Allowing users to access only the data they are authorized to access.
1
vote
1answer
196 views
SQL Server Schema Security
My company uses a multi-tenant database (one database, all tables have a customerID field).
We are in the process of setting up a data warehouse and giving clients direct access. Our initial ...
1
vote
2answers
259 views
Determining sizes for Separated Partitions of programs, data and logs in SQL Server
As per the recommendations of the CIS benchmarks for SQL Server, I want to create separate partitions for the data, the programs and the logs on my SQL Server dedicated server.
Question is, what is ...
1
vote
1answer
36 views
Restrict access for Windows administrator in PostgreSQL
Is there a way to protect PostgreSQL from user with Windows administrator rights?
Like this question but for Postgres.
1
vote
1answer
44 views
One call to `decryptbypassphrase` for decrypting all columns
If I use ENCRYPTBYPASSPHRASE to encrypt the full table then how can I decrypt full table easily by using DECRYPTBYPASSPHRASE?
Actually I have to use DECRYPTBYPASSPHRASE ('passphrase', column_name) ...
1
vote
3answers
405 views
Encrypt/Decrypt output & input for SSIS task
I use SSIS packages to output the data from one system as Comma Separated Values, and then import that same data into a second system. I have a new requirement to encrypt the CSV text files that are ...
1
vote
1answer
89 views
MySQL Database Temporarily Compromised?
Two days ago, I had connected to my ClearDB test server with MySQL workbench. I had left this workbench open and when I had checked it today, there were two new schemas named "test_justin" and ...
1
vote
1answer
172 views
When was the syslogin's password last updated?
In SQL Server, I see there's a field in syslogins titled "updatedate" which is a timestamp of the last time the login was updated.
What constitutes an "update"?
My goal is to only get a timestamp ...
1
vote
1answer
614 views
Rights needed to see database files in Properties dialog?
I have a contractor setting up a database application. The database is set up, the login for the app is set as the database owner, but has only 'public' at the server level.
When the contractor logs ...
1
vote
2answers
193 views
Is it good practice to assign a system account for database owner?
I can see the owners of my databases usign this query
SELECT name ,
SUSER_SNAME(owner_sid)
FROM sys.databases
What are the things I should consider when choosing an account for database ...
1
vote
2answers
42 views
Auto Disable a SQL Server User
I have a SQL Authentication User: JOHNDOE
I would like this account to auto-expire or auto-disable after X days or at a certain date/time. Any suggestions or best practices to do this?
1
vote
1answer
149 views
Can't grant role permissions under sysadmin login
I'm trying to execute this script from Management Studio:
GRANT ALTER ON ROLE::[AdaptTemplate] TO [AdaptAdmin] AS [AdminSapr]
Execution fails with this message:
Msg 15151, Level 16, State 1, ...
1
vote
1answer
108 views
Using multiple Active Directory accounts to connect to SQL Server
I have web applications (Classic ASP and .NET) that connect to SQL Server using SQL authentication. Each one has their own login. I want to convert these to Windows Authentication. The new AD users (1 ...
1
vote
1answer
487 views
User has no password set
I see these when running MySQLTuner.pl:
-------- Security Recommendations -------------------------------------------
[!!] User '@debian' has no password set.
[!!] User '@localhost' has no password ...
1
vote
2answers
1k views
MS SQL Linked Server Security failing using current security context
I have 2 instances of SQL 2008 64 bit (ver 10.0.4000) running on a windows 2008 64 bit server db03 and db03\ins2. The ins2 has a linked server connecting to db03 that was setup by replication. I have ...
1
vote
2answers
89 views
Working Linked Server Query fails in sp_send_dbmail
Take the following example:
EXEC msdb.dbo.sp_send_dbmail
@recipients = 'me@whatever.co.uk' ,
@query = 'SELECT TOP 10 * FROM LINKEDSERVERA.DATABASE.dbo.TABLE' ,
@attach_query_result_as_file = N'True' ...
1
vote
1answer
47 views
clusterdb stopped working for PostgreSQL database in Ubuntu 12.04 server
After a fresh PostgreSQL install (version 9.2) on my Ubuntu server 12.04, clusterdb utility stopped working. I used the same config files as I used with version 9.1.
