Tagged Questions
2
votes
0answers
13 views
Debugging SSAS Timeouts
I have a drill-through problem apparently related to security. Users in one role are seeing timeout failures when trying to invoke a drill-through action. They have permission on the action through ...
0
votes
2answers
31 views
Where should I look for details about 'access denied' errors?
This question derives from Deploying a new database on a new server, an msbuild ssdt rookie issue.
Since I have a permission denied error, I expect to find which user is failing to access so I can ...
2
votes
0answers
29 views
Server permissions of an activation stored procedure of a Server Broker queue
I have a stored procedure that queries the sys.dm_exec_requests view. In the stored procedure the view only returns one row, while the stored procedure needs to see all of them. The MSDN article on ...
-1
votes
1answer
32 views
Why does fn_my_permissions return empty rowset? [closed]
If I run this query:
select * From fn_my_permissions(NULL, 'SERVER')
This is what I'm getting:
entity_name subentity_name permission_name
------------- --------------- ...
2
votes
1answer
22 views
Use users / logins from another database
Is it possible to use logins/users from one database(F) in another(S) one? I know I can copy it but, when I add user to (F) database I have to copy again them all (or add the same user to (S) ...
2
votes
1answer
48 views
The Login is from an untrusted domain - domain setup with computer level login
I have a Sql Server 2008 R2 database I'm attempting to connect to using ADO.NET using integrated security in the connection string.
The database resides on a 64 bit Windows Server 2003 machine. The ...
2
votes
1answer
66 views
If the users need INSERT/UPDATE/DELETE permissions, is Windows auth still more secure than SQL Server auth?
Some background first:
The problem described below wouldn't exist at all if the database in question would have been built with a DBA's mindset:
Data access only through views and stored procs --> ...
1
vote
2answers
43 views
Auto Disable a SQL Server User
I have a SQL Authentication User: JOHNDOE
I would like this account to auto-expire or auto-disable after X days or at a certain date/time. Any suggestions or best practices to do this?
1
vote
2answers
91 views
Working Linked Server Query fails in sp_send_dbmail
Take the following example:
EXEC msdb.dbo.sp_send_dbmail
@recipients = 'me@whatever.co.uk' ,
@query = 'SELECT TOP 10 * FROM LINKEDSERVERA.DATABASE.dbo.TABLE' ,
@attach_query_result_as_file = N'True' ...
5
votes
3answers
112 views
How does “Be made using the login's current security context” pass the users password to remote server
Say you have a SQL Server with a "Linked Server" to another server - said "Linked Server" is set to use "Be made using the login's current security context" as its authentication model.
How does the ...
0
votes
2answers
34 views
Pull Subscription: process cannot read file due to OS error 5
I am trying to migrate a working pull subscription for transactional replication from one subscribing server to a new one. The subscribing server is at another site and is connected via a VPN tunnel. ...
2
votes
2answers
70 views
Linked Server Risks
I'm implementing a new feature which requires data from databases on multiple servers. I just need to union data from all these servers and sort it. The two options that come to mind are:
Use linked ...
0
votes
1answer
60 views
BUILTIN\Administrators allowing access via linked server but not locally
We have two servers:
LYNDB01 & LYNDB02
On LYNDB01 we have a database called db_ExampleDatabase
We have created a Linked Server on LYNDB02 to LYNDB01 using no mappings and the "Be made using the ...
2
votes
1answer
37 views
Find application password expiration date
I changed password of my application on one sql server?
when I am using Login property command I am getting last login date.
I want to know when my application password is going to expired in SQL ...
-3
votes
1answer
414 views
How database administrators can see my requests to MSSQL server?
I'm a MS SQL 2008 user. I have access to some tabes. I need to request few colums from table as I usually do. But I need to do it onse (for example) in 5 seconds and system administrators shouldn't ...
1
vote
1answer
46 views
One call to `decryptbypassphrase` for decrypting all columns
If I use ENCRYPTBYPASSPHRASE to encrypt the full table then how can I decrypt full table easily by using DECRYPTBYPASSPHRASE?
Actually I have to use DECRYPTBYPASSPHRASE ('passphrase', column_name) ...
5
votes
1answer
85 views
How is SQL Server host identity ensured?
