Allowing users to access only the data they are authorized to access.
5
votes
1answer
66 views
SA permissions issues with many nested objects
I have a broker application that's relatively complicated.
Today, after I made some changes, I started getting the error:
The server principal 'sa' is not able to access the database 'XYZ' under ...
4
votes
3answers
9k views
How to get rid of ORA-28002 message the password will expire within 6 days?
I have a user getting an ORA-28002 indicating that the password will expire within six days. I ran the following:
ALTER PROFILE DEFAULT LIMIT PASSWORD_LIFE_TIME UNLIMITED;
But when I try to log ...
4
votes
2answers
179 views
Securely generate a UNIQUEIDENTIFIER in SQL Server
I intend to be using a UNIQUEIDENTIFIER as an access key that users can use to access certain data. The key will act as a password in that sense.
I need to generate multiple such identifiers as part ...
4
votes
2answers
336 views
Can we minimise the risk of using xp_cmdshell?
Using xp_cmdshell can be quite helpful and sometimes possibly the only answer to some scenarios. I've read some posts on the internet that enabling xp_cmdshell might jeopardize the security of the ...
4
votes
2answers
632 views
Does the PCI standard forbid the use of Windows Authentication?
We currently use Mixed Mode for our SQL Server Authentication. I've tried to convince our DBA to allow us to use Windows Authentication so we can use Team Foundation Server, however he absolutely ...
4
votes
1answer
139 views
Can I retrieve all database objects owned by a particular user?
We have a user who is leaving and I need to know every database object that he owns. Is there a query that will provide this information?
4
votes
1answer
102 views
Security Question involving Sys tables
We have an application user which has been given read write to the appropriate databases. This user has the ability to query the sys tables by default. I've also heard that there are times when this ...
4
votes
4answers
577 views
SQL Server script to delete accounts no longer in Active Directory
We have a SQL Server 2000 that will shortly be migrated to SQL Server 2005. It has years of Windows Authentication accounts created that no longer exist in Active Directory, which prevent the Copy ...
4
votes
2answers
965 views
Is there any benefit to having one sql server login for multiple users?
I just entered a development project where the developers use the same SQL Server login to connect to a central database for their work. I have never come across this before, as each dev usually has ...
4
votes
1answer
441 views
The login already has an account under a different user name
When I execute this SQL:
USE ASPState
GO
IF NOT EXISTS(SELECT * FROM sys.sysusers WHERE NAME = 'R2Server\AAOUser')
CREATE USER [R2Server\AAOUser] FOR LOGIN [R2Server\AAOUser];
GO
I get the ...
4
votes
2answers
193 views
Stored Procedure as Create Table proxy?
With SQL Server it was my understanding, I thought, that you could elevate a users permissions with specific constraints.
For example, you need a user to create a specific table object in a specific ...
4
votes
2answers
165 views
How to detach a sql server 2008 database that is not in database list?
I installed sql server 2008 on windows 7 then i create a Database! after 2 days, i reinstall the windows and isntall the sql server! now i am trying to attach my database file, bot i encounter to ...
4
votes
1answer
284 views
Is a Named Instance more Secure than the Default Instance?
I realize that you can change the default instance from the default port of 1433, and equally you can make named instances use static ports as opposed to dynamic ports, but in general are named ...
4
votes
2answers
330 views
different login credentials based on user
I run a PHP symfony-framework web app for my company and it uses a single database login for all connections, whether the user is an admin or a client.
I know that higher security systems often use ...
4
votes
1answer
147 views
SQL Server 2008 encrypted connection using multiple server names
I have a SQL Server that must be accessed using various DNS names (SQL1, sql1.contoso.local, sql1.contoso.com, etc) and I'm struggling with creating a correct SSL certificate that can be used to ...
4
votes
1answer
429 views
How do I find out *why* a user has certain effective permissions?
I know that I can query effective permissions by using sys.fn_my_permissions:
USE myDatabase;
SELECT * FROM fn_my_permissions('dbo.myTable', 'OBJECT')
entity_name | subentity_name | ...
4
votes
1answer
147 views
DB Master Key Encrypted By *Correct* Service Master Key?
My client has frequently run process where we move databases from a prod environment to lower environments (refresh QA with prod database, etc). These DBs have database master keys on them. We have ...
