Questions tagged [access-control]

In information technology access control is a technique that is used to determine who can use which information or features by giving or denying authorization to authenticated or anonymous users.

Filter by
Sorted by
Tagged with
1
vote
0answers
27 views

Best practices for users credentials [closed]

I am designing a C# client to connect to a MySQL DB and am having second thoughts on my design. The users have credentials in order login in the C# client, so now it is designed like this: 1 - the C# ...
1
vote
1answer
603 views

Postgres get function owner

I would like to be able to get a table of function names and function owner names. Currently, this query returns a list of functions for a given schema: SELECT proname FROM pg_catalog....
0
votes
1answer
24 views

Why do databases in mongodb have roles?

I have read about mongodb role based access control and I have understood it to a large extent. I was going through this tutorial and when you run show roles on the mongo shell it returns a different ...
1
vote
1answer
38 views

What are the real life uses of role based authentication control in a database? [closed]

I am new to database management. I was going through the mongodb docs for Role Based Authentication Control. I have understood how it works, but I have a few questions. How is it applied in real life ...
3
votes
1answer
292 views

In the context of another principal what permissions hinge on the identity of the database owner?

By "database owner", here, I mean the principal whose SID is sys.databases.owner_sid. This answer to the question of best practices for database ownership includes the following: The answer here ...
13
votes
2answers
2k views

Why is database ownership by groups not allowed? Which user should own a database?

Per microsoft "ALTER AUTHORIZATION for databases for SQL Server": Requirements for the new owner: The new owner principal must be one of the following: A SQL Server authentication ...
0
votes
2answers
24 views

If I need to restrict access to certain databases?

So I've just created a MySQL server. I also created some users only having specific access to certain databases, but do I need to restrict access to default databases to the users I've created? If so, ...
0
votes
1answer
31 views

Can I grant access to a MySQL user for a single partition of a table?

Is there a way, in MySQL, to grant access to a single partition of a table to a specific user? I see no way in the doc for that, but maybe I'm missing it... Here's a test case: CREATE TABLE testing (...
0
votes
0answers
30 views

Role-, Row-, Column- and Cell-based Access Control

Here is my understanding about these access control mechanisms: Role-based access control means that with this role, you can access this table but with that role you may not. Row-based access control ...
0
votes
0answers
9 views

Would MySQL `x.example.%` host match the `x.example.attacker.com` domain?

According to the mysql documentation the host x.example.% matches connecting from x.example.net, x.example.com, x.example.edu, and so on. I don't have the setup to test, so do you know if % also ...
1
vote
0answers
518 views

mongodb keyfile permission denied

I configured in /etc/mongod.conf to enforce keyfile access control, in security option enabled, keyFile is /root/dbtest.key (the absolute path of keyfile). I already gave the ownership to mongodb user ...
0
votes
1answer
40 views

How can I setup users/groups in PostgreSQL so that each user has privileges on objects created by other users in the same group?

I have created a group (role) called "employees" and I've created some users that are its member and that inherit its rights. I have a database owned by the group "employees". The goal: To setup ...
3
votes
1answer
314 views

How to grant execute permissions to a stored procedure but not to the underlying databases

I am trying to allow a user to run a stored procedure while restricting them read/write access to the underlying tables. I am able to complete this with other stored procedures, but the one I am ...
1
vote
0answers
88 views

PostgreSQL 10.7: pg_restore deletes access privileges on public schema

I have created a "custom" dump on one PostgreSQL 10.7 server and am restoring it on another PostgreSQL 10.7 server. Both on Linux. This is all very standard: pg_restore --single-transaction --clean -...
0
votes
0answers
26 views

Unable to view MySQL db stored procedure

We have many stored procedures created with SQL SECURITY DEFINER by user A Now user B is responsible for maintaining some of the stored procedure. However user B is unable to view/update the stored ...
11
votes
5answers
3k views

How to deny access to SQL Server to certain login over SSMS, but allow over .Net SqlClient Data Provider

We have a situation where Developers do not have any UPDATE permissions, BUT they work with applications and see connection strings -> they know passwords from some SQL accounts (example SQLLogin1) ...
1
vote
0answers
180 views

