Allowing users to access only the data they are authorized to access.
2
votes
0answers
28 views
Server permissions of an activation stored procedure of a Server Broker queue
I have a stored procedure that queries the sys.dm_exec_requests view. In the stored procedure the view only returns one row, while the stored procedure needs to see all of them. The MSDN article on ...
-1
votes
1answer
27 views
Why does fn_my_permissions return empty rowset? [closed]
If I run this query:
select * From fn_my_permissions(NULL, 'SERVER')
This is what I'm getting:
entity_name subentity_name permission_name
------------- --------------- ...
2
votes
1answer
21 views
Use users / logins from another database
Is it possible to use logins/users from one database(F) in another(S) one? I know I can copy it but, when I add user to (F) database I have to copy again them all (or add the same user to (S) ...
5
votes
1answer
66 views
SA permissions issues with many nested objects
I have a broker application that's relatively complicated.
Today, after I made some changes, I started getting the error:
The server principal 'sa' is not able to access the database 'XYZ' under ...
2
votes
0answers
40 views
The Login is from an untrusted domain - domain setup with computer level login
I have a Sql Server 2008 R2 database I'm attempting to connect to using ADO.NET using integrated security in the connection string.
The database resides on a 64 bit Windows Server 2003 machine. The ...
2
votes
1answer
61 views
If the users need INSERT/UPDATE/DELETE permissions, is Windows auth still more secure than SQL Server auth?
Some background first:
The problem described below wouldn't exist at all if the database in question would have been built with a DBA's mindset:
Data access only through views and stored procs --> ...
1
vote
1answer
35 views
Restrict access for Windows administrator in PostgreSQL
Is there a way to protect PostgreSQL from user with Windows administrator rights?
Like this question but for Postgres.
1
vote
2answers
40 views
Auto Disable a SQL Server User
I have a SQL Authentication User: JOHNDOE
I would like this account to auto-expire or auto-disable after X days or at a certain date/time. Any suggestions or best practices to do this?
1
vote
2answers
87 views
Working Linked Server Query fails in sp_send_dbmail
Take the following example:
EXEC msdb.dbo.sp_send_dbmail
@recipients = 'me@whatever.co.uk' ,
@query = 'SELECT TOP 10 * FROM LINKEDSERVERA.DATABASE.dbo.TABLE' ,
@attach_query_result_as_file = N'True' ...
5
votes
3answers
109 views
How does “Be made using the login's current security context” pass the users password to remote server
Say you have a SQL Server with a "Linked Server" to another server - said "Linked Server" is set to use "Be made using the login's current security context" as its authentication model.
How does the ...
0
votes
2answers
34 views
Pull Subscription: process cannot read file due to OS error 5
I am trying to migrate a working pull subscription for transactional replication from one subscribing server to a new one. The subscribing server is at another site and is connected via a VPN tunnel. ...
0
votes
0answers
26 views
EXECUTE AS over Linked Servers
I have a front end that logs into the DB as "logInA", and only has permission to "schemaA" stored procs, which use EXECUTE AS "logInB", (I have also tried EXECUTE AS 'DBO'), to handle all the business ...
2
votes
2answers
69 views
Linked Server Risks
I'm implementing a new feature which requires data from databases on multiple servers. I just need to union data from all these servers and sort it. The two options that come to mind are:
Use linked ...
0
votes
1answer
60 views
BUILTIN\Administrators allowing access via linked server but not locally
We have two servers:
LYNDB01 & LYNDB02
On LYNDB01 we have a database called db_ExampleDatabase
We have created a Linked Server on LYNDB02 to LYNDB01 using no mappings and the "Be made using the ...
2
votes
1answer
36 views
Find application password expiration date
I changed password of my application on one sql server?
when I am using Login property command I am getting last login date.
I want to know when my application password is going to expired in SQL ...
0
votes
1answer
83 views
Granting privileges to dbms_crypto
I'm trying to grant proper privileges for using DBMS_CRYPTO.
Whenever I call it from package it gives me error:
PLS-00201: identifier 'DBMS_CRYPTO' must be declared
User already has privileges:
...
2
votes
1answer
50 views
Oracle Database: View schema without access to data
In Oracle Database 10g, I need to create a user with these permissions:
user can access schema to be able to read table names and columns
user can not select (get) any data from any table
Is this ...
