Allowing users to access only the data they are authorized to access.

learn more… | top users | synonyms

3
votes
2answers
341 views

Security for Oracle linked server from SQL Server

I'm trying to make the linked server from SQL Server 2005 to Oracle more secure by not having user/pass on "Be made using this security context:" fields so only a specific user can access the data ...
2
votes
2answers
596 views

Need advice on abnormal login auditing

Recently i am facing some slow issue for my web application. And i have check my visitor report and it shows normal traffic rate as usual. And then i check my db login auditing and find below login ...
1
vote
2answers
86 views

Auditing the View Server State permissions on Server

We noticed that one of our servers has permissions granted to "all" users for "view server state". I am wondering if there is a way to audit the DMV's used by the user(s) on a regular basis as this ...
0
votes
2answers
21 views

Effects of monolothic databases on performance and security?

Please note: although I'm specifically calling out MySQL here, I would also appreciate/entertain generic answers that apply to all/most relational systems. As a developer I don't see the design ...
2
votes
1answer
3k views

Reconcile users with logins using 'sp_change_users_login'

Sql Server 2008 (and 2005): I have a Sql Server instance, let's say, InstA, in a Domain (called AD). In that I have a domain Windows Authentication Login, called AD\Log1 that has an associated user, ...
0
votes
1answer
15 views

Restricting the # of Rows a User can return in a single query

A concern has come up recently about employees who have read access to our internal databases being able to download large amounts of data for nefarious purposes. My question is whether it is ...
0
votes
1answer
12 views

How to maintain database ownership restoring across domains?

I am working with a vendor who is developing a SQL Server database outside of our domain. Occasionally, they need to deploy a new copy of that database into our domain by backing up their database, ...
0
votes
1answer
106 views

unable to bring database online from recovery pending

I am trying to bring a SQL Server database online and accessible that is in Recovery Pending state. The SQL Server service uses an Active directory account that is a domain administrator and a ...
0
votes
1answer
46 views

Does SQL server 2008 log instance level security permission changes

I just recently logged onto one of our Test environments to find i did not have permissions, turns out my instance security Login had been disabled I have a feeling towards whom may have done this ...
0
votes
1answer
31 views

MySQL Identifying Connection Attempt

I'm seeing the following errors repeatedly in the error log file for our production MySQL server: [Warning] Access denied for user 'root'@'remote.appserver.com' (using password: NO) So, I know ...
0
votes
1answer
173 views

AES 256 data encryption on Mysql

Is there a way to encrypt the whole data of a mysql DB using the AES 256 symmetric encryption method without encrypting the data manually using AES_ENCRYPT ? This article explains about the same ...
2
votes
0answers
88 views

User can create in SSRS, but can't manage objects

We have a user who can create, but is unable to manage objects in SSRS, even though he has content manager permissions and another user who has same permissions who is able to. It is SSRS 2008 R2, ...
2
votes
0answers
208 views

PhpMyAdmin: UploadDir & SaveDir

Regarding UploadDir & SaveDir in phpmyadmin, I have them both set to './save' with permissions at 755. I am the only one using phpmyadmin, but still, could I make this tighter? Thanks PHP 5.3.3 ...
1
vote
0answers
34 views

Auditing AS 400 DB2 library user access

As part of the testing to check for authorized users having access to applications and libraries on AS 400 systems, I need help to figure out a list of users having access to applications hosted on ...
1
vote
0answers
25 views

MySql Audit Changes from Db Admin, Security

I know that you can use triggers (before insert, update, delete) to track the changes in history tables. But this only works if the changes are made by the applications. But in some circumstance, ...
1
vote
0answers
12 views

How do mySQL and web-interface deal with hashed data

I've recently been given access to a mySQL database which will sit behind a website designed to allow people to register their interest in a given subject and provide further information about ...
1
vote
0answers
140 views

Deny permissions for master in SQL Server

I created a new database on a SQL Server 2008 R2 instance and a login/user for it. I have set the user to db_owner so he can't view any other databases on that server but he can see and query the ...
1
vote
0answers
689 views

which role-permission database design?

