Allowing users to access only the data they are authorized to access.

learn more… | top users | synonyms

2
votes
1answer
22 views

How to find what SQL Jobs are using a specific account as Proxy?

We have identified a few servers that are using Proxy accounts inappropriately. Some of these servers have multiple Credentials and Lots of Jobs. Manually checking the Job Property GUI for "Run As" ...
3
votes
2answers
608 views

Security for Oracle linked server from SQL Server

I'm trying to make the linked server from SQL Server 2005 to Oracle more secure by not having user/pass on "Be made using this security context:" fields so only a specific user can access the data ...
2
votes
2answers
104 views

Mysql's internal mysql database in replication

I searched around but the word game seems to delude any valid result and could not find anything relevant. Mysql (the RDBMS) has an internal database named mysql, this database has information about ...
0
votes
1answer
15 views

Granting only SELECT VIEW permissions to specific Views to a specifc user on a MSSQL database

I have landed in a scenario were I have to let a user inside a database which is not his. Hence I want to make sure that he is only able to SELECT from the views that I deem he can read from. I have ...
3
votes
1answer
259 views

Can see other user's databases in shared hosting

This looks like a security concern but I do not know enough about SQL Server to know. Using a shared hosting service, if I go to restore a database I'm able to see other user's databases. I'm not ...
3
votes
1answer
29 views

Security concerns on SMTP in SQL Server

In my company, while I try to get the ports opened to connect to my SMTP server from my SQL Server running on Windows Server 2012, I get a reply saying that it is a security concern to open ports ...
0
votes
1answer
24 views

What system privilege is needed for a user to manage user accounts only

I'm looking to delegate user termination to our NOC. Requirements are: A user NOC will be created User NOC will execute stored procedures allowing them to either 1) lock another db account or 2) ...
0
votes
1answer
1k views

Allow access to enter data through forms, but not full database access

Using Access 2013 or Sharepoint 2013 is it possible to give someone access to data entry forms that work with a back end database whether Access database or Sharepoint SQL. But from everything I've ...
1
vote
2answers
25 views

Security of streaming replication?

If I want to use streaming replication between two Postgresql databases on different parts of the internet, is there a way to secure or encrypt the connection between the two? Or are there reasons ...
3
votes
1answer
38 views

Is EXECUTE AS OWNER in msdb a security risk?

I've been tasked with creating a system that allows non-privileged users to start and stop SQL Server Agent jobs. I'm creating stored procedures in the dbo schema in the msdb database using the WITH ...
0
votes
1answer
41 views

Deny user to see any database through DB_NAME()

I've already prevented user to see any database (deny view any database to [login]) and it works. But how to prevent user to list any other database using DB_NAME()?
1
vote
0answers
35 views

Is there ANY risk in granting a superuser CREATE and ALTER procedure permissions in a specific schema?

I have a developer who has created a set of procedures/functions/views he uses to perform configuration analysis in a large application (provides much higher productivity than using the formal ...
1
vote
2answers
251 views

Cannot open backup device Error

I have a SQL Server Agent job that backs up a database on a remote server to a network drive. Linked Server, I believe is set up correctly but I get the following error: Msg 3013, Sev 16, State 1, ...
2
votes
1answer
126 views

Can we protect data form Database Administrator by encrypting the data?

How can we protect data on my database which is MySQL form database administrator stealing it? Will encrypting it prevent it from being stolen? If yes, how as he already has access to the database ...
0
votes
0answers
19 views

Analyze databases for “risky” fields/data as deployed

What is the best way to analyze databases, both by field names and field content, to determine whether there is a privacy or security risk with having the data "as is"? Is there a way to script a ...
3
votes
1answer
32 views

Can't set default_schema_name for Windows User Group?

When I try to set the default schema for my Windows Role/Group for Windows Server 2008 R2, it won't allow me to do so...I run: ALTER USER [UCPSAR\Service Provision] WITH ...
0
votes
0answers
19 views

Difference between Database Securable Scope and Database Securable?