-3
votes
1answer
410 views
How database administrators can see my requests to MSSQL server?
I'm a MS SQL 2008 user. I have access to some tabes. I need to request few colums from table as I usually do. But I need to do it onse (for example) in 5 seconds and system administrators shouldn't ...
-1
votes
1answer
40 views
best database for a real estate system [closed]
Which is the best database suits for a real estate system.
Considering the storage space, security, crash recoveries, speed etc.
There will be around 1000 fields and trillions of rows!!!
1
vote
1answer
43 views
One call to `decryptbypassphrase` for decrypting all columns
If I use ENCRYPTBYPASSPHRASE to encrypt the full table then how can I decrypt full table easily by using DECRYPTBYPASSPHRASE?
Actually I have to use DECRYPTBYPASSPHRASE ('passphrase', column_name) ...
3
votes
2answers
48 views
disallow SET command in a postgresql server
Im planning to publish my postgresql server to a few untrusted clients.
I dont want them to modify any runtime setting, like work_mem or something risky to my server. In general I assume the ...
5
votes
1answer
85 views
How is SQL Server host identity ensured?
When I connect to some e-commerce website with my browser I use HTTPS that uses a certificate that (more or less) guarantees that example.com is indeed example.com.
Now I connect to a SQL Server ...
4
votes
2answers
177 views
Securely generate a UNIQUEIDENTIFIER in SQL Server
I intend to be using a UNIQUEIDENTIFIER as an access key that users can use to access certain data. The key will act as a password in that sense.
I need to generate multiple such identifiers as part ...
13
votes
6answers
521 views
Why should an application not use the sa account
My first question ever, please be gentle. I understand that the sa account enables complete control over a SQL Server and all the databases, users, permissions etc.
I have an absolute belief that ...
0
votes
1answer
124 views
Login Failed for Domain\ServerName$ when trying to create a new SQL Server Reporting Services Application in SharePoint 2013
Basic setup:
All of the following is installed on Domain\Servername:
SharePoint 2013 Standalone Install (Trial version)
Currently using an instance of SQL Server 2012 SP1 Express for basic
...
0
votes
1answer
16 views
Cannot create perlplu function
Running PostgreSQL 9.1.8 on Xubuntu 12.04, installed from the repos.
From the shell, I have executed:
createlang plperl db_name;
createlang plperlu db_name;
As the superuser running psql, I have ...
0
votes
2answers
131 views
Secure Linked Server - Non privledged user possible? Registry corruption?
Is it possible to use a non privledged Windows domain account to impersonate itself in a linked server?
And why would it be unable to read the registry for available network protocols?
Overview: ...
6
votes
2answers
109 views
Limit connection rights on SQL Server
I have an app to deploy in production that uses 'honor system' security. That is, all users connect to the DB using a SQL user/passwd credential and the app manages permissions itself. The latter part ...
0
votes
1answer
29 views
Giving permission for each table within a database
I want to give different permission for different tables within a single database for a user.For example a user has full permission to a table while for another table only read permission.How it can ...
1
vote
1answer
45 views
clusterdb stopped working for PostgreSQL database in Ubuntu 12.04 server
After a fresh PostgreSQL install (version 9.2) on my Ubuntu server 12.04, clusterdb utility stopped working. I used the same config files as I used with version 9.1.
Below is the actual command:
...
3
votes
3answers
122 views
Is it ever harmful to set a database owner in SQL Server?
There are a bunch of databases on one of our SQL servers that have no owner. Generally speaking, is it harmful to give them one? For example:
USE dbName;
GO
EXEC sp_changedbowner 'sa';
GO
I know ...
0
votes
2answers
54 views
Changing passphrase for EncryptByPassPhrase
I am using EncryptByPassPhrase to encrypting some columns.
If I want to change the passphrase in the future, how can I change it?
2
votes
0answers
38 views
What is the equivalent of a “Certificate of Destruction” when using a cloud-hosted database?
We have a Rails application hosted by Heroku and using an Heroku Postgres database. Some of the information we store is considered to be sensitive by our users, and we've been asked if we can provide ...
0
votes
2answers
51 views
Can I configure MySQL's typecasting to consider 0 != 'foo'?
This article points out the following security problem with MySQL:
USERS
id | email | password_reset_token
1 | one@example.com | QTlXww)uV!Hdg3U6aGwKV2FPvAqzVgPx
2 | two@example.com | ...
