Allowing users to access only the data they are authorized to access.

learn more… | top users | synonyms

3
votes
1answer
266 views

SQL Server 2008 : force user to change password at next login

How can I force users to change their password at next login? I want all my user change their password at next login to choose new password with new policy. user must change password at next login ...
3
votes
1answer
994 views

Do NT Service accounts need to be SysAdmin when using Domain Accounts

I'm not sure if I'm googling for the wrong thing but I can't find an answer. We're running SQL 2014. The SQL Server and SQL Agent processes are both running under Domain Managed Service Accounts. ...
1
vote
1answer
70 views

How to restrict table access to a application

I would like to know how I would go about restricting access to a table so that only a certain application can access the data within. Where I work, we have a database application that rather ...
-2
votes
1answer
52 views

Allowing non-sysadmin users to see SQL Server execution plans

Is this possible ? On SQL Server 2012+, grant access to a non sysadmin user to see the execution plans ? And can this be done for selected databases only ?
0
votes
1answer
230 views

Alter user - is password stored in audit trails

I was asked an interesting question the other day and I have not been able to find a definitive answer. If one of my DBA's changes a password, will the password the password show up in plain text in ...
3
votes
1answer
45 views

SQL Server Agent logs in as guest on a linked server

I have a job called @test_credentials which runs the following query select * from openquery(SERVER2, 'select USER_NAME(),* from openquery(SERVER1,''SELECT USER_NAME() '')') and outputs those ...
6
votes
1answer
528 views

Azure: Many Failed Login Attempts Logged

I run a SQL Server on an Azure Virtual Machine. I have noticed in the Event Logs of the server lots of failed SQL Login attempts using a ton of different usernames (none of which exist): Login ...
0
votes
0answers
25 views

Ways for a Windows Administrator to get sysadmin [duplicate]

Based on a question why Builtin\Administrators don't get sysadmin by default, I want to ask which ways are known to get sysadmin rights as a normal windows Administrator without any given rights ...
0
votes
1answer
21 views

What does the presence of rsAccessDenied mean?

I'm troubleshooting a SSRS security issue where one user is being denied access, while another user with apparently identical settings is working as expected. I'm seeing "The permissions granted to ...
6
votes
2answers
211 views

SQL Server 2012 - SA account probe

On one of my servers (Win 2012 R2), SQL Server 2012 is constantly under attack with the SA account being hit like 10 times per second with different passwords. I don't have an SA account but still I ...
0
votes
1answer
84 views

What are the user privileges required to for an ssrs report owner to 'send email'

Yes, this question is a duplicate to: SSRS - rsAccessDenied error but that question is 2 years old and unanswered...so I thought I might try again. Our DBA has recently departed leaving behind a ...
1
vote
1answer
1k views

How to change the login for a database's dbo user?

I just finished a successful install of SQL Server 2014 Express, onto a domain-joined VM instance of Win8.1. During setup which I ran under DOMAIN\Admin I accepted the default configuration of adding ...
0
votes
1answer
78 views

MySQL transaction and replication between two datacenters

I'm using a master MySQL in an east coast data center and want to setup a replication server on a west coast data center. The app server on the west coast may at times need to write to the master. ...
0
votes
1answer
49 views

How to determine effective permissions and how granted for a local or domain account

With SQL Server - if you have a local or domain user (including accounts like LOCAL SYSTEM) how can you determine What effective permissions they have on a database How those permissions are ...
2
votes
2answers
92 views

Why would sp_helprolemember show different MemberSID for same member?