Granting access control on specific columns in PostgreSQL

The following screenshot is from an online learning platform I am using to learn SQL (more specifically PostgreSQL). I am concerned that I'm not understanding the following paragraph correctly. It ...
1
vote
1answer
3k views

`“C:\xampp\mysql\bin”' is not recognized as an internal or external command,operable program or batch file [closed]

I am trying to access to mysql from windows command prompt by this command: "C:\xampp\mysql\bin" mysql -u root - p But it sayas: `"C:\xampp\mysql\bin"' is not recognized as an internal or ...
0
votes
1answer
258 views

Designing Database access levels [closed]

At the moment our production and development databases give sysadmin access to all of devops, third party developers, etc. I'd like to propose new access levels based upon existing AD groups, but I'm ...
1
vote
1answer
319 views

pg_hba.conf entry query

I'm trying to formulate a rule from pg_hba.conf file. Thus far I have understood that pg_hba.conf file is used to give access to the specific user for a specific host. But I just want to take a second ...
2
votes
2answers
166 views

How do I Configure Per Database Roles for PostgreSQL?

The default for PostgreSQL is that roles are created per cluster not per database. I would like to have per database roles. I could have sworn I once read about a way to set that up but now I can't ...
1
vote
1answer
3k views

Need help designing an Access Control List (ACL) database structure

I need help with a database design for an ACL (Access Control List) system. Business rules Let me explain the requirements: Any business object in the system will get an ACL that explicitelly ...
-1
votes
1answer
53 views

Getting User Access in Individual Databases MSSQL

So, here is the scenario. I need to give user access on multiple databases ( but not all on the instance), and in this case, i cannot use AD group which is already having certain grants on all ...
4
votes
2answers
12k views

What does GRANT CONTROL on a schema do in MSSQL?

I'm using SQL Server 2016 for these tests. The following did not allow me to create a table in schema S for user U USE [D]; GRANT CONTROL ON SCHEMA :: [S] TO [U]; But this did: USE [D] GRANT ALTER ...
1
vote
2answers
94 views

Is it possible to grant role privileges to a user by document (not collection) in MongoDB?

I am working on a database for investigation purposes. I want to make some of that information public but other pieces of information are highly confidential. I want to create a user and grant ...
3
votes
1answer
6k views

How to allow user access to non-owned objects in Postgres?

I am in the process of creating a pre-prod Postgres database, and want to ensure the accessing user has limited access. I want to setup tables in such a way that the accessing user can't CREATE, DROP ...
2
votes
1answer
196 views

I'm a MS SQL DB Developer looking to get more permissions on the server [closed]

So I am trying to use Visual studio and I can't import the DEV database into a project. I run into this issue a couple times a week since I am either creating SSIS Packages, or building a database ...
0
votes
1answer
70 views

Row-based Permission in SQL Server Newbie Question

I am relatively new to this( Database, general security issues) , so I may be over-complicating this. I have a database containing student grades . I want to design a view in which I restrict access ...
2
votes
1answer
71 views

Access rights on SQL Server 2012

I have a Microsoft SQL Server 2012 server used by two Active Directory groups. How can I configure this groups so that: group 1: Can do everything on database level, including read everything, ...
2
votes
1answer
2k views

Deny dbo schema permission

I'm trying to deny all permissions on the dbo schema for a particular user, as I only want that user to access a specific schema. When I try the following (using sa): DENY CONTROL, ALTER ON SCHEMA :: ...
1
vote
0answers
322 views

Access-PostgreSQL: Link tables as readonly, edit registers in form

I have a PostgreSQL database working as backend and I have to develop an Access frontend solution for regular users of this database. I decided it best to create some forms to manage the input, ...
0
votes
2answers
110 views

Scipt User roles and permissions

I am having issues with the user accounts in SQL Server v 11.0.6020. I need to run a script that will allow for the copy of the principal user account: 'TrainID1' and all of the user rights and ...
1
vote
1answer
44 views

Restrict access to Edition- or instance-specific databases

I have the following issue with SQL Server. On my Windows Sever, SQL Server 2008 Express Edition is running. Now I have installed SQL Server 2008 Web Edition on the same server. My problem is, when ...
0
votes
1answer
43 views

