Allowing users to access only the data they are authorized to access.

learn more… | top users | synonyms

0
votes
1answer
40 views

Select permission to each table

I have three schemas Production, HRecourse and Sales,tables in every week create and drop , I have six Users P_User1, P_User2, HR_User1, HR_User2 and S_User1 and S_User2. I have to grant then how i ...
0
votes
1answer
521 views

CHROOT install after I already installed Mysql 5.6

I installed some time ago Mysql 5.6 on Ubuntu server 12.04 and now I'd like to enhance security by putting mysql into a CHROOT environment on that same Ubuntu server. Is this possible without re-...
0
votes
1answer
351 views

Do I need to explicitly grant permissions for a login under the sysadmin role for it to access a custom schema?

So I have a login that has sysadmin rights on the db server. However, it's not able to access database objects under a custom schema that was created (eg. it cannot select from tables with [...
0
votes
1answer
3k views

DB2 9.7 LUW - How do I SET SESSION_USER when I am DBADM,SECADM?

Based on a previous question I have asked, I am attempting to work on a solution as recommended by mustaccio's answer, whereby I have another ID to create my DDL objects. I have been trying to follow ...
0
votes
1answer
668 views

Which databases can have row and column level security based upon Active Directory? [closed]

I have various database types, Oracle 11g, MySQL 5, Sql Server 2012. I have direct access. I can have other databases if I need them such as PostgreSQL. What I'm doing is protecting data at the ...
0
votes
1answer
696 views

How to revoke DBADM and clean up any related objects from DB2 LUW

This question has started because of us taking copies of production backups and restoring them into lower environments (with scrambled data of course) for developers to practice and/or debug against. ...
0
votes
1answer
2k views

Permissions on sys.syslogins

I've got the following scenario: ( loggend in on SQL-Server with full admin-privileges ) Creating LogIn, User, Role and associate them. IF NOT EXISTS( SELECT "name" FROM "master"."dbo"."syslogins" ...
0
votes
2answers
1k views

SQL Server AD groups membership seems cached - how to flush to test? [duplicate]

I am configuring a new, fully AD group based security scheme on an existing SQL Server 2008. When I change the group to which I belong to test my configs, it seems that there is quite a delay between ...
0
votes
1answer
486 views

Security Concerns of SQL Server Express for Web e-Voting web application

I am building a database driven web application. The web application is basically an E-Voting website, where users can register and vote on things that concern their community ... etc. The database ...
0
votes
1answer
309 views

Cannot create perlplu function

Running PostgreSQL 9.1.8 on Xubuntu 12.04, installed from the repos. From the shell, I have executed: createlang plperl db_name; createlang plperlu db_name; As the superuser running psql, I have ...
0
votes
2answers
4k views

Secure Linked Server - Non privledged user possible? Registry corruption?

Is it possible to use a non privledged Windows domain account to impersonate itself in a linked server? And why would it be unable to read the registry for available network protocols? Overview: ...
0
votes
1answer
106 views

Can MySQL be patched

I just saw a note about a security issue in MySQL so thought that I'd better patch my test server just in case. The MySQL site is not very helpful and a quick google revealed lots of people asking how ...
0
votes
1answer
159 views

Best practices in securing Oracle Standard edition one [closed]

I have a database server with Oracle Standard Edition One. I'm interested what are the best practices to secure Oracle? I have Java web application installed in the same server. The Java application ...
0
votes
1answer
132 views

What privileges does the SQL Azure Migration Wizard need to copy a SQL Azure database?

Currently have 2 users in our SQL Azure subscription. One is the god login created when setting up the server, other is very limited account for our www app (has db_datareader and db_datawriter). The ...
0
votes
0answers
21 views

mysql pirate users logged in, what should I do

I'm using Mysql Server 5.1.73 and when I do a show processlists I can see some connections which shouldn't be there. In theory only the web app should be connected to this database. The connection ...
0
votes
2answers
30 views

Are there any Database functions which allow access to other network services in PostgreSQL

I have set up a new postgres installation and have to meet the security requirements from my company. There is one requirement were i'm not quite sure: Database functions which allow access to ...
0
votes
0answers
14 views

What is the best practice of storing mysql connection details to use in ruby/python scripts

I have ruby and python scripts that connect to mysql DBs. They are controlled in github and can populate to different servers. They run in a schedule way (not adhoc). What is the best practice of ...
0
votes
0answers
43 views

Error: 18456, Severity: 14, State: 11. Login-based server access validation failed with an infrastructure error

We are getting the above error on a SQL 2012 server running Windows Server 2008R2 when connecting using an application and a service account. The server also has Config Manager database and GAP policy ...
0
votes
0answers
23 views

Difference between Database Securable Scope and Database Securable?

