeguard a symmetric key in SQL Server

I've got a database in which I need to store the encrypted values for a column. I use the SQL Server encryption format for encryption. The format is as follows: CREATE MASTER KEY ENCRYPTION BY ...
0
votes
0answers
24 views

Cannot access MS Access DB with non-Admin users

I have created several users in a MS Access database using "User-Level Security Wizard" in Access 2013. The problem: I am only able to log in with users belonging to Admins group. Other users ...
1
vote
1answer
84 views

How to set user-level security in 2007+ MS Access?

I've read this MS info which should cover my problem. There are quite clear steps: Open the .mdb or .mde file that you want to help protect. On the Database Tools tab, in the Administer ...
2
votes
3answers
66 views

Query to find users with passwords same as their username in Oracle

I'm writing an Oracle audit script where I need to find users in a database who have set their passwords to be the same as their username, e.g. dbaadmin/dbaadmin. The query would need to get the list ...
0
votes
1answer
57 views

How to GRANT/REVOKE user permissions for user on Firebird 1.5?

I need to create a user in firebird 1.5 and give him permissions to access only some specific tables. I have managed to create the user, but apparently GRANT/REVOKE operations only work on version 2.1 ...
0
votes
2answers
27 views

is it a good practice to ip block dev/test app servers from production database server? [closed]

I would like to do this as somewhat of a last line of defense as we will be replicating production to test regularly. Is this good practice?
1
vote
1answer
51 views

Open port 1433 to use SSMS securely

I have a SQL Server placed in DMZ and I want to give access to internal users (and VPN clients) to use SSMS to remotely connect to it via port 1433 so server will accept the connection only form ...
1
vote
0answers
57 views

SQL Server 2012 Security Best Practices [closed]

I'm looking to compile a good list of SQL Server 2012 security best practices. Do you know of any good articles or lists?
0
votes
2answers
29 views

How to access to DB Instance from another DB Instance with Windows Authentication

i have two database servers DB_INSTANCE1 DB_INSTANCE2 is it possible to access from DB_INSTANCE1\DB1 SQL script to DB_INSTANCE2\DB2 tables without using SQL Logins ? (not every database servers are ...
0
votes
0answers
41 views

ASP.NET Session Database - what user to create?

I am migrating a .Net 3.5 website with SQL Server 2005 Enterprise databases to SQL Server 2012 Enterprise (website still .Net 3.5). It uses ASP.NET session state database of type "t" Temporary. ...
0
votes
1answer
49 views

SA login history in sql

Is there any PowerShell script to get the SA log in history? I need to do an audit on SA login.
10
votes
1answer
233 views

Does sys.sql_logins.is_policy_checked mean that the policy has been checked?

When I look in sys.sql_logins, I see a column called is_policy_checked. Can I trust that my password policy has been checked for all of the logins where this column is 1?
4
votes
1answer
92 views

Auditing database administrator actions with SQL Server 2014 Standard

We have a requirement to audit database administrator access to customer databases - at a minimum, knowing which customer database they were accessing (and ideally why). Without upgrading to SQL ...
1
vote
2answers
30 views

removing sql logins from one server, after migrating to another server, but all the databases were not migra

Here are the details of the production environment: I have 2 serevrs, A1 and A2. I have completely transfered 100 logins from server A1 to A2. Server A1 contains 5 DATABASES. But I moved only 2 ...
1
vote
1answer
37 views

MySQL Brute Force Defense

I was wondering what defense MySQL server uses to protect against brute force attacks on the user credentials? I hope this isn't too simple of a question! I have tried to Google it, but can't seem to ...
1
vote
1answer
35 views

Mysql's internal mysql database in replication

I searched around but the word game seems to delude any valid result and could not find anything relevant. Mysql (the RDBMS) has an internal database named mysql, this database has information about ...
1
vote
0answers
22 views

PostgreSQL security threats in external modules or PL languages

In reading the answer to question I came across a paragraph that indicated that some PostgreSQL PL languages and/or contrib modules can be used to compromise the security of the system. Is this only ...
0
votes
1answer
68 views

Passing passwords more securely to mysql utilities on the command line

This question is related to another question I subsequently asked here: Using the output from mysqldiff.exe to transform database2 to match database1. I have been trying to use mysqldiff.exe, part of ...
7
votes
3answers
534 views

Verifying password policy on existing users

I've recently come into an environment where a lot of databases logins do not have the enforce_password_policy flag enabled. An upcoming audit is necessitating the verification of these logins' ...
1
vote
0answers
62 views

Can we configure Certificate-based Authentication to connect(logon) sql client?