When I connect to some e-commerce website with my browser I use HTTPS that uses a certificate that (more or less) guarantees that example.com is indeed example.com.
Now I connect to a SQL Server ...
4
votes
2answers
179 views
Securely generate a UNIQUEIDENTIFIER in SQL Server
I intend to be using a UNIQUEIDENTIFIER as an access key that users can use to access certain data. The key will act as a password in that sense.
I need to generate multiple such identifiers as part ...
13
votes
6answers
529 views
Why should an application not use the sa account
My first question ever, please be gentle. I understand that the sa account enables complete control over a SQL Server and all the databases, users, permissions etc.
I have an absolute belief that ...
0
votes
2answers
140 views
Secure Linked Server - Non privledged user possible? Registry corruption?
Is it possible to use a non privledged Windows domain account to impersonate itself in a linked server?
And why would it be unable to read the registry for available network protocols?
Overview: ...
6
votes
2answers
118 views
Limit connection rights on SQL Server
I have an app to deploy in production that uses 'honor system' security. That is, all users connect to the DB using a SQL user/passwd credential and the app manages permissions itself. The latter part ...
3
votes
3answers
126 views
Is it ever harmful to set a database owner in SQL Server?
There are a bunch of databases on one of our SQL servers that have no owner. Generally speaking, is it harmful to give them one? For example:
USE dbName;
GO
EXEC sp_changedbowner 'sa';
GO
I know ...
0
votes
2answers
55 views
Changing passphrase for EncryptByPassPhrase
I am using EncryptByPassPhrase to encrypting some columns.
If I want to change the passphrase in the future, how can I change it?
3
votes
1answer
36 views
Creative workaround for granting edit rights to individual jobs for a group?
We have two developers that say they can not function without full rights to a few jobs on our database server. They both want rights to the same jobs.
Given that it seems that MS doesn't seem to be ...
4
votes
1answer
440 views
The login already has an account under a different user name
When I execute this SQL:
USE ASPState
GO
IF NOT EXISTS(SELECT * FROM sys.sysusers WHERE NAME = 'R2Server\AAOUser')
CREATE USER [R2Server\AAOUser] FOR LOGIN [R2Server\AAOUser];
GO
I get the ...
2
votes
1answer
65 views
What are the implications of changing the SQL Server Service Logon Account?
What are the implications of changing the SQL Server Service Logon Account?
My default instance currently uses Network Service.
I want to change this to a domain account.
Are there any implications?
4
votes
2answers
193 views
Stored Procedure as Create Table proxy?
With SQL Server it was my understanding, I thought, that you could elevate a users permissions with specific constraints.
For example, you need a user to create a specific table object in a specific ...
6
votes
3answers
306 views
Restrict access for Windows administrator
As the SQL Server best practices says, "Windows Authentication mode is more secure than SQL Authentication". And now I want to know: is there a way to protect SQL Server from user with Windows ...
3
votes
1answer
195 views
SQL Server 2008 - is “NT AUTHORITY\ANONYMOUS LOGON” login “mandatory”?
My spider senses are tingling when I found this "NT AUTHORITY\ANONYMOUS LOGON" account on a SQL Server logins. I tried to research the matter and I even have a book about SQL Server management. Also ...
3
votes
1answer
165 views
Different Results From sys.databases As Different Users
We have a SQL Agent job that is configured to run as user "dbo". This job gets a list of databases defined in sys.databases that match a naming scheme. The job then performs some dynamic SQL to ...
4
votes
1answer
127 views
SSRS appears to be ignoring Permissions set using Report Manager
I have setup SSRS on SQL Server 2008 in native mode.
As an administrator I can login to report manager, upload reports and run them, and also use the Web Service URL to generate reports.
I have also ...
2
votes
2answers
93 views
One database per company for “security” reasons [duplicate]
Possible Duplicate:
Is that a good idea to use one database for 50.000+ shops?
We are developing an internet application in C# with MVC 4.
It's connected to a database which will contain a ...
4
votes
1answer
139 views
Can I retrieve all database objects owned by a particular user?
We have a user who is leaving and I need to know every database object that he owns. Is there a query that will provide this information?
