Allowing users to access only the data they are authorized to access.

learn more… | top users | synonyms

0
votes
0answers
7 views

SSAS firewall / restricted direct database use

We want to open ports 2382 / 2384 for users in AD group A (they are supposed to read SSAS data via a sharepoint frontend only). That can be easily done with the windows server firewall, I guess. ...
0
votes
1answer
34 views

Login failed for user - Error: 18456, Severity: 14, State: 38 [duplicate]

I am trying to run and ADODB command in MS Access 2012 to exec a stored proc in our SQL server 2008R2 database, but I keep getting error 38 and SQL profiler shows the following: Error: 18456, ...
0
votes
1answer
16 views

SQL Server Service's Log On As account

I just inherited a set of new servers and whoever set them up left the "Log On As" account as the default "NT Service\MSSQLSERVER". I'd like to change that over to an Active Directory service name. I ...
0
votes
0answers
15 views

Sql Server 2014 AppRole not able to create temptable in tempdb

we have created Application Roles in sql server 2014 and grant the "Execute" permission on the tables and stored procedures. when i execute sp_setAppRole and then the stroredprocedure. the simple ...
1
vote
2answers
26 views

MySQL 5.7 - Where is the mysql_secret file on Windows 7?

I've just installed a copy of MySQL 5.7 for testing, and I love the fact that it now only creates a single root account, and puts the password into a file called .mysql_secret. There's just one ...
2
votes
1answer
48 views

Listing expired SQL logins

For audit purposes, we need to list all SQL logins with their creation and expiration dates. Is there a way to script this for all of my SQL Servers, rather than performing the task manually through ...
1
vote
0answers
36 views

How I can create user defined roles

I have a database in mongoDB 2.6.4 in which I want to restrict the users as per their level. I want to give read privileges to some users and insert/update privileges to some other users on a ...
2
votes
1answer
19 views

Can I grant multiple remote LocalService accounts access to a SQL Server database?

I am designing a multi-environment Windows-based software product that will extensively employ Windows services running as LocalService to perform data access operations. All of the data access ...
3
votes
0answers
48 views

Are there any outstanding critical security issues for Sql Server 2000?

Are there any outstanding (unpatched) security issues for Sql Server 2000? This isn't really for me: I moved on from Sql Server 2000 long ago. However, when answering questions here and (more likely) ...
0
votes
0answers
22 views

MySQL Socket connections and SSL

I'm currently running over some final tweaks and security measures for my MySQL server deployments. Mainly I'm running Google's Golang and connect to the MySQL database through a Socket connection. ...
-1
votes
2answers
55 views

Need help finding inactive users in my database

I am trying to figure out how to get this figured out. Problem: Users of inactive customers are receiving scheduled maintenance notifications Indicators: Organizations have a custom binary field ...
3
votes
1answer
132 views

How do I identify the program that called a stored procedure?

As part of an application database design spec, we've been asked to block execution of a set of stored procedures if they have been fired directly from SSMS / osql / sqlcmd and so on; that is, they ...
0
votes
1answer
24 views

Can we protect data form Database Administrator by encrypting the data?

How can we protect data on my database which is MySQL form database administrator stealing it? Will encrypting it prevent it from being stolen? If yes, how as he already has access to the database ...
1
vote
1answer
78 views

Is someone trying to hack into my SQL Server Database?

I was asked by a friend, who isn't technical at all, to help her with her application. I thought I would just being doing a little C# development and some SQL queries. Turns out it has been a lot ...
1
vote
2answers
87 views

Security or performance risks using SQL CLR [closed]

Are there any particular security or performance risks in using the CLR in SQL Server ?
2
votes
1answer
26 views

Is it safe to use set-returning sql functions instead of security-barrier views?

Since 9.2, it's been possible to use the security_barrier attribute to guard against maliciously-chosen functions and operators accessing data 'hidden' behind filters in views (full info in the ...
0
votes
1answer
18 views

Restricting the # of Rows a User can return in a single query

A concern has come up recently about employees who have read access to our internal databases being able to download large amounts of data for nefarious purposes. My question is whether it is ...
3
votes
2answers
68 views

Is there a way to grant SELECT for every database (including new ones) at a server level?