4
votes
1answer
127 views
SSRS appears to be ignoring Permissions set using Report Manager
I have setup SSRS on SQL Server 2008 in native mode.
As an administrator I can login to report manager, upload reports and run them, and also use the Web Service URL to generate reports.
I have also ...
3
votes
7answers
10k views
Can't Login to SQL Server 2008 when running single user mode
I'm following the MS documentation here to migrate logins from one instance of SQL Server to another as part of the process described here. This involves putting the server into single user mode ...
3
votes
3answers
2k views
SQL Server: does ddladmin rights contain datareader and datawriter rights to the database?
Does db_ddladmin fixed database role include db_datareader and db_datawriter rights, so that you don't have to grant those rights explicitly?
3
votes
3answers
127 views
Is it ever harmful to set a database owner in SQL Server?
There are a bunch of databases on one of our SQL servers that have no owner. Generally speaking, is it harmful to give them one? For example:
USE dbName;
GO
EXEC sp_changedbowner 'sa';
GO
I know ...
3
votes
3answers
301 views
Changing the port of the postgresql server for security reasons
For security reasons, it is common to change the port of Microsoft Sql Server.
The subject is discussed here in Is changing the SQL Server port really that much safer?
my question is: does this apply ...
3
votes
1answer
85 views
Make sure MySQL is not accepting remote connections
I am currently doing development for a LAMP-based website. I do not know what configuration changes have been made to MySQL since it was installed on our server. The way that we use MySQL, there is no ...
3
votes
2answers
713 views
What is the difference between a SQL Login and a Database User in terms of security?
I am currently working with a consulting agency to set up a new production environment. They have set up a separate SQL login for each database.
However, there is no corresponding database user ...
3
votes
2answers
128 views
Microsoft SQL Server 2005 Encryption Options
I'm trying to explore some encryption options on Microsoft SQL Server 2005.
I've recently got around SQL Server 2008 and was able to enable Transparent Data Encryption (TDE). Now I'm trying to figure ...
3
votes
1answer
165 views
Different Results From sys.databases As Different Users
We have a SQL Agent job that is configured to run as user "dbo". This job gets a list of databases defined in sys.databases that match a naming scheme. The job then performs some dynamic SQL to ...
3
votes
1answer
633 views
SQL: transfer database schema
If i want to transfer schema ownership to another schema i know that i need to use something like:
ALTER SCHEMA destinationschema TRANSFER sourceschema.objectname;
But how is it different from:
...
3
votes
1answer
195 views
SQL Server 2008 - is “NT AUTHORITY\ANONYMOUS LOGON” login “mandatory”?
My spider senses are tingling when I found this "NT AUTHORITY\ANONYMOUS LOGON" account on a SQL Server logins. I tried to research the matter and I even have a book about SQL Server management. Also ...
3
votes
1answer
356 views
Does this mean the 'public' has full select, insert, update, and delete access?
I'm trying to create a new DB user in SQL Server 2008 R2 that can only select from one SQL View. But no matter what I try when I login as this new user I can select from any table. I ran this query: ...
3
votes
2answers
127 views
SQL 2005 Permission Precedence
Very simple question -
I have two database roles (Basic, Admin). Say I explicitly deny the Basic role from deleting from table A and grant that to the Admin role. If I am a user who is in both ...
3
votes
1answer
384 views
Is it safe to let application administrators look at v$session, v$process, and v$sql?
In an Oracle database shared among multiple application, is it 'safe' (from a security and system integrity perspective) to allow application administrators access to v$session, v$process, and v$sql? ...
3
votes
1answer
36 views
Creative workaround for granting edit rights to individual jobs for a group?
We have two developers that say they can not function without full rights to a few jobs on our database server. They both want rights to the same jobs.
Given that it seems that MS doesn't seem to be ...
3
votes
2answers
307 views
SQL Server EXECUTE AS trouble
I'm missing something while trying to make my stored procedure use EXECUTE AS. The stored procedure is reading data from source_db, aggregates it and stores result in target_db.
The sp itself is in ...
3
votes
1answer
83 views
What is recommended level of security for a production database?
I have a production database on our local server. Currently there are two many logins to the database, about 20, half of them are windows authenticated and the other rest are SQL Server authenticated. ...
