Allowing users to access only the data they are authorized to access.

learn more… | top users | synonyms

3
votes
2answers
115 views

How does a users DEFAULT_SCHEMA get set to something other than “dbo”

One of the settings for a SQL Server user is the DEFAULT_SCHEMA. This is frequently dbo but not always. I realize you can change the setting by using this code: ALTER USER [UserName] WITH ...
0
votes
0answers
36 views

how to force mysql 5.5 server to allow tls/ssl encrypted connections only?

given a mysql Server 5.5 community edition (which came with SLES 11sp4). i configured it to support TLS and it works fine. but i did not found any options or parameters to FORCE IT to do TLS/SSL ...
1
vote
0answers
19 views

How to set minimal permissions to change SQL Azure Firewall rules

I have a desktop app that connects to SQL Azure database. Some users have dynamic IP addresses, and it is not possible to get them to use fixed addresses. I've written an ASP.NET page hosted on the ...
3
votes
1answer
1k views

Do NT Service accounts need to be SysAdmin when using Domain Accounts

I'm not sure if I'm googling for the wrong thing but I can't find an answer. We're running SQL 2014. The SQL Server and SQL Agent processes are both running under Domain Managed Service Accounts. ...
9
votes
1answer
107 views

Why is the MSDB database TRUSTWORTHY?

The TRUSTWORTHY setting can be rather dangerous if you aren't careful and except for specific circumstances the recommendation is to keep it turned off. However by default the MSDB database has ...
12
votes
4answers
854 views

Is it ever good practice to use a distinct database account for each user of an application?

The applications I'm used to are server based and use one database account for many users, with the application code controlling what the user can do, or single-user. Are there any successful complex ...
2
votes
1answer
81 views

powershell problem when running on a remote server - access is denied

as a follow up from this question below: Run a PowerShell script on a different server - from inside a SQL Server job there you can see that for me tu run a powershell script from inside a sql ...
1
vote
1answer
21 views

Checks to be done, before/after changing the windows login password? [duplicate]

Here we have a scenario where a Service account , added under security as sysadmins for windows login, going to have its password change as per windows policy. Since windows team, server admins are ...
0
votes
2answers
53 views

Notify when database is accessed in any manner

I'm using SQL Server 2012. Is there a way to receive a notification (email/log etc..) if a database or table in a database is touched in anyway (e.g. CRUD via Stored Procs or tables opened via ...
1
vote
0answers
45 views

Database has thousands of randomly named tables

Preface: First of all excuse me for bringing forwarding this weird question, as it could be just me. Situation: We have a Centos 6.5 Cloud VPS hosting our website, running MySQL 5.1 and it is also ...
1
vote
1answer
46 views

Hypothetical: Security Intrusion

Had a random thought I was curious about. In the case of a security breach where a user gains access to the DB server through legitimate credentials (social engineering, phishing, fired employee, etc)...
1
vote
1answer
129 views

Grant access to all objects (with a few exceptions) to a role

In SQL Server 2014, I want to create a role that will have access (select, delete, update, insert, execute) to all the tables, views, stored procedures, except a certain list of tables that contain ...
5
votes
1answer
57 views

Recover SA Password - PSTools - Not working

I'm on a new company, and the first thing I saw is that they don't even know how many instances they have. they don't have passwords and the old DBA had no Idea what he was doing. long story short, I ...
3
votes
1answer
135 views

What ciphers need to be enabled to install and run SQL Server 2014 SP1 on Windows 10? [duplicate]

Our organization is trying out Windows 10 and our distribution had some modifications to the ciphers in use due to recent security concerns. As it stands SQL Server 2014 Developer SP1 fails to ...
3
votes
1answer
158 views

MySQL secure random string generator

I am looking to generate a cryptographically secure string for password reset in MySQL. I know I could do this at the application level in PHP; but that requires the OpenSSL extension which many of my ...
1
vote
0answers
86 views

Are there security-issues with a read-only-account on Oracle-DBs?

