Allowing users to access only the data they are authorized to access.

learn more… | top users | synonyms

0
votes
0answers
6 views

Revoke grant option from table owner

I have a role engineer1 | No inheritance, Cannot login | member of {priv_app}. The priv_app user ownes the tables in the schema. Users are members of engineer1 by default which only grants them select ...
0
votes
0answers
21 views

mysql pirate users logged in, what should I do

I'm using Mysql Server 5.1.73 and when I do a show processlists I can see some connections which shouldn't be there. In theory only the web app should be connected to this database. The connection ...
1
vote
0answers
22 views

How unsafe is to use ctrl+c or ctrl+d in mysql prompt?

How unsafe is to use ctrl + c when in mysql prompt whether to interrupt a hanging statement or ctrl + d to exit? When I do ctr + d for exit mysqly can see a ¿special character? typed besides Bye ...
0
votes
2answers
19 views

SharePoint Database Creation Failure

I wonder if this question will need to be moved to the SharePoint SE site, but I believe this could be a simple a SQL Server security fix. A little back story: Back in April we upgraded our ...
0
votes
2answers
31 views

Are there any Database functions which allow access to other network services in PostgreSQL

I have set up a new postgres installation and have to meet the security requirements from my company. There is one requirement were i'm not quite sure: Database functions which allow access to ...
1
vote
1answer
22 views

Postgres permission for EXPLAIN

I would like to give user a permission to perform EXPLAIN but not to execute the SELECT itself. Is this doable in PostgreSQL?
-3
votes
0answers
17 views

MySQL Password Lost [duplicate]

I have set a 50 character password for my database in MySQL. I stored the password in a file which is lost. Now I have forgotten the password. How do I recover the password? Is it possible? If yes, ...
1
vote
1answer
36 views

DELAYED User at MySQL

mysql> show processlist; | Id | User | Host | db | Command | Time | State | Info || 27098 | DELAYED | localhost | ...
0
votes
1answer
78 views

Dynamic length obfuscation method in T-SQL

I would like to obfuscate (scramble) sensitive data from a SQL Server database, but in the way which will provide: irreversibility (the plaintext can't be derived from the obfuscated data), ...
3
votes
1answer
39 views

How to migrate windows login in from one sql server to another sql server on another domain

We have a SQL server that is located in domain 1(DMN1). We are migrating databases in domain 1 to our new SQL Server in domain 2(DMN2).Corporate states that there will be no trust established between ...
1
vote
1answer
34 views

Securely manage and dynamically create multiple databases

Background I have inherited a system that has several hundred databases. The primary "Clients" Database represents all clients with several tables like: WebUsers = username | password | server_id ...
0
votes
2answers
46 views

Grant permissions to a user to grant select to specific tables in several schemas in Oracle

I administer a small datawarehouse in Oracle. My user dwhmanager was given the SELECT ANY TABLE privilege: GRANT SELECT ANY TABLE TO dwhmanager WITH ADMIN OPTION; The idea was to have the ability to ...
3
votes
1answer
61 views

How keep overview about database permissions?

As DB-Administrator I need to keep overview about my servers and databases in general - and from a security context about logins, users, db-roles and permissions in particular. It is possible to ...
0
votes
1answer
24 views

secure specific tables in Data Warehouse

I'm newbie in this domain, I have a project that aim to create java application (Desktop Application) to manage roles based on users profile in a data warehouse. The thing that I'm not able to ...
3
votes
1answer
82 views

Decrypting Previously Encrypted Data Returns NULL

I'm having trouble decrypting data that has previously been encrypted and stored in a table. After opening my symmetric key and encrypting the data using EncyptByKey(), I get NULL values when ...
3
votes
1answer
21 views

System Database Migration and Security - Log Shipping or DB Mirroring

I've setup log shipping between two servers (they used to be mirrored). What is the simplest or most efficient way to mirror the system databases between the primary and secondary? Is it just a ...
1
vote
0answers
15 views

How do I hide the “read …save as” notification for an accdr file

When I make the accdb file to an accdr file and open it with Access 2010, the database is created with Access 2010 and OpenGateSoftware’s UI builder. I get a notification bar at the top saying: Read ...
1
vote
1answer
33 views