I have a unique (well, I think it is unique) situation where databases (yes, entire databases) can be created more or less dynamically. Ignoring the obvious issue with that, I need to be able to ...
2
votes
1answer
116 views

SA Account has not been disabled

There has been a security audit for many of our sql servers and per script there are many findings. One of them says "SA Account has not been disabled" I know it can be disabled, but can it be ...
0
votes
2answers
71 views

SQL server permissions during installation

I'm trying to find out when a SQL server installation grants permissions on the OS. I know that the following permissions are giving during setup msdn article about permissions. However what I don't ...
8
votes
2answers
206 views

SQL Server : how to create user with access only from specific HOSTNAME or IP addres

I have one stupid app which I rely on, which has hardcoded connection string inside. To increase security of my SQL Server I'd love to make SQL users same as one hardcoded inside app, but I want to ...
0
votes
0answers
12 views

SSRS data source - specify machine account credentials

When I create websites in IIS that connect to a SQL Server database I can set the website to run as the machine account and give permissions to that machine account within SQL Server, which allows me ...
3
votes
1answer
69 views

How can I create notification on user's connecting to database?

I have users that have access to several databases. I used to have an alert and notification sent to me when a specific user connects to a specific database, but I accidentally clobbered it. Now I ...
3
votes
1answer
64 views

Discrepancy between system catalog view and sp_change_users_login?

I want to check for orphaned users on a database. To that end, I use the following query on my SQL Server 2005 instance to get all users and their accompanying logins for a specific database (say ...
2
votes
2answers
46 views

Changing SQL Server service account passwords enterprise-wide

In the event of a DBA leaving an organization, what options can the surviving team members pursue to change passwords for service accounts portfolio-wide? While using Configuration Manager appears to ...
0
votes
1answer
13 views

How to maintain database ownership restoring across domains?

I am working with a vendor who is developing a SQL Server database outside of our domain. Occasionally, they need to deploy a new copy of that database into our domain by backing up their database, ...
1
vote
1answer
62 views

How to restrict access to current user record and its rights in postgres

Postgres 9 database contains additional information about postgres users: create table public.user ( user char(10) primary key, -- CURRENT_USER in postgres name char(30) ); and user roles; ...
0
votes
3answers
58 views

Login failed for user even though it has read access

I have a SharePoint server which is using service account "spsharepoint". For some reason this user has started giving 'Login failed for user DOMAIN\spsharepoint' when I checked SQL Server logs. ...
1
vote
2answers
337 views

SQL Server Grant execute on all stored procedures without ddl permissions

I have some users in my database. They are member of db_datareader. They now also need to have execute permissions on stored procedures. I was just wondering what would happen if one of the stored ...
1
vote
1answer
55 views

encrypt data without performance issues?

I've googled around for the last 45 minutes or so and it seems like that I can't figure out what kind of options I got when it comes up to encryption in databases. Problem: I got a SaaS product and ...
0
votes
1answer
61 views

How vulnerable is SQL Server 2000?

I know there are still some SQL Server 2000 installs that exist out there. With Microsoft no longer supporting these versions, how can I check to see what vulnerabilities remain unpatched? This ...
0
votes
1answer
247 views

unable to bring database online from recovery pending

I am trying to bring a SQL Server database online and accessible that is in Recovery Pending state. The SQL Server service uses an Active directory account that is a domain administrator and a ...
0
votes
1answer
346 views

Linked Server Security under SQL Agent Job Context

I have two SQL servers V1 and V2. Both 2012. V1 has linked server connection to V2. There are two Windows accounts: one running SQL server, the other running the Agent service. The two accounts are ...
1
vote
1answer
44 views

Sql Server Agent is part of the sysadmin role even tough Sql Server says it's not

I created a Windows account with no extra rights other than domain user and set it as the SQL Server Agent service account with the SQL Server Configuration Manager. The BoL/MSDN says that this user ...
2
votes
1answer
48 views

SQl Sever Backup Exclude Users

I have a database on SQL Server 2012 that I need to backup and send to someone on a different network / domain. Is there a way to create a full backup file that will not include the users / security ...
0
votes
1answer
23 views

Effects of monolothic databases on performance and security?