Have two databases on same SQL Server instance. If I run EXEC sp_helprolemember I get different MemberSID values for dbo on each. (the 2nd half of the SID is different, the start is the same) db #1 ...
1
vote
0answers
29 views

Domain Alias for Azure Databases [duplicate]

I have 3 databases on Azure's cloud, all with domains names such as xxxxxxxx.database.windows.net. Would it be a bad idea to create domain name aliases for all 3, things such as: database.domain.com ...
1
vote
0answers
92 views

SQL Server 2012 restrict CmdExec to sysadmin server role

I'm trying to restricting CmdExec rights to sysadmin server role in SQL Server 2012. I've googled but just found some solution which they were for older version of SQL Server. Can you please help?
1
vote
2answers
296 views

Cannot open backup device Error

I have a SQL Server Agent job that backs up a database on a remote server to a network drive. Linked Server, I believe is set up correctly but I get the following error: Msg 3013, Sev 16, State 1, ...
19
votes
5answers
9k views

SQL Server compatibility with New TLS Standards

The major browsers are moving beyond SSL3.0 and TLS1.0 . The PCI Security Council has declared an end-of-life date for these protocols to be considered sufficiently strong encryption. We need to ...
1
vote
1answer
126 views

Allow multiple users to see procedures and functions

I have GRANT ALL PRIVILEGES ON `test1`.* TO 'admin'@'%', GRANT ALL PRIVILEGES ON `test1`.* TO 'devel'@'%' (from SHOW GRANTS FOR some_user) and I have created simple procedure as admin in test1. And ...
1
vote
2answers
221 views

Sending a database dump

Quite new to db admin here and I have a quick question. I am collaborating with another colleague off site and they would like me to send them a dump of our (1.5GB sql db) database via email as they ...
1
vote
1answer
106 views

SSAS ErrorCode=“3239575554” Either the user does not have permissions to alter the 'SERVER' object

I have just installed SSAS on a server called SASBIO1, but when I try to run the script below, in order to grant Administrator rights to a specific AD group I get the error message: <Error ...
2
votes
1answer
26 views

SSAS - how to script the General settings? where are them stored? how can they be queried?

I believe I am an administrator on server BIREPLON1 SSAS as you can see on the picture below. These security permissions can easily be scripted. this is an example: apologies foe the horizontal ...
3
votes
1answer
115 views

Allow multiple users to change functions in MySQL

I want to make multiple users and allow them to change procedures,functions and triggers in same DB. There must be user devel for developers and admin for admin, both can change developers DB, but ...
0
votes
1answer
34 views

Correct way of configuring remote users to connect to Microsoft SQL Server 2012

I have 2 Servers, a web server and a database server. Web server runs a number of .net sites that need to connect to the database server. Currently, I have a configuration string for each application,...
3
votes
1answer
205 views

What is the proper setup for PG user for web application

We have a web app that detects if the DB does not exist and creates it. Users like it, but my thought is that such user has too much privileges. I would optimally propose to change the DB creation ...
0
votes
0answers
24 views

SQL developer security concerns

What security risks are there when I connect to the database using SQL developer? I've been restricted to use it to access the database from my desktop because it connects to the db over a remote port....
4
votes
1answer
183 views

Do multiple SQL Server instances increase security?

Context Let's assume you have a server which exposes a web server and one or more web services to store and manage sensible information about physical persons (assume, for this example, complete ...
2
votes
1answer
259 views

What are the best practices for restricting write-access on a specific table?

I have a table, which I'd like to be read-only, except for a few specific stored procedures which need permissions to UPDATE rows in the table. After that, I want only a select group of additional ...
0
votes
1answer
46 views

Allowing a user to view/edit only a specific table in a database with ~50 tables

The database I'm working with has about 50 tables in it. A single user requires edit permissions on one of the tables, but should not have access to any other tables. I know how to deny her the ...
1
vote
1answer
122 views

How to grant access to IP range in Postgres?

I would like to configure my Postgres DB to be accessed by any IP 10.8.101.*. I know I have to create a rule in pg_hba.conf but I'm not sure what it should look like. My LAN IP is currently 10.8.101....
1
vote
1answer
50 views

Should database directory and file access be restricted to only the db user?