5
votes
2answers
366 views
RSExecRole missing
I have multiple servers and 4 of them have reporting services installed with the ReportServer & ReportServerTempDB databases.
A few days ago I was setting up security for a new login and I found ...
3
votes
1answer
36 views
Creative workaround for granting edit rights to individual jobs for a group?
We have two developers that say they can not function without full rights to a few jobs on our database server. They both want rights to the same jobs.
Given that it seems that MS doesn't seem to be ...
3
votes
1answer
82 views
Domain group hierarchical group membership and SQL Logins mapped to AD groups [closed]
SQL Version: Microsoft SQL Server 2005 - 9.00.4035.00 (X64)
Nov 24 2008 16:17:31
Copyright (c) 1988-2005 Microsoft Corporation
Standard Edition (64-bit) on Windows NT 6.1 (Build 7601: ...
1
vote
1answer
118 views
“The SELECT permission was denied” only for some of my tables
In my database there are about 100 tables on 2 tables I get the following error when accessing the database by a SP (all data access uses SP):
The SELECT permission was denied on the object 'XXX' ...
4
votes
1answer
422 views
The login already has an account under a different user name
When I execute this SQL:
USE ASPState
GO
IF NOT EXISTS(SELECT * FROM sys.sysusers WHERE NAME = 'R2Server\AAOUser')
CREATE USER [R2Server\AAOUser] FOR LOGIN [R2Server\AAOUser];
GO
I get the ...
3
votes
1answer
55 views
Analysis service database security at application level
I have got a SSAS Cube, we have written an windows application which would issue MDX queries to access the data from the cube and show it in the reports .
This windows application is a licensed ...
2
votes
1answer
64 views
What are the implications of changing the SQL Server Service Logon Account?
What are the implications of changing the SQL Server Service Logon Account?
My default instance currently uses Network Service.
I want to change this to a domain account.
Are there any implications?
4
votes
2answers
193 views
Stored Procedure as Create Table proxy?
With SQL Server it was my understanding, I thought, that you could elevate a users permissions with specific constraints.
For example, you need a user to create a specific table object in a specific ...
2
votes
2answers
585 views
How to set Password for sqlplus /as sysdba
I am new to Oracle. I would like to know how to set login password for sqlplus / as sysdba in oracle 11g.
I want to set the password for my next login, i dont want to login as sqlplus / as sysdba ...
6
votes
3answers
304 views
Restrict access for Windows administrator
As the SQL Server best practices says, "Windows Authentication mode is more secure than SQL Authentication". And now I want to know: is there a way to protect SQL Server from user with Windows ...
4
votes
2answers
313 views
Can we minimise the risk of using xp_cmdshell?
Using xp_cmdshell can be quite helpful and sometimes possibly the only answer to some scenarios. I've read some posts on the internet that enabling xp_cmdshell might jeopardize the security of the ...
3
votes
1answer
186 views
SQL Server 2008 - is “NT AUTHORITY\ANONYMOUS LOGON” login “mandatory”?
My spider senses are tingling when I found this "NT AUTHORITY\ANONYMOUS LOGON" account on a SQL Server logins. I tried to research the matter and I even have a book about SQL Server management. Also ...
3
votes
1answer
160 views
Different Results From sys.databases As Different Users
We have a SQL Agent job that is configured to run as user "dbo". This job gets a list of databases defined in sys.databases that match a naming scheme. The job then performs some dynamic SQL to ...
2
votes
0answers
98 views
TFS 2012 - Database Project - User with NO LOGIN map to Windows - best practices
I have a SQL Server Database Project (.NET 4.5) in TFS 2012. As a DBA, i'm looking for a mechanism whereby the developers can create 'CREATE USER' sql scripts and assign their permissions within the ...
4
votes
1answer
125 views
SSRS appears to be ignoring Permissions set using Report Manager
I have setup SSRS on SQL Server 2008 in native mode.
As an administrator I can login to report manager, upload reports and run them, and also use the Web Service URL to generate reports.
I have also ...
3
votes
1answer
85 views
Make sure MySQL is not accepting remote connections
I am currently doing development for a LAMP-based website. I do not know what configuration changes have been made to MySQL since it was installed on our server. The way that we use MySQL, there is no ...