3
votes
1answer
515 views
Designing An ACL Based Permission System
I am trying to create a permissions system where everything is going to be stored in MySQL (or some database) and pulled using PHP for a project management system I am building. I am right now trying ...
3
votes
1answer
544 views
SQL Server symmetric key & certificates games by Hacker?
1)
CREATE SYMMETRIC KEY SecureSymmetricKey
WITH ALGORITHM = DESX
ENCRYPTION BY PASSWORD = N'StrongPassword';
I'm trying to figure out about the SQL Server encryption.
once I've executed ...
3
votes
2answers
896 views
Role db_ddladmin not working properly on SQL Server 2008
I want to allow certain user to create/modify objects on a database(tables, views, sp's, functions, schemas etc) and don't want to give db_owner.
I thought I could do it with the db_ddladmin role, ...
3
votes
2answers
137 views
Integrated Security Success on Master, Fails on Other Database
I'm a bit perplexed as to why my connection string is selectively succeeding on the master database in SQL Server 2005. Here are the details of my app. Any ideas where to look? I'm clearly missing ...
3
votes
1answer
59 views
Administration of MySQL Users
What is the best practice for keeping and maintaining MySQL users? Say for example I have 5 programmers and a PHP application connecting to a database. Should I create 6 different users 1 for each ...
3
votes
2answers
2k views
sp_send_dbmail with attachment
SQL Server 2008, connecting via SQL Server Authentication.
I have a sproc in DatabaseA which calls sp_send_dbmail in msdb to send an email with a file attachment. The file is on the db server, not on ...
3
votes
1answer
132 views
Help configuring MySQL install for remote connections / root accounts understanding
I installed mysql/phpmyadmin/apache on a linux box for internal network use only. I don't have the strongest understanding of MySQL.
Hostname: server.domain.lan
IP: 192.168.0.54
After I installed ...
3
votes
2answers
48 views
disallow SET command in a postgresql server
Im planning to publish my postgresql server to a few untrusted clients.
I dont want them to modify any runtime setting, like work_mem or something risky to my server. In general I assume the ...
3
votes
1answer
55 views
Analysis service database security at application level
I have got a SSAS Cube, we have written an windows application which would issue MDX queries to access the data from the cube and show it in the reports .
This windows application is a licensed ...
3
votes
1answer
196 views
SQL Server 2008 R2 Express password overwrite
I'm using a program that requires SA log-in to SQL Server. We had issues where some 3rd party support numpty changed the SA password and never informed us, so the program couldn't log-in.
I've ...
3
votes
2answers
1k views
SELECT permission on view querying table from another database
SQL Server 2008 R2 SP1
My company uses the Great Plains (GP) financial system with several customizations. Our Value-Added-Reseller (VAR) for GP has setup most of these customizations in a separate ...
3
votes
1answer
264 views
Log shipping setup across domains
I'm running SQL Server 2008 R2 on a Windows machine.
I've been tasked with setting up log shipping between our production site (managed by a service provider) and our QA environment which is hosted ...
3
votes
2answers
2k views
Cannot access any database in SQL Server 2008 R2 Express after moving workstation from domain to workgroup
My workstation that has SQL Server 2008 R2 Express for development purposes installed has been moved out of a domain into a Windows workgroup. While being part of the domain I used the account ...
3
votes
1answer
602 views
The server principal “<mydbuser>” is not able to access the database “<mydatabase>” under the current security context
When I try to install a new database, I'm getting this error from SQL Server 2008.
The server principal "<mydbuser>" is not able to access the database "<mydatabase>" under the current ...
3
votes
2answers
424 views
How to obtain SIDs of Sql Server installed NT Service Accounts
I am using WMI to obtain members of server local groups, as well as the SIDs of the members. The WQL queries work for members that are local users, local groups, AD domain users and AD domain groups. ...
3
votes
1answer
83 views
Domain group hierarchical group membership and SQL Logins mapped to AD groups [closed]
SQL Version: Microsoft SQL Server 2005 - 9.00.4035.00 (X64)
Nov 24 2008 16:17:31
Copyright (c) 1988-2005 Microsoft Corporation
Standard Edition (64-bit) on Windows NT 6.1 (Build 7601: ...