I am currently working as IT-maintenance-guy for a classic MVC-system(oracle-db/jboss) at public sector. The newest feature should be the shutdown of my oracle-db-readOnly-Account cause of "security ...
6
votes
1answer
1k views

Why is PL/Python untrusted?

According to the docs: PL/Python is only available as an "untrusted" language, meaning it does not offer any way of restricting what users can do in it and is therefore named plpythonu. A trusted ...
0
votes
0answers
8 views

Mysql log access denied fastcgi script

Is there one way to log attempts from a user to log in from the cgi script? Whe you are running a mysql server with a lot o virtual hosts, sometimes you see this message y mysql error log. There is ...
7
votes
3answers
108 views

Find the source of a recurrent mass SQL edit on a server

I'll try to explain my problem as clear as possible. The server of a company I support runs many websites. This server runs Windows Server 2012 with Microsoft SQL Server 2014. Almost all of the ...
2
votes
0answers
58 views

security concerns over enabling data access for the current server

Included in the code of the creation of some stored procedures, I have the enabling of data access as you can see below. BEGIN TRY PRINT @@SERVERNAME PRINT DB_NAME() PRINT 'enable the ...
1
vote
1answer
78 views

Optimize Row Level Security expression in Postgres

I have a table which contains millions of rows, categorized into a few categories (lets say numbers 1-5). An application that accesses the database uses one single database account. However, the ...
5
votes
7answers
18k views

Can't Login to SQL Server 2008 when running single user mode

I'm following the MS documentation here to migrate logins from one instance of SQL Server to another as part of the process described here. This involves putting the server into single user mode (...
0
votes
1answer
43 views

Need to deny DML access through SSMS using web app credentials

A user can login to some web application and can submit any application which will affect the data(insert/update) in database, but that specific user should not be able to manipulate the data through ...
27
votes
4answers
43k views

How do I assign an entire Active Directory group security access in SQL Server 2008?

I would like to use integrated security with my internal application which is all on a domain. Unfortunately, I've never been able to get this to work well. I would like to assign an entire Exchange ...
3
votes
0answers
79 views

Is this user-storage database system efficient, effective and secure?

I am using: PHP Version 5.2.17-MIT-BACKPORT-GnuTLS SQLite 2.8.17 I have a database called users, which currently has a table called root. There will be others, once I get all the rows for root ...
0
votes
1answer
37 views

dummyuser creating users

I'm writing a script which weekly updates the users who have access to a database (all users from a specific group in our AD). In my script I have to authenticate me as an user with the privileges to ...
2
votes
1answer
53 views

MySQL server with root user that can be accessed remotely with just a password. How hard is it to break in?

I have a MySQL server that has a root user enabled. This root user is protected by a password and can be accessed remotely: %. The reason for this is from time to time I use MySQL Workbench to ...
5
votes
6answers
14k views

Error Authenticating Proxy Account when Executing SSIS job

I have a SQL Server instance that runs 5 scheduled tasks each night, each of which run SSIS packages. These packages have been running for years and the associated steps run via a Proxy Account (...
1
vote
0answers
150 views

Auditing AS 400 DB2 library user access

As part of the testing to check for authorized users having access to applications and libraries on AS 400 systems, I need help to figure out a list of users having access to applications hosted on ...
1
vote
2answers
63 views

Encrypted column - limit key access

I'm new to SQL encryption and have a SQL Server 2012 database. The database itself needs to be accessible by DBAs but the data within one of the columns a table should only be viewable in plain text ...
2
votes
1answer
76 views

How do I stop tables from being created in my mysql database? [closed]

I have noticed recently that some tables are being created in my mysql database by a rogue process. These tables typically have six letters followed by 32 (e.g. ernidt32). They just have one column ...
12
votes
2answers
5k views

Limit connection rights on SQL Server

I have an app to deploy in production that uses 'honor system' security. That is, all users connect to the DB using a SQL user/passwd credential and the app manages permissions itself. The latter part ...
1
vote
1answer
77 views

What are the minimal MySQL grants for the debian-sys-maint user?