I want to manage roles and permissions. Most of designs on web look like this tables: Users Roles UserRoles Permissions RolePermissions Here, what is permissions? I am thinking for such a design ...
1
vote
0answers
1k views

EXECUTE AS over Linked Servers

I have a front end that logs into the DB as "logInA", and only has permission to "schemaA" stored procs, which use EXECUTE AS "logInB", (I have also tried EXECUTE AS 'DBO'), to handle all the business ...
1
vote
0answers
437 views

ORACLE SSL using Microsoft Certificate Store for PKI

I am trying to set up PKI SSL authentication between client and server using a Microsoft Certificate Store. Client: Windows 7 64 bit with Oracle client 11.2.0.3.0 Server: Windows 2008 R2 64 bit with ...
0
votes
0answers
8 views

SSRS data source - specify machine account credentials

When I create websites in IIS that connect to a SQL Server database I can set the website to run as the machine account and give permissions to that machine account within SQL Server, which allows me ...
0
votes
0answers
133 views

Linked Server Security under SQL Agent Job Context

I have two SQL servers V1 and V2. Both 2012. V1 has linked server connection to V2. There are two Windows accounts: one running SQL server, the other running the Agent service. The two accounts are ...
0
votes
0answers
28 views

SQL database rejoined to new SQL Server 2008 R2. Users are still unable to connect

The below error appears when our users attempt to connect to our database following a complete rebuild of our SQL server and restore of the MDL file: We have created user accounts on the new SQL ...
0
votes
0answers
50 views

SQL Server Replication (Login failed for user 'NT Service\SQLAgent$SQL2014')

I'm trying to setup a replication on my local computer. I setup the distributor, the publisher and the subscriber. When I launch replication monitor on the publisher instance it returns the ...
0
votes
0answers
102 views

Mongo replica-set authentication error opening file: keyfile Permission denied

The mongo service fails to load when using a keyfile. I've been getting a "Permission denied" error. All permissions are granted to every user, and I've tried moving the file around to different ...
0
votes
0answers
23 views

What are the best practises for locking down an SQL Server Instance Data/Log directories?

We have our own on SQL Server instance on a client's system. Other vendors also have instances on there. In order to prevent access to our data we are limiting the user access to our data using ...
0
votes
0answers
18 views

Joining 2 big tables turn into a server down problem

Recently I was using a database (MySQL with Workbench) in the company that I work for (I'm a business analyst, not a DBA), and wrongly I created a query joining 2 tables that basically are the same. ...
0
votes
0answers
31 views

Application Role and access second database

I have written a script to create an audit trails to my database in a second one db. So far I had no problems during tests on my dev machine from SQL Server Management Studio. Problems started to ...
0
votes
0answers
117 views

Login failed for a user in a Domain Local Group

I have recently been considering moving from using SQL Logins in my applications, to a model using Windows Authentication using Active Directory groups My intention is to allow users access to ...
0
votes
0answers
27 views

User grants and functions in a replicated DB

I manage a MySQL DB with replication enabled (with binary logs). On this DB I have 2 users : one in read/write on the MASTER and one in read-only on the MASTER and the SLAVE. The developer who uses ...
0
votes
0answers
186 views

Oracle data obfuscation on specific columns with set field sizes

Would like to obfuscate data held in Oracle tables, but: Requirements only apply to specific columns e.g. personal data obfuscated value should not be longer then column size possibly only ...
0
votes
0answers
77 views

How to protect MySQL database from widespread data theft and modification if SQL injection is successful?

I am looking into a practical defense in depth strategy which helps to limit the damage if, for some reasons, an attacker succeeds in performing an SQL injection. Supposing the website contains ...
0
votes
0answers
54 views

How to secure SQL database?

I made a little application with a MySQL database. I want to secure my database.I think user name and password is not enough to protect it. Because anyone can access the database by copying database ...