Below is the actual command:
...
1
vote
1answer
213 views
How to properly secure MySQL database?
We have a web application based on the famous triad apache + php + mysql which we sell to our customers and gets installed on their servers.
Currently, we are using MySQL 5.1.41 which has only a ...
1
vote
1answer
65 views
Does Microsoft Security Bulletin MS11-049 affect SQL Server 2008 SP3?
The security bulletin does not list SQL Server 2008 SP3 under affected software but it came out prior to that service pack. We are running SP3 but this issue is still showing up on a vulnerability ...
1
vote
2answers
134 views
correct security and user setup for SQL Server database
I am currently on setting a sql server database on a database server. A front end web application running off a web server communicates to the database.
What is the best approach for setting up users ...
1
vote
1answer
56 views
System test Database user management
We are in development stage and to be able to give the developers an integration test environment, we need to give them access to the database, they can share and test their code in the system ...
1
vote
1answer
79 views
SQL Server Schema Security
I have a user U in a database where I want it to be able to create types and stored procs in a specified schema say UserSchema but not be able to alter schema dbo. So I created the schema and also ...
1
vote
2answers
588 views
Exception Details: System.Data.SqlClient.SqlException: Login failed for user
One of our user from another domain WATSON received the following error message:
Exception Details: System.Data.SqlClient.SqlException: Login failed for user 'WATSON\User1'.
when he is trying to ...
1
vote
2answers
496 views
Login Failed for User
I have written a code in Visual Studio.NET and used data from SQL Server 2008. But after debugging, it says:
Login failed for user 'sunny'.
When I try to set the user as something else, it keeps ...
1
vote
1answer
204 views
Creating a User to access multiple databases
Is it possible in SQL server to create a User without a Login that can access multiple databases?
I am creating a user setting up a service broker queue and the receiver of the message needs to be ...
1
vote
2answers
341 views
SQL Server 2008 R2 recognizes a domain account as a SQL Server account
After migrating from SQL Server 2000 to SQL Server 2008 R2, we have a few domain accounts that appear to the new server as SQL Server accounts. These accounts can SELECT from tables in the database ...
1
vote
1answer
57 views
Oracle DB administrator-specific security features
Yesterday I was presenting an internet banking solution to a potential client management. My offer is based on using MS SQL Server 2008 RDBMS.
One of the client's officers mentioned, that Oracle's ...
1
vote
1answer
306 views
How to implement an effective ACL/auth in a relational db?
We are looking at implementing an ACL that fulfills the following requirements:
Most users have access to an item (access to the item by default), but a few is denied access.
Most users do not have ...
1
vote
3answers
632 views
MySQL SSL disabled on Windows
I want to enable an SSL connection to my database. I've created SSL certificates and so on, however SSL remains disabled:
mysql> show variables like '%ssl%';
...
1
vote
1answer
156 views
How to do MySQL User Accounting
I can't seem to find any information on this anywhere. I found a question here called Monitor MySQL activity per database? but that's not quite the answer either.
I'd like to be able to log the ...
1
vote
1answer
3k views
tsql to find users and database level permissions mapped to a certificate
On SQL 2005 and above, how can I find users and database level permissions mapped to a certificate?
Story behing this:
I copied a database from SQL 2005 to SQL 2008. It had a certificate inside the ...
1
vote
1answer
119 views
“The SELECT permission was denied” only for some of my tables
In my database there are about 100 tables on 2 tables I get the following error when accessing the database by a SP (all data access uses SP):
The SELECT permission was denied on the object 'XXX' ...
1
vote
1answer
80 views
sp_setapprole taking 100 - 200 ms [closed]
SQL Server 2008 SP1 here.
We have a machine where sp_setapprole calls take more than 100ms and they are done many times per user operation on an application.
The developer says that in his setup, ...
1
vote
0answers
231 views
How do I configure SQL Server 2012 so that it can restore and see files in my user account?
I have an SQL Server 2012 instance running as a service on my computer, and according to the service page it logs on as account "NT Service\MSSQLSERVER". However I can't see that account name ...