How to secure SQL Server being accessed from the DMZ

We have an internal stand alone SQL Server 2014 default instance that needs to be accessed from an application server residing in a DMZ. The application team wants to open the default 1433 port so ...
2
votes
0answers
38 views

Postgres role security for multi-tenant database

I have a multi-tenant application where the Postgres DB schemas are set up as follows: _admin (tables that are invisible in the UI to standard users but need to be read-accessible, common across all ...
10
votes
3answers
185 views

DROP USER takes too long when there are many users

On a SQL Server 2014 instance with enough RAM and fast disks, there are over 160 users that have access to a database. For some reason unbeknownst to me, running the command DROP USER [username] in ...
0
votes
0answers
14 views

What is the best practice of storing mysql connection details to use in ruby/python scripts

I have ruby and python scripts that connect to mysql DBs. They are controlled in github and can populate to different servers. They run in a schedule way (not adhoc). What is the best practice of ...
1
vote
1answer
33 views

Security and Performance Implications of SQL Tuning Advisor

I work on a relatively small development team that works with an Oracle (11g) database. It's recently been requested that all the developers be given the Advisor role so that we can utilize SQL Tuning ...
0
votes
0answers
46 views

Error: 18456, Severity: 14, State: 11. Login-based server access validation failed with an infrastructure error

We are getting the above error on a SQL 2012 server running Windows Server 2008R2 when connecting using an application and a service account. The server also has Config Manager database and GAP policy ...
3
votes
1answer
36 views

Do signed certificates from public certificate authorities add any value for always encrypted?

If I create Always Encrypted columns in Microsoft SQL Server from the SSMS gui, it makes a self signed certificate. Is there any value in making a CSR and paying a certificate authority (or using ...
2
votes
3answers
242 views

Monitor database every hour to prevent data loss

Here is my requirement, though I'm aware what could possibly be done to fulfill it but still looking out for the best solution to work out with. Few days ago someone(some hacker or some previous ...
1
vote
0answers
18 views

Accessing Encrypted SQL Server database through a web-based application

I have secured a database within SQL Server Instance on my local machine using Netlib Encryptionizer. I can access the database by securing my SQL Server instance using the same password as encrypted ...
2
votes
2answers
61 views

How to find what SQL Jobs are using a specific account as Proxy?

We have identified a few servers that are using Proxy accounts inappropriately. Some of these servers have multiple Credentials and Lots of Jobs. Manually checking the Job Property GUI for "Run As" ...
3
votes
1answer
33 views

Granting only SELECT permissions on specific views to a specific user

I have landed in a scenario were I have to let a user inside a database which is not his. Hence I want to make sure that he is only able to SELECT from the views that I deem he can read from. I have ...
3
votes
1answer
274 views

Can see other user's databases in shared hosting

This looks like a security concern but I do not know enough about SQL Server to know. Using a shared hosting service, if I go to restore a database I'm able to see other user's databases. I'm not ...
3
votes
1answer
38 views

Security concerns on SMTP in SQL Server

In my company, while I try to get the ports opened to connect to my SMTP server from my SQL Server running on Windows Server 2012, I get a reply saying that it is a security concern to open ports ...
0
votes
1answer
27 views

What system privilege is needed for a user to manage user accounts only

I'm looking to delegate user termination to our NOC. Requirements are: A user NOC will be created User NOC will execute stored procedures allowing them to either 1) lock another db account or 2) ...
3
votes
1answer
61 views

Is EXECUTE AS OWNER in msdb a security risk?

I've been tasked with creating a system that allows non-privileged users to start and stop SQL Server Agent jobs. I'm creating stored procedures in the dbo schema in the msdb database using the WITH ...
1
vote
2answers
40 views

Security of streaming replication?

If I want to use streaming replication between two Postgresql databases on different parts of the internet, is there a way to secure or encrypt the connection between the two? Or are there reasons ...
0
votes
1answer
49 views

Deny user to see any database through DB_NAME()

I've already prevented user to see any database (deny view any database to [login]) and it works. But how to prevent user to list any other database using DB_NAME()?
1
vote
0answers
40 views

Is there ANY risk in granting a superuser CREATE and ALTER procedure permissions in a specific schema?