I'm reading the Security best practices document for Server 2008 and I noticed that they list both a database securable scope, and a database securable. How should I differentiate between these? ...
0
votes
0answers
20 views

Analyze databases for “risky” fields/data as deployed

What is the best way to analyze databases, both by field names and field content, to determine whether there is a privacy or security risk with having the data "as is"? Is there a way to script a ...
0
votes
1answer
19 views

How to Ensure of Data MariaDB Galera Cluster's Safety?

MariaDB will send a copy of SST to every server which request for it even without checking whether it is in the gcomm:// list. So I can easily get other people's data by simply install a fresh copy of ...
0
votes
0answers
45 views

How can I prevent users from accessing certain data?

Here is a screenshot of my database in MS Access 2016: On the left, I have all my tables, queries and forms. I would like to prevent users from accessing these data as well as the VBA code (i.e "...
0
votes
0answers
45 views

how to force mysql 5.5 server to allow tls/ssl encrypted connections only?

given a mysql Server 5.5 community edition (which came with SLES 11sp4). i configured it to support TLS and it works fine. but i did not found any options or parameters to FORCE IT to do TLS/SSL ...
0
votes
0answers
8 views

Mysql log access denied fastcgi script

Is there one way to log attempts from a user to log in from the cgi script? Whe you are running a mysql server with a lot o virtual hosts, sometimes you see this message y mysql error log. There is ...
0
votes
1answer
37 views

dummyuser creating users

I'm writing a script which weekly updates the users who have access to a database (all users from a specific group in our AD). In my script I have to authenticate me as an user with the privileges to ...
0
votes
0answers
44 views

Why default db privilleges are not applied on a new schema?

I have a user with all privileges granted by default in database properties. I create a new schema as postgres and table there. I expect that the user should have an access to this table but it looks ...
0
votes
1answer
57 views

Sharing Databases and Tables between users in MySQL

I want to know how it is possible to share a database tables between multiple users/user groups, I mean, SQL Server has a security feature that we can create user groups and assign users to them, then ...
0
votes
0answers
22 views

PostgreSQL: Recommended way of user creation/management for development, test and production. I use Ruby on Rails

I am trying to think of the best (aka recommended or common professional practice) way to create users/roles in PostgreSQL database for development, test and production environments. I have to say ...
0
votes
0answers
16 views

Minimum permissions to modify a job owned by someone else [duplicate]

We have a development team that historically has managed it's own SQL Server jobs. We would like to continue to let them do this but historically they have had sysadmin and we don't want them to have ...
0
votes
1answer
93 views

Cannot fix ERROR:ORA-01031: insufficient privileges

I have tried almost every solution on the internet however I still cannot fix this problem. I cannot login as sysdba every time I try SQL>connect /as sysdba I get the error ERROR:ORA-01031: ...
0
votes
1answer
31 views

Set Default Maximum Rows for Export

I am more of a Vertica database user than admin, so I'm not even sure if what I'm asking is absurd, but here goes nothing... Could I, as an admin, put default restrictions on the number of rows that ...
0
votes
0answers
33 views

Good Book for professional database design [duplicate]

I am currently working on a project with some friends and we are hoping to make a business out of it. We are at the database design phase and as a learning source I am using "An Introduction to ...
0
votes
0answers
15 views

impact on Nodejs app - Disable Server-Side Execution of JavaScript --noscripting

What does the startup option --noscripting do exactly? What is the impact on a Nodejs app? What does not work anymore if we Disable Server-Side Execution of JavaScript? The admin guys are the only ...
0
votes
0answers
25 views

Ways for a Windows Administrator to get sysadmin [duplicate]

Based on a question why Builtin\Administrators don't get sysadmin by default, I want to ask which ways are known to get sysadmin rights as a normal windows Administrator without any given rights ...
0
votes
1answer
21 views

What does the presence of rsAccessDenied mean?