Determining whether a MySQL column is ever used

How can I determine whether a particular column in a MySQL table is ever SELECTed or explicitly UPDATEd or INSERTed or referenced in a WHERE clause? It'd be nice if I could determine the db user who ...
1
vote
2answers
188 views

Revoking execute access on builtin functions on SQL Server

I am trying to lock down a SQL Server database server and I want to revoke execute access from all users on specific builtin functions such as LEFT, RIGHT SUBSTRING, etc. When I try to execute: ...
1
vote
0answers
26 views

Configuring Custom Hierarchical Reporting Roles

I need to set up some custom database roles within Microsoft SQL Server 2014 for reporting purposes. I need to set up the following roles: Administrative Reporting Role Read-only access to some ...
1
vote
0answers
156 views

How would I access a system view in SQL Azure master database without logging into master?

My service needs to periodically read sys.resource_stats which is only in "master" database of SQL Azure server. The service currently only accesses a "regular" database in the same server. Accessing "...
3
votes
1answer
71 views

Use large set of data in multiple databases

I have been thinking about this a lot but somehow can't figure out how to deal with it in an efficient matter. Say you have a large set "X" of data that consists of multiple tables. For the sake of ...
0
votes
1answer
1k views

SQL Server 2014 All Administrator Accounts Disabled

I made the most ridiculous thing. I accidentally disabled both remote logins and database accesses for the Administrator accounts (including the one with Windows Authentication (Administrator account) ...
1
vote
0answers
36 views

Access algorithms in Partial Index implementation of PostgreSQL 9.4?

I am studying big-O time-space complexities of different algorithms with the partial index of PostgreSQL 9.4: introsort (O(n log n)-time, O(log n)-space) and heapsort (O(n log(n))-time O(1)-space), ...
4
votes
3answers
414 views

MS-SQL 2014 Log Shipping: Access permission question

Wonder if someone could provide some advice or point me in the right direction towards achieving the below objective please. Unfortunately I have not been very successful in finding a solution online. ...
2
votes
4answers
739 views

Individual SQL account per user?

I am designing a web application that will have probably around ~1000 users. The website is facing the internet but it can only be used by partners (i.e. the general public cannot just "sign up an ...
2
votes
1answer
4k views

PostgreSQL: a Login Role to only access Views [duplicate]

I need to write a SQL file which must do the following: create a role called 'selection' grant connect/usage to the current database grant select/execute to all views of all schemas (or at least on ...
2
votes
1answer
2k views

Query for hierarchical RBAC scenario

I have a SQLite database with a hierarchical role-based access control (RBAC) data model. In this model, users are granted permissions to perform certain actions against various resources either ...
2
votes
1answer
7k views

How to set user-level security in 2007+ MS Access?

I've read this MS info which should cover my problem. There are quite clear steps: Open the .mdb or .mde file that you want to help protect. On the Database Tools tab, in the Administer group, ...
0
votes
2answers
59 views

How to access to DB Instance from another DB Instance with Windows Authentication

I have two database servers DB_INSTANCE1 DB_INSTANCE2 Is it possible to access from DB_INSTANCE1\DB1 SQL script to DB_INSTANCE2\DB2 tables without using SQL Logins? (not every database servers are ...
14
votes
1answer
48k views

Grant access to all tables of a database

I recently wanted to share regular access rights with one user of a server and I realized that a simple CREATE USER and GRANT ALL ON DATABASE commands didn't let him run a simple SELECT on the data. ...
4
votes
3answers
149 views

How do I prevent my clients viewing my database definition when it is installed on their server?

I want to give my database to the client to install on their server. However, I want to deny the client rights to see the tables and stored procedures and also want to restrict that database to run ...
0
votes
1answer
59 views

Does DB2 support host based access control?

Coming from MySQL I was wondering whether DB2 has something similar to MySQL's user@host access rights concept.
1
vote
1answer
733 views

My connection to a Mysql DB has been blocked after spamming queries, for how long?

I am creating a web application that depends on querying a legacy DB without an API. It's MySql. Off course the lack of an API eventually got me in trouble. A feedback loop while testing the app ...