I have a developer who has created a set of procedures/functions/views he uses to perform configuration analysis in a large application (provides much higher productivity than using the formal ...
3
votes
1answer
48 views

Can't set default_schema_name for Windows User Group?

When I try to set the default schema for my Windows Role/Group for Windows Server 2008 R2, it won't allow me to do so...I run: ALTER USER [UCPSAR\Service Provision] WITH DEFAULT_SCHEMA=[...
0
votes
0answers
24 views

Difference between Database Securable Scope and Database Securable?

I'm reading the Security best practices document for Server 2008 and I noticed that they list both a database securable scope, and a database securable. How should I differentiate between these? ...
0
votes
0answers
20 views

Analyze databases for “risky” fields/data as deployed

What is the best way to analyze databases, both by field names and field content, to determine whether there is a privacy or security risk with having the data "as is"? Is there a way to script a ...
1
vote
1answer
77 views

Group permissions in postgreSQL not inheriting to table level

I am moving to a group role from a lot of individual users and have one table that needs to have permissions SELECT, INSERT only. Lets say I have: user1 user2 newgroup Both of the users are in ...
0
votes
1answer
121 views

Virtual Private Database: Create Policy function/s so that a user can view his own records or records inserted by other users with the same company ID

So lets say 100, 200, 400, 600 are company_ids and there are 6 administrators who each have their company_ids. The owner of the table User_Info is Admin who is also the owner of other tables and can ...
0
votes
1answer
19 views

How to Ensure of Data MariaDB Galera Cluster's Safety?

MariaDB will send a copy of SST to every server which request for it even without checking whether it is in the gcomm:// list. So I can easily get other people's data by simply install a fresh copy of ...
3
votes
1answer
434 views

The database owner account has been deleted. What impact?

When I create a database, I have always changed the database owner from me (usually my domain account) to another, either a standard service account used for ownership, or to the usual sa However, I'...
1
vote
1answer
113 views

Create Linked Server using Active Directory account

I was able to grant access in MSSQL to an Active Directory group and add a service account to that group. It's working fine, I'm able to use trusted connection to login on that MSSQL using both my ...
1
vote
1answer
97 views

Deny users permission to create tables in master

I have noticed that I can create tables, schemas, stored procedures etc. the master database. I don't know what is granting this permission. It's annoying, because when we open a *.sql file in SSMS, ...
3
votes
2answers
153 views

Grant Admin to an Active Directory account in SQL Server

I have a SQL Server 2012 instance, and an Active Directory group, which I can add Active Directory users to. I have my personal AD account (MyAccount) and a service account (ServiceAccount) in that ...
0
votes
0answers
46 views

How can I prevent users from accessing certain data?

Here is a screenshot of my database in MS Access 2016: On the left, I have all my tables, queries and forms. I would like to prevent users from accessing these data as well as the VBA code (i.e "...
3
votes
2answers
119 views

How does a users DEFAULT_SCHEMA get set to something other than “dbo”

One of the settings for a SQL Server user is the DEFAULT_SCHEMA. This is frequently dbo but not always. I realize you can change the setting by using this code: ALTER USER [UserName] WITH ...
0
votes
0answers
45 views

how to force mysql 5.5 server to allow tls/ssl encrypted connections only?

given a mysql Server 5.5 community edition (which came with SLES 11sp4). i configured it to support TLS and it works fine. but i did not found any options or parameters to FORCE IT to do TLS/SSL ...
1
vote
0answers
20 views

How to set minimal permissions to change SQL Azure Firewall rules

I have a desktop app that connects to SQL Azure database. Some users have dynamic IP addresses, and it is not possible to get them to use fixed addresses. I've written an ASP.NET page hosted on the ...
12
votes
4answers
861 views

Is it ever good practice to use a distinct database account for each user of an application?

The applications I'm used to are server based and use one database account for many users, with the application code controlling what the user can do, or single-user. Are there any successful complex ...