1
vote
0answers
82 views
PhpMyAdmin: UploadDir & SaveDir
Regarding UploadDir & SaveDir in phpmyadmin, I have them both set to './save' with permissions at 755.
I am the only one using phpmyadmin, but still, could I make this tighter?
Thanks
PHP 5.3.3 ...
1
vote
0answers
1k views
Error Authenticating Proxy Account when Executing SSIS job
I have a SQL Server instance that runs 5 scheduled tasks each night, each of which run SSIS packages.
These packages have been running for years and the associated steps run via a Proxy Account ...
1
vote
0answers
189 views
ORACLE SSL using Microsoft Certificate Store for PKI
I am trying to set up PKI SSL authentication between client and server using a Microsoft Certificate Store.
Client: Windows 7 64 bit with Oracle client 11.2.0.3.0
Server: Windows 2008 R2 64 bit with ...
1
vote
1answer
50 views
User login error when trying to access secured SQL Server database
We have a username that was recently renamed from one username to another (think getting married). The Active Directory admin renamed the user because "it has always worked in the past".
One vendor ...
0
votes
2answers
406 views
Secure way to connect: Windows Authentication or SQL Server Authentication and why?
Which is the best way to create a connection string for SQL Server?
Should I be using a trusted connection string (windows authentication) or an untrusted connection string (sql server ...
0
votes
2answers
51 views
Can I configure MySQL's typecasting to consider 0 != 'foo'?
This article points out the following security problem with MySQL:
USERS
id | email | password_reset_token
1 | one@example.com | QTlXww)uV!Hdg3U6aGwKV2FPvAqzVgPx
2 | two@example.com | ...
0
votes
1answer
121 views
What are the first necessary actions needed to help secure a database's schema & data? [closed]
This smells like an open-ended, opinionated, wiki free-for-all, but I'm not trying to make this a battle of opinions.
It seems like there should be a good checklist out there for all to agree on ...
0
votes
1answer
157 views
How to troubleshoot/debug Oracle permission problems
An application is connecting to Oracle to do stuff. It's not working but I don't get any ORA errors in the application itself. I'm thinking its a permission problem. So my question is what is the best ...
0
votes
2answers
34 views
Pull Subscription: process cannot read file due to OS error 5
I am trying to migrate a working pull subscription for transactional replication from one subscribing server to a new one. The subscribing server is at another site and is connected via a VPN tunnel. ...
0
votes
1answer
60 views
BUILTIN\Administrators allowing access via linked server but not locally
We have two servers:
LYNDB01 & LYNDB02
On LYNDB01 we have a database called db_ExampleDatabase
We have created a Linked Server on LYNDB02 to LYNDB01 using no mappings and the "Be made using the ...
0
votes
1answer
29 views
Giving permission for each table within a database
I want to give different permission for different tables within a single database for a user.For example a user has full permission to a table while for another table only read permission.How it can ...
0
votes
2answers
54 views
Changing passphrase for EncryptByPassPhrase
I am using EncryptByPassPhrase to encrypting some columns.
If I want to change the passphrase in the future, how can I change it?
0
votes
1answer
2k views
Set permissions on all objects for SQL users
I have a procedure that loops through all objects in the database and assigns them proper permissions to that object. I want to know if there is a better way to do this? I use a model database to ...
0
votes
2answers
15 views
How can I run a T-SQL Script using SQL Credentials?
I need to develop a T-SQL insert script for use on a remote SQL 2005 Express instance but I would like the script to include the necessary SQL credentials so all the user has to do is execute the ...
0
votes
1answer
85 views
Granting privileges to dbms_crypto
I'm trying to grant proper privileges for using DBMS_CRYPTO.
Whenever I call it from package it gives me error:
PLS-00201: identifier 'DBMS_CRYPTO' must be declared
User already has privileges:
...
0
votes
2answers
134 views
Secure Linked Server - Non privledged user possible? Registry corruption?
Is it possible to use a non privledged Windows domain account to impersonate itself in a linked server?
And why would it be unable to read the registry for available network protocols?
Overview: ...
0
votes
1answer
141 views
Saving every mysql user login attempts
Is there a way to save the username and the IP from which the user tries to login to a MySQL server??
Enabling general-log seems to log everything but that seems to write too much details taking more ...