What are the minimal privileges that debian-sys-maint@localhost needs for the mysql service to work correctly? This answer on ServerFault suggests granting RELOAD only, but this is incorrect, as it ...
0
votes
1answer
54 views

Reject Specific Database PostgreSQL User Authentication [closed]

Lets say I have two databases: Sales and Inventory And two users: A and B I want user A to be able to do: psql sales B But user A must not be able to do: psql inventory B Right now user A can ...
0
votes
0answers
42 views

Why default db privilleges are not applied on a new schema?

I have a user with all privileges granted by default in database properties. I create a new schema as postgres and table there. I expect that the user should have an access to this table but it looks ...
0
votes
1answer
53 views

Why can I drop table when logged in as not owner?

I read that only owner can drop table and no other user may be granted to do so. I created a table with owner postgres and then drop it as another user. What privileges should I revoke to disallow it?...
3
votes
1answer
52 views

What's the difference between group roles and login roles?

It looks like for single user I should create a login role and than respective group roles because I can't directly assign privileges on login role. Is it true? What's the purpose of such separation? ...
5
votes
1answer
366 views

How can we have IIS talk to SQL Server with TLS1.0 disabled? [duplicate]

Background We need PCI-DSS compliance, and so must disable TLS1.0. In my test environment we have SQL Server 2014 SP1 with CU 1 (as per this post) and IIS 8 all on the same box. I used the Nartac ...
0
votes
1answer
26 views

How to fix MySQL anonymous account security issue?

How to fix this security issue on MySQL? [!!] User '@localhost' is an anonymous account.
6
votes
3answers
12k views

How to export all the security-related information from a SQL Server database

As you guys probably know, SQL Server does not provide an out-of-the-box solution to export all the security related statements that are declared for each element in the database (both at the database ...
7
votes
2answers
20k views

Linked server available to users without permissions

I have users seeing a linked server which they are not supposed to see. The linked server is defined so that only I will have access to it, but everybody can see and use it. I have created the ...
0
votes
1answer
124 views

What is the best way to store SSH fingerprints and public keys?

I'm building a virtual Keyring in our DB to allow users to store PGP/GPG public keys with relation to email addresses so that they can optionally encrypt all communications our system sends them. I'm ...
0
votes
1answer
47 views

Sharing Databases and Tables between users in MySQL

I want to know how it is possible to share a database tables between multiple users/user groups, I mean, SQL Server has a security feature that we can create user groups and assign users to them, then ...
2
votes
0answers
33 views

InfluxDB - How can i limit the measures that an user can read by their tags?

I have some data that is collected by several sensors. Some users may own many of this sensors. So, i want to keep all the measures in a single database in InfluxDB. To differentiate the sensors i ...
1
vote
0answers
25 views

Security: direct remote access vs webinterface

I need to remotely connect to my (mongoDB) database and I currently allow direct access to the DB server port with user/pw login. I often read that this is generally a bad idea and that one should ...
7
votes
0answers
171 views

SQL Server 2012 Compatibility with New TLS 1.2 Standards [duplicate]

I'm trying to switch off TLS 1.0 on my SQL Server 2012 server in order to comply with PCI standards. Initially I had some trouble with the SQL Server service not starting. I found help for this ...
3
votes
1answer
48 views

Is it dangerous to expose MongoDB's db.collection.find to users?

I know in SQL land people love referring to Little Bobby Tables as the main reason to have a very strict interface between your user base and your database. However, I want to implement a robust ...
0
votes
1answer
30 views

Restricting info to SYS users - Oracle

Is it possible to restrict sensitive information from users having sysdba role? Does Data redaction help us in achieving this? I know we can restrict particular schemas to prevent from viewing from ...
2
votes
1answer
85 views

What are the consequences of dropping or changing the user name for the postgres DB account?

I feel confident I understand what's involved at the db level: If dropping, I'd need to create users for each sys admin, give them SUPERUSER, and then drop the postgres user. If changing the name, I'...
3
votes
2answers
64 views

Enabling SQL Instant File Initialization when Restoring to a Network Path

We have a large Read Only SQL DB (SQL 2012) that we’re restoring to a NAS as a current duct tape solution. I had wondered why the restore process seemed to be hanging. Part of my guidance along the ...