New answers tagged

2

I wonder if your config.inc.php has a properly configured controluser. The error message (indicating that permission was denied for user '') suggests some problem with your configuration file or the controluser itself. Please look for the two controluser lines which should read as: $cfg['Servers'][$i]['controluser'] = 'admin_db1'; ...


3

Superusers are always exempt from lowly permission checks. The documentation: superuser status A database superuser bypasses all permission checks, except the right to log in. This is a dangerous privilege and should not be used carelessly; ... To see whether your current user is a superuser: SHOW IS_SUPERUSER; To list all superuser roles: ...


0

There are so many possibilities, but here are a few things to check: that the user is a member of the ADB group in the Active Directory. that ADB exists as a server principal (a login). Example: SELECT * FROM sys.server_principals WHERE [name] LIKE '%ADB'; that this login has a user in the database in question: SELECT * FROM ...


0

Please check in [Database Properties-> Permissions Tab] and check if there are any denies on Create Table option. Also on the other roles like db_public .


0

Another way to copy files to the networked computer is to use source computer domain credentials - http://dba.stackexchange.com/a/128282/51798


2

Oh, I just figured out the correct grant statement. All my views are working now. I can audit my user/database/role permissions using these views. GRANT SELECT ON DBC TO DBA_TABLES_TEST WITH GRANT OPTION; Thank you.


2

To make this happen, you need to give the computer domain account on which you have SQL Server installed rights to write to the share [Folder] on [ComputerName]. Say you have a computer SRV-SQLSERVER, and SQL services you run with NT Service*, but in some situation you can't create a domain account for them. But you need to store backups on other domain ...


0

Recreating linked server without @provstr=N'ApplicationIntent=ReadOnly' parameter solved no login-mapping existserror. So select permission is enough.


2

The message you are getting is telling you that there is no mapping between the credentials you have supplied and credentials on the target machine. You need to ensure that the credentials you use to setup your linked server also has a login or can be mapped to a login on the linked server. I suspect that when you set it up you specified the option Be made ...


0

I had this same error when trying to modify the file growth properties of the log file of a production database. I tried using SSMS and had the same error: Property size is not available for XXX database. I used T-SQL to modify the database log file instead. USE [master] GO ALTER DATABASE [MyDatabase] MODIFY FILE ( NAME = N'MyDatabase_log', ...


1

Here is a very nice script by Pavel Pawlowski to do the job: http://www.pawlowski.cz/2011/03/cloning-user-rights-database/ Main advantage: script/copy Role Memberships script/copy Object Level Permissions script/copy Database Level Permissions I'm NOT the author of this script. The script is copy-pasted from this link on Pavel Pawlowski blog, see the ...


0

@J.P Masangcay, I have gone through your Error log and find out two things which is as follows : 1) Error: 17204 2) OS error: 5(Access is denied) I would like to say that as @ypercubeᵀᴹ already comments it's related to os like OS permission issue. So, as per above errors definitely we can say that it's Windows Service Accounts based errors. The SQL ...


5

There are a couple of approaches you can take. The better one is to grant VIEW SERVER STATE. This gives you access to the DMOs that give you information about the server. The other version (which I don't recommend) is to grant CONTROL SERVER. This permission is very similar to SYSADMIN but you can do DENYs. So you could DENY CONNECT on each of the user ...


1

one liner (change -uroot to -u$USER_NAME for use with other user): mysql -uroot -p -sNe"`mysql -uroot -p -se"SELECT CONCAT('SHOW GRANTS FOR \'',user,'\'@\'',host,'\';') FROM mysql.user;"`"


0

This is a demanding task that may not give the exact answer. The only exact way is that you know requirement of applications that use that user privileges to access specific DB. You must know: does that particular user administrate MySQL server? If not, remove privileges to 'mysql', 'performance_schema' and 'information_schema'. Second step: If you are ...


4

With SQL Server 2008 R2 (through current version), you can use SQL Server Audit which uses Extended Events. Look at Understanding SQL Server Audit: Auditing an instance of SQL Server or a SQL Server database involves tracking and logging events that occur on the system. You can use several methods of auditing for SQL Server, as described in Auditing ...


6

You have to change the service account in SQL Server Configuration Manager in order to have all required permissions applied to the service account. Open Configuration Manager, select SQL Server Services in the treeview on the left, then open the properties window of the desired SQL Server instance. Set the service account as follows: Then open file ...


0

What is the underlying problem you are trying to solve?? UMASK may be the wrong approach. The files and directories must be fully accessible by the mysql "user", so directories need at least 0700 and files need 0600. If you want the "world" to be able to read them (but not write them), 0755 and 0644. But why would you want that? And you probably have to ...


1

Well, I found online that the environment variable UMASK and UMASK_DIR must be set, regardless of what the command umask will output. One must add export UMASK=0640 and export UMASK=0750 to the top of their startup script, immediately before calling mysqld_safe. The leading zero is important to switch to the octal numbering system. The first thing I tried ...


3

The easiest way seems to be using the sys.crypt_properties Catalog View which holds the relationship between Certificates / Asymmetric Keys and signed modules, as well as the usage (i.e. Signature or Counter-Signature). There are a few other means of finding which modules are signed, but none seem to indicate Signature vs Counter-Signature. SELECT ...


0

I had a similar issue where I still got the same "access denied" error, even after editing the DCOM permissions as described in the linked MSDN post. In my case, the solution was to add the domain account in question to the local Distributed COM Users group on the SSIS host server. The DCOM permissions were still necessary, just not (in my case) ...


-2

go to the master database and delete the user


1

You don't need to GRANT only on a schema. You can get more specific and GRANT specifically to a table, like this: GRANT ALL ON TABLE xyz.items TO admin_role; but note that GRANT ALL and REVOKE ALL are very large sledgehammers for building very small spice racks. Consider reviewing the excellent GRANT documentation which covers this in detail. For your ...


1

From http://www.postgresql.org/docs/9.5/static/sql-altersequence.html You must own the sequence to use ALTER SEQUENCE. To change a sequence's schema, you must also have CREATE privilege on the new schema. To alter the owner, you must also be a direct or indirect member of the new owning role, and that role must have CREATE privilege on the sequence's ...


0

Sounds like you didn't change the PGDATA environment variable, so postgres is looking in the original (no-longer-there) directory. Try this: http://stackoverflow.com/a/32575527/3657905


4

Up until 9.4 You can go and ask the system catalogs (pg_type, to be precise): SELECT rolname FROM pg_type t JOIN pg_authid r ON typowner = r.oid WHERE typname = 'bla'; usename ───────── dezso From PostgreSQL 9.5 on From this version on, there is a new object identifier type called regrole, and it makes the query a bit simpler: SELECT ...


1

I would work on educating your security team about jobs...they are server/instance level objects, not database level objects, so db_owner seems severely limited. Ola recommends sysadmin for the job owners: Which permissions are needed for the SQL Server Maintenance Solution to work? If you are using SQL Server Agent, the jobs run under the SQL ...



Top 50 recent answers are included