I'm reading the Security best practices document for Server 2008 and I noticed that they list both a database securable scope, and a database securable. How should I differentiate between these? ...
1
vote
2answers
34 views

Group permissions in postgreSQL not inheriting to table level

I am moving to a group role from a lot of individual users and have one table that needs to have permissions SELECT, INSERT only. Lets say I have: user1 user2 newgroup Both of the users are in ...
0
votes
1answer
14 views

How to Ensure of Data MariaDB Galera Cluster's Safety?

MariaDB will send a copy of SST to every server which request for it even without checking whether it is in the gcomm:// list. So I can easily get other people's data by simply install a fresh copy of ...
0
votes
1answer
112 views

SA login history in sql

Is there any PowerShell script to get the SA log in history? I need to do an audit on SA login.
0
votes
1answer
117 views

Virtual Private Database: Create Policy function/s so that a user can view his own records or records inserted by other users with the same company ID

So lets say 100, 200, 400, 600 are company_ids and there are 6 administrators who each have their company_ids. The owner of the table User_Info is Admin who is also the owner of other tables and can ...
3
votes
1answer
223 views

Partially contained databases and Windows Logins - best practices?

In versions of SQL Server prior to 2012, in order for anyone to log in to a database using Windows credentials, you first had to create a server-level login, them map that login to a user for each ...
3
votes
1answer
424 views

The database owner account has been deleted. What impact?

When I create a database, I have always changed the database owner from me (usually my domain account) to another, either a standard service account used for ownership, or to the usual sa However, ...
3
votes
2answers
506 views

Migration to databases Domain Users do not have access

I migrated databases to new servers, however the applications that were previously used with the databases are failing to load. I have changed the connections and etc. The jobs also seem to be ...
1
vote
1answer
46 views

Create Linked Server using Active Directory account

I was able to grant access in MSSQL to an Active Directory group and add a service account to that group. It's working fine, I'm able to use trusted connection to login on that MSSQL using both my ...
1
vote
1answer
63 views

Deny users permission to create tables in master

I have noticed that I can create tables, schemas, stored procedures etc. the master database. I don't know what is granting this permission. It's annoying, because when we open a *.sql file in SSMS, ...
3
votes
2answers
87 views

Grant Admin to an Active Directory account in SQL Server

I have a SQL Server 2012 instance, and an Active Directory group, which I can add Active Directory users to. I have my personal AD account (MyAccount) and a service account (ServiceAccount) in that ...
3
votes
2answers
5k views

Map a Login to a User that was Created Without Mapping to a Login

This question has been asked before, but I didn't see any answer (http://stackoverflow.com/questions/6468813/assign-a-login-to-a-user-created-without-login-sql-server) How does one map a login to a ...
1
vote
1answer
130 views

I am getting a failed login message in the SQL Server error logs however, nothing actually failed?

I have a server which runs third party software (called Visualcut) to email Crystal Reports to our users. When I log onto the Visualcut Server, I can open the software and then preview a report. This ...
0
votes
0answers
25 views

How can I prevent users from accessing certain data?

Here is a screenshot of my database in MS Access 2016: On the left, I have all my tables, queries and forms. I would like to prevent users from accessing these data as well as the VBA code (i.e ...
3
votes
2answers
108 views

How does a users DEFAULT_SCHEMA get set to something other than “dbo”

One of the settings for a SQL Server user is the DEFAULT_SCHEMA. This is frequently dbo but not always. I realize you can change the setting by using this code: ALTER USER [UserName] WITH ...
0
votes
0answers
19 views

how to force mysql 5.5 server to allow tls/ssl encrypted connections only?

given a mysql Server 5.5 community edition (which came with SLES 11sp4). i configured it to support TLS and it works fine. but i did not found any options or parameters to FORCE IT to do TLS/SSL ...
1
vote
0answers
11 views

How to set minimal permissions to change SQL Azure Firewall rules

I have a desktop app that connects to SQL Azure database. Some users have dynamic IP addresses, and it is not possible to get them to use fixed addresses. I've written an ASP.NET page hosted on the ...
3
votes
1answer
713 views

Do NT Service accounts need to be SysAdmin when using Domain Accounts

I'm not sure if I'm googling for the wrong thing but I can't find an answer. We're running SQL 2014. The SQL Server and SQL Agent processes are both running under Domain Managed Service Accounts. ...
9
votes
1answer
97 views

Why is the MSDB database TRUSTWORTHY?