I don't know exactly how to word this question and I haven't been able to find any specifics on it so apologies if it's a duplicate. I know that it's standard practice to have database server ...
4
votes
2answers
53 views

Snooping-safe Vote tables

I have a table with both user_id and vote. They are stored together so each user can only give one vote. However it's also problematic because admins can simply read who voted what. Is there a way to ...
-3
votes
1answer
196 views

Implication of owned schemas for a user having db_owner privilege

Importance of "Schema owned by the user"? The user is db_owner for the db. Is it required to select owned schemas?, or else it will own all the schemas as it is a db_owner? Please provide me a detail ...
0
votes
2answers
545 views

Cannot Decrypt the encrypted columns from the database backup on local machine

I've a SQL server 2014 running on one of our server. We're in the process of implementing security steps for our databases. I've encrypted a column in one of the table in the database on the server. ...
3
votes
2answers
80 views

How do I connect to mysql without having to type an empty password?

I just installed MySQL, and by default the root user has no password. If I connect with this command: mysql --port=3307 --host=127.0.0.1 -uroot -p It asks me to enter a password, I just hit return, ...
1
vote
1answer
64 views

Trying to restore users/passwords for a MySQL server

I had a system failure, but I managed to save the /var/lib/mysql library on my linux system. I have since rebuilt a new Linux (Ubuntu) system (LAMP). I copied the old /var/lib/mysql/mysql folder to ...
1
vote
2answers
180 views

Role to view SQL server job log

We have a monitoring tool that can check if Microsoft SQL Server jobs have run successfully. What I want to do is create a user that has as little permission as possible but it must be able to watch ...
0
votes
0answers
22 views

Is it secure to disclose the key value of tables

I am currently working on a web application. And the application would link user to data with primary key of some table so user can find the key value (int). Is the application still safe? Or should ...
1
vote
1answer
103 views

How to change default security on SQL Server database so that everyone can use it?

I have a database hosted on my machine that I want co-workers to be able to access and edit through a program I created. My current connection string is: Server=MyMachine;Database=MyDatabase;...
3
votes
1answer
107 views

Is it secure to set default value for password field? [closed]

I'm looking at an application where admins can "invite" users by email and invited users. Invited users then are sent a unique URL and are inserted into a MySQL database with status pending and an ...
3
votes
1answer
237 views

Partially contained databases and Windows Logins - best practices?

In versions of SQL Server prior to 2012, in order for anyone to log in to a database using Windows credentials, you first had to create a server-level login, them map that login to a user for each ...
0
votes
1answer
123 views

Error using view to limit data access between databases in SQL Server [duplicate]

I am trying to limit user access to data through a view. I have a database full of replicated data that I do not want the users to be able to access, I also have a reporting database in which I will ...
0
votes
0answers
29 views

Accessing database from a number of servers

I have a few servers that access a database, and I was wondering what is the best way to handle access to the database. Is it secure that each server will be able to access the database, or should I ...
0
votes
1answer
116 views

How many database users/admins should be created for a website?

I have created a CMS website that only had one database connection for both the admin area and the user area and it only had one user("root") with no password, and now I want to upload it, but I am ...
2
votes
2answers
153 views

How to safeguard a symmetric key in SQL Server

I've got a database in which I need to store the encrypted values for a column. I use the SQL Server encryption format for encryption. The format is as follows: CREATE MASTER KEY ENCRYPTION BY ...
1
vote
1answer
2k views

How to set user-level security in 2007+ MS Access?

I've read this MS info which should cover my problem. There are quite clear steps: Open the .mdb or .mde file that you want to help protect. On the Database Tools tab, in the Administer group,...
2
votes
3answers
380 views

Query to find users with passwords same as their username in Oracle

I'm writing an Oracle audit script where I need to find users in a database who have set their passwords to be the same as their username, e.g. dbaadmin/dbaadmin. The query would need to get the list ...
0
votes
1answer
950 views

How to GRANT/REVOKE user permissions for user on Firebird 1.5?

I need to create a user in firebird 1.5 and give him permissions to access only some specific tables. I have managed to create the user, but apparently GRANT/REVOKE operations only work on version 2.1 ...