4
votes
4answers
576 views
SQL Server script to delete accounts no longer in Active Directory
We have a SQL Server 2000 that will shortly be migrated to SQL Server 2005. It has years of Windows Authentication accounts created that no longer exist in Active Directory, which prevent the Copy ...
3
votes
1answer
356 views
Does this mean the 'public' has full select, insert, update, and delete access?
I'm trying to create a new DB user in SQL Server 2008 R2 that can only select from one SQL View. But no matter what I try when I login as this new user I can select from any table. I ran this query: ...
1
vote
0answers
234 views
How do I configure SQL Server 2012 so that it can restore and see files in my user account?
I have an SQL Server 2012 instance running as a service on my computer, and according to the service page it logs on as account "NT Service\MSSQLSERVER". However I can't see that account name ...
1
vote
1answer
150 views
Can't grant role permissions under sysadmin login
I'm trying to execute this script from Management Studio:
GRANT ALTER ON ROLE::[AdaptTemplate] TO [AdaptAdmin] AS [AdminSapr]
Execution fails with this message:
Msg 15151, Level 16, State 1, ...
2
votes
1answer
359 views
What are SQL Server Securables?
I migrated two applications to the new server. One of the them works without any issues but the other ran into back end sql permission problems like
The EXECUTE permission was denied on the ...
2
votes
1answer
180 views
Understanding SQL Server encryption (by password)?
After asking this I still have a question.
A company need to store sensitive data. Please let's not talk about certificate right now.
A DBA does the following :
CREATE SYMMETRIC KEY ...
3
votes
2answers
137 views
Integrated Security Success on Master, Fails on Other Database
I'm a bit perplexed as to why my connection string is selectively succeeding on the master database in SQL Server 2005. Here are the details of my app. Any ideas where to look? I'm clearly missing ...
3
votes
1answer
196 views
SQL Server 2008 R2 Express password overwrite
I'm using a program that requires SA log-in to SQL Server. We had issues where some 3rd party support numpty changed the SA password and never informed us, so the program couldn't log-in.
I've ...
1
vote
1answer
108 views
Using multiple Active Directory accounts to connect to SQL Server
I have web applications (Classic ASP and .NET) that connect to SQL Server using SQL authentication. Each one has their own login. I want to convert these to Windows Authentication. The new AD users (1 ...
2
votes
1answer
588 views
Grant select to dbo view without select on non dbo tables
SQL Server 2008 R2
We have a login & user called "JoeBlogs", this user has it's own default schema of JoeBlogs - it has Public access only to the database.
We then granted it SELECT on a dbo ...
1
vote
2answers
134 views
correct security and user setup for SQL Server database
I am currently on setting a sql server database on a database server. A front end web application running off a web server communicates to the database.
What is the best approach for setting up users ...
1
vote
3answers
409 views
Encrypt/Decrypt output & input for SSIS task
I use SSIS packages to output the data from one system as Comma Separated Values, and then import that same data into a second system. I have a new requirement to encrypt the CSV text files that are ...
1
vote
1answer
79 views
SQL Server Schema Security
I have a user U in a database where I want it to be able to create types and stored procs in a specified schema say UserSchema but not be able to alter schema dbo. So I created the schema and also ...
2
votes
1answer
58 views
How can I deny a user the ability to Alter DB files and options but still allow schema and data modifications?
I'm establishing a shared development instance for multiple single-database applications.
I'm envisioning granting authorized users permissions to allow any schema and data modifications they need to ...
8
votes
4answers
274 views
Potential risks of users connecting to SQL Server, through Excel, as sysadmin?
I recently discovered that a large swath of the finance department is using Excel to connect to my SQL Server 2000 instance with an account in the sysadmin role. What are my current risks that I ...
1
vote
2answers
589 views
Exception Details: System.Data.SqlClient.SqlException: Login failed for user
One of our user from another domain WATSON received the following error message:
Exception Details: System.Data.SqlClient.SqlException: Login failed for user 'WATSON\User1'.
when he is trying to ...
10
votes
2answers
243 views
Understanding MS SQL Server encryption and backups
So I was asking in chat about how secure SQL Server backup files are.
I'm told that if an attacker has access to the .bak file unencrypted that they can have access to the data.
So lets look at ...