Please note: although I'm specifically calling out MySQL here, I would also appreciate/entertain generic answers that apply to all/most relational systems. As a developer I don't see the design ...
1
vote
1answer
47 views

What permissions do I need to grant on service accounts on SQL root path when relocating?

During a Win2012 with SQL Server 2012 two-node cluster installation, I accidentally set the system root to be the mount point volume hosting folders for the various attached LUNs for the system and ...
0
votes
3answers
69 views

How to enable windows authentication on server that is not part of domain

We have an SQL server instance running on a standalone server (not part of the organizations domain network). Is there any way that we can use windows authentication to logon to sql server without ...
0
votes
0answers
28 views

SQL database rejoined to new SQL Server 2008 R2. Users are still unable to connect

The below error appears when our users attempt to connect to our database following a complete rebuild of our SQL server and restore of the MDL file: We have created user accounts on the new SQL ...
0
votes
2answers
85 views

Is it possible to convert existing users from SQL Server authentication to Windows (AD) authentication? (SQL Server 2008 R2)

We have just undergone a bare-metal restore of an SBS 2003 server running our SQL database and are in the final stages of configuration before going live again. Previously, we had 20 users accessing ...
1
vote
2answers
483 views

Issues with module signing and SSIS catalog internal procedures

I'm trying to set up a stored procedure to execute an SSIS package. I want to allow a user to execute only this stored procedure, so I need it to run as a different user. I found this article which ...
1
vote
1answer
100 views

How does SQL Server handle logins when the user is a part of multiple groups with various privileges?

I'm trying to wrap my head around how SQL Server decides to grant certain rights based on a users login privileges. If a user is part of a group "READ ONLY" which has access to DB1, but they are also ...
2
votes
1answer
71 views

MySQL Security - Storing lots of sensitive phone numbers securely?

Imagine a table in a database in MySQL that holds millions of telephone and cellphone numbers that relate to itemized billing for VoIP and Cellular carriers. All of these numbers are in VARCHAR ...
1
vote
1answer
57 views

Difference in architecture between SQL Server 2005 and SQL Server 2012 [closed]

I've been asked to identify the architecture differences between Microsoft SQL Server 2005 and 2012. I've been pointed out to http://technet.microsoft.com/en-us/library/bb545450.aspx but I haven't ...
1
vote
0answers
56 views

Auditing AS 400 DB2 library user access

As part of the testing to check for authorized users having access to applications and libraries on AS 400 systems, I need help to figure out a list of users having access to applications hosted on ...
0
votes
1answer
54 views

How can I give a group of developers the ability to view the query plan, without the ability to run a trace or to view the server state?

I have a group of 5 developers that need to be able to view the plans of queries they have written for a database, and that database only. I refuse to make them a member of sysadmin. I do not want ...
0
votes
0answers
132 views

Mongo replica-set authentication error opening file: keyfile Permission denied

The mongo service fails to load when using a keyfile. I've been getting a "Permission denied" error. All permissions are granted to every user, and I've tried moving the file around to different ...
0
votes
0answers
23 views

What are the best practises for locking down an SQL Server Instance Data/Log directories?

We have our own on SQL Server instance on a client's system. Other vendors also have instances on there. In order to prevent access to our data we are limiting the user access to our data using ...
3
votes
2answers
60 views

What permissions should the account for MS SQL Server Agent have?

I'm in a situation where I need to change the account for the Server Agent of SQL Server from NETWORK SERVICE to an AD domain account. All I'm doing is making the domain account sysadmin in the ...
7
votes
1answer
147 views

SQL Server trace based on client TCP port

I have a Windows terminal server with many different users logging in via RDP to run an application. The application makes one or more connections per user to a SQL Server 2008 R2 instance. All users ...