Can we configure Certificate-based Authentication to connect(logon) sql client? or any other method to connect sql client using mutual authentication(sql server and sql client)?
0
votes
1answer
44 views

Is the Advanced Security Pack required for windows authenticaion?

Can anyone tell me if the Oracle Advanced Security Pack is required for single sign in under Windows? I've been told we are not licensed for the "Oracle Advanced Security Pack" and need to remove it, ...
0
votes
1answer
21 views

How do I determine if membership in a DB fixed role is by direct user memership or through membership in a custom DB role?

I'm cataloging memberships of DB users in the various fixed DB roles so that I can create custom roles by business function and grant permissions through these custom roles only. When using SSMS to ...
0
votes
0answers
91 views

The Local Security Authority cannot be contacted

I am not very expert with SQL Server but I have to use to for one of my application development. Issue is that when I open the PC in morning to start my work, my application couldn’t make connection ...
0
votes
0answers
142 views

Database Role Membership: db_executor vs db_datareader and db_datawriter in SQL Server 2008R2?

I have a couple of users who have only public and db_executor memberships in their Server Login object, User Mapping properties in the one database (let's call it A), now that our front end ...
2
votes
0answers
30 views

Security implications of running SSRS and an OLTP database on the same server

I am in the process of building a new environment for my company's Customer Relationship Management (CRM) system. This system is a commercially available product which uses SQL Server as its back end ...
1
vote
1answer
137 views

Creating a database under a different owner

I'm trying to set up a role in Postgres which can a) Create a new Role b) Create a new Database c) Make that new Role the owner of the database d) Have no other rights (as far as is possible!) I have ...
0
votes
0answers
11 views

Azure Security for SQL Server Data

We are considering moving some of our database services to Azure but due to the kind of agreements we have with our customers having strict control over who can access the data is required. Based ...
0
votes
0answers
73 views

Add user level permissions to MS Access by using a MySQL backend

I have a large Ms Access 2013 .accdb application which runs a lot of VBA code, with almost 60 users. I developed a user level permissions mechanism using vba but now plan to migrate the back-end to ...
-3
votes
1answer
42 views

Cannot open database “RidaDatabase” requested by the login. The login failed. Login failed for user 'PLESK01\IWAM_plesk(default)' [closed]

I have following message Cannot open database "RidaDatabase" requested by the login. The login failed. Login failed for user 'PLESK01\IWAM_plesk(default)'. Kindly assist in resolving this ...
0
votes
0answers
33 views

Please help: kerberos authentication setup on postgresql

Requirement: Backend working with RHEL and postgresql and front-end working with windows,.net. please consider how the authentication method must be done. our main idea will be to have the ...
0
votes
1answer
34 views

Regarding table access

How to revoke access for particular table from an user who have 'select any table' privilege? I want to block access to system tables that have password details such as user$ etc.. DB : Oracle ...
0
votes
0answers
58 views

Security for SSIS packages in SQL Server - use a domain account?

I have an SSIS package that I want to deploy to SQL Server A. This package needs to access tables on SQL Server A, and another SQL Server, B. What is the best way to set this up? Should I create a ...
0
votes
1answer
197 views

Allow access to enter data through forms, but not full database access

Using Access 2013 or Sharepoint 2013 is it possible to give someone access to data entry forms that work with a back end database whether Access database or Sharepoint SQL. But from everything I've ...
0
votes
1answer
76 views

How comes that login with no rights cam give himself db_creator?

I just created a new login using the GUI, which generates this script: USE [master] GO CREATE LOGIN [tester] WITH PASSWORD=N'tester', DEFAULT_DATABASE=[master], CHECK_EXPIRATION=OFF, CHECK_POLICY=OFF ...
0
votes
0answers
25 views

Procedure Security Layer

I want discuss an idea with you and get your opinions what you think about it. From database (SQL Server 2008 R2) administration view and general security, its good practice to create DB roles and set ...
1
vote
0answers
68 views

When does SQL Server follow the Minimum Password Age policy?

According to this SQL Server 2008 whitepaper, SQL Server should only pay attention to the Minimum Password Age policy when the Check_Expiration (Enforce Password Expiration) option is turned on. Page ...