I'm troubleshooting a SSRS security issue where one user is being denied access, while another user with apparently identical settings is working as expected. I'm seeing "The permissions granted to ...
0
votes
1answer
83 views

MySQL transaction and replication between two datacenters

I'm using a master MySQL in an east coast data center and want to setup a replication server on a west coast data center. The app server on the west coast may at times need to write to the master. ...
0
votes
3answers
618 views

Cannot Decrypt the encrypted columns from the database backup on local machine

I've a SQL server 2014 running on one of our server. We're in the process of implementing security steps for our databases. I've encrypted a column in one of the table in the database on the server. ...
0
votes
0answers
22 views

Is it secure to disclose the key value of tables

I am currently working on a web application. And the application would link user to data with primary key of some table so user can find the key value (int). Is the application still safe? Or should ...
0
votes
0answers
29 views

Accessing database from a number of servers

I have a few servers that access a database, and I was wondering what is the best way to handle access to the database. Is it secure that each server will be able to access the database, or should I ...
0
votes
1answer
126 views

How many database users/admins should be created for a website?

I have created a CMS website that only had one database connection for both the admin area and the user area and it only had one user("root") with no password, and now I want to upload it, but I am ...
0
votes
2answers
36 views

How to access to DB Instance from another DB Instance with Windows Authentication

i have two database servers DB_INSTANCE1 DB_INSTANCE2 is it possible to access from DB_INSTANCE1\DB1 SQL script to DB_INSTANCE2\DB2 tables without using SQL Logins ? (not every database servers are ...
0
votes
1answer
280 views

Is the Advanced Security Pack required for windows authenticaion?

Can anyone tell me if the Oracle Advanced Security Pack is required for single sign in under Windows? I've been told we are not licensed for the "Oracle Advanced Security Pack" and need to remove it, ...
0
votes
1answer
41 views

How do I determine if membership in a DB fixed role is by direct user memership or through membership in a custom DB role?

I'm cataloging memberships of DB users in the various fixed DB roles so that I can create custom roles by business function and grant permissions through these custom roles only. When using SSMS to ...
0
votes
0answers
867 views

Database Role Membership: db_executor vs db_datareader and db_datawriter in SQL Server 2008R2?

I have a couple of users who have only public and db_executor memberships in their Server Login object, User Mapping properties in the one database (let's call it A), now that our front end ...
0
votes
0answers
154 views

Security for SSIS packages in SQL Server - use a domain account?

I have an SSIS package that I want to deploy to SQL Server A. This package needs to access tables on SQL Server A, and another SQL Server, B. What is the best way to set this up? Should I create a ...
0
votes
1answer
1k views

Allow access to enter data through forms, but not full database access

Using Access 2013 or Sharepoint 2013 is it possible to give someone access to data entry forms that work with a back end database whether Access database or Sharepoint SQL. But from everything I've ...
0
votes
1answer
80 views

How comes that login with no rights cam give himself db_creator?

I just created a new login using the GUI, which generates this script: USE [master] GO CREATE LOGIN [tester] WITH PASSWORD=N'tester', DEFAULT_DATABASE=[master], CHECK_EXPIRATION=OFF, CHECK_POLICY=OFF ...
0
votes
0answers
31 views

Procedure Security Layer

I want discuss an idea with you and get your opinions what you think about it. From database (SQL Server 2008 R2) administration view and general security, its good practice to create DB roles and set ...
0
votes
1answer
6k views

Login failed for user - Error: 18456, Severity: 14, State: 38 [duplicate]

I am trying to run and ADODB command in MS Access 2012 to exec a stored proc in our SQL server 2008R2 database, but I keep getting error 38 and SQL profiler shows the following: Error: 18456, ...
0
votes
1answer
22 views

Restricting the # of Rows a User can return in a single query

A concern has come up recently about employees who have read access to our internal databases being able to download large amounts of data for nefarious purposes. My question is whether it is ...