The TRUSTWORTHY setting can be rather dangerous if you aren't careful and except for specific circumstances the recommendation is to keep it turned off. However by default the MSDB database has ...
12
votes
4answers
845 views

Is it ever good practice to use a distinct database account for each user of an application?

The applications I'm used to are server based and use one database account for many users, with the application code controlling what the user can do, or single-user. Are there any successful complex ...
2
votes
1answer
61 views

powershell problem when running on a remote server - access is denied

as a follow up from this question below: Run a PowerShell script on a different server - from inside a SQL Server job there you can see that for me tu run a powershell script from inside a sql ...
1
vote
1answer
20 views

Checks to be done, before/after changing the windows login password? [duplicate]

Here we have a scenario where a Service account , added under security as sysadmins for windows login, going to have its password change as per windows policy. Since windows team, server admins are ...
0
votes
2answers
44 views

Notify when database is accessed in any manner

I'm using SQL Server 2012. Is there a way to receive a notification (email/log etc..) if a database or table in a database is touched in anyway (e.g. CRUD via Stored Procs or tables opened via ...
1
vote
0answers
41 views

Database has thousands of randomly named tables

Preface: First of all excuse me for bringing forwarding this weird question, as it could be just me. Situation: We have a Centos 6.5 Cloud VPS hosting our website, running MySQL 5.1 and it is also ...
1
vote
1answer
45 views

Hypothetical: Security Intrusion

Had a random thought I was curious about. In the case of a security breach where a user gains access to the DB server through legitimate credentials (social engineering, phishing, fired employee, ...
1
vote
1answer
106 views

Grant access to all objects (with a few exceptions) to a role

In SQL Server 2014, I want to create a role that will have access (select, delete, update, insert, execute) to all the tables, views, stored procedures, except a certain list of tables that contain ...
5
votes
1answer
54 views

Recover SA Password - PSTools - Not working

I'm on a new company, and the first thing I saw is that they don't even know how many instances they have. they don't have passwords and the old DBA had no Idea what he was doing. long story short, I ...
3
votes
1answer
113 views

What ciphers need to be enabled to install and run SQL Server 2014 SP1 on Windows 10? [duplicate]

Our organization is trying out Windows 10 and our distribution had some modifications to the ciphers in use due to recent security concerns. As it stands SQL Server 2014 Developer SP1 fails to ...
3
votes
1answer
133 views

MySQL secure random string generator

I am looking to generate a cryptographically secure string for password reset in MySQL. I know I could do this at the application level in PHP; but that requires the OpenSSL extension which many of my ...
1
vote
0answers
86 views

Are there security-issues with a read-only-account on Oracle-DBs?

I am currently working as IT-maintenance-guy for a classic MVC-system(oracle-db/jboss) at public sector. The newest feature should be the shutdown of my oracle-db-readOnly-Account cause of "security ...
6
votes
1answer
1k views

Why is PL/Python untrusted?

According to the docs: PL/Python is only available as an "untrusted" language, meaning it does not offer any way of restricting what users can do in it and is therefore named plpythonu. A trusted ...
0
votes
0answers
7 views

Mysql log access denied fastcgi script

Is there one way to log attempts from a user to log in from the cgi script? Whe you are running a mysql server with a lot o virtual hosts, sometimes you see this message y mysql error log. There is ...
7
votes
3answers
105 views

Find the source of a recurrent mass SQL edit on a server

I'll try to explain my problem as clear as possible. The server of a company I support runs many websites. This server runs Windows Server 2012 with Microsoft SQL Server 2014. Almost all of the ...
2
votes
0answers
44 views

security concerns over enabling data access for the current server

Included in the code of the creation of some stored procedures, I have the enabling of data access as you can see below. BEGIN TRY PRINT @@SERVERNAME PRINT DB_NAME() PRINT 'enable the ...