Questions tagged [access-control]

In information technology access control is a technique that is used to determine who can use which information or features by giving or denying authorization to authenticated or anonymous users.

Filter by
Sorted by
Tagged with
0 votes
0 answers
20 views

postgresql is my approach to row-based access control not simpler and more efficient under my stated assumptions?

When you have a 3 tier system with an application server in the middle, using a single database connection user but managing application users differently as it is typically done, how do you implement ...
user avatar
1 vote
2 answers
79 views

How can one authenticate with AzAD while using Read-SqlTableData to read AzSQL tables

How should one specify the User ID while creating the $sqlcc object when using Read-SqlTableData to read a table in AzSQL with an Azure account? $sqlcc = new-object ('System.Data.SqlClient....
user avatar
0 votes
0 answers
85 views

Azure Synapse - Need to have table access to View?

I've been trying to find information on this for quite some time but I couldn't find any confirmed results. I know that we can grant access to view without granting explicit access to the base table ...
user avatar
  • 1
1 vote
1 answer
413 views

In trino I keep getting `Access Denied: Cannot select from table system.jdbc.tables`

I just created a new user dataengineer and user group data-engineer When I try to connect with the user dataengineer using dbeaver I get the following errors. SQL Error [4]: Query failed (#...
user avatar
  • 637
0 votes
0 answers
19 views

Showing a different set of fields for different rows

In my Postgres database I have a table of employees: CREATE TABLE employee ( id integer PRIMARY KEY GENERATED ALWAYS AS IDENTITY name text, email text, phone text, department text )...
user avatar
0 votes
1 answer
89 views

How do I prevent users from accessing mysql?

I installed MariaDB. I started the server as a local server(127.0.0.1:3306). I want to make sure that the www-data user can't access it. I tried to disable the mysql command for that user. But anyone ...
user avatar
0 votes
1 answer
63 views

Create Temporary Access to production support

We're thinking of creating a web site where a manager can provide temporary access to a person for a limited set of data in our production SQL azure database for production support. Auditing is ...
user avatar
0 votes
1 answer
64 views

is it safe to grant permission to all users in Microsoft sql server

I have a global production server and database, as I all users should have access to it by remote desktop. Is it possible to grant NTFS permission on all database files (mdf+ldf files) to all users? ...
user avatar
2 votes
1 answer
118 views

Allow user to GRANT certain permissions to others

I have tried googling this but may well be using the wrong terms... permissions and the like aren't my strong point. What I want to do is first create a role - eg 'Snr_Analyst' - with certain ...
user avatar
  • 278
0 votes
1 answer
42 views

Explicit usernames in references to objects

Much of our code -- both in external programs and in stored procedures -- uses explicit usernames, when referring to various DB-objects: SELECT * FROM prod.object or prod.StoredProcedure(.....) This ...
user avatar
0 votes
0 answers
40 views

Good way to limit access of rows different for different users? (Postgres)

I am writing a closed application in which a user enters his db-connection details and then all queries are hard coded. Let's assume I got a table "tbl" with 1000 entries (rows). One day the ...
user avatar
1 vote
0 answers
55 views

Best practices for users credentials [closed]

I am designing a C# client to connect to a MySQL DB and am having second thoughts on my design. The users have credentials in order login in the C# client, so now it is designed like this: 1 - the C# ...
user avatar
  • 19
7 votes
1 answer
9k views

Postgres get function owner

I would like to be able to get a table of function names and function owner names. Currently, this query returns a list of functions for a given schema: SELECT proname FROM pg_catalog....
user avatar
  • 73
0 votes
1 answer
44 views

Why do databases in mongodb have roles?

I have read about mongodb role based access control and I have understood it to a large extent. I was going through this tutorial and when you run show roles on the mongo shell it returns a different ...
user avatar
  • 127
1 vote
1 answer
40 views

What are the real life uses of role based authentication control in a database? [closed]

I am new to database management. I was going through the mongodb docs for Role Based Authentication Control. I have understood how it works, but I have a few questions. How is it applied in real life ...
user avatar
  • 127
3 votes
1 answer
326 views

In the context of another principal what permissions hinge on the identity of the database owner?

By "database owner", here, I mean the principal whose SID is sys.databases.owner_sid. This answer to the question of best practices for database ownership includes the following: The answer here ...
user avatar
  • 261
13 votes
2 answers
3k views

Why is database ownership by groups not allowed? Which user should own a database?

Per microsoft "ALTER AUTHORIZATION for databases for SQL Server": Requirements for the new owner: The new owner principal must be one of the following: A SQL Server authentication ...
user avatar
  • 261
0 votes
2 answers
297 views

If I need to restrict access to certain databases?

So I've just created a MySQL server. I also created some users only having specific access to certain databases, but do I need to restrict access to default databases to the users I've created? If so, ...
user avatar
0 votes
1 answer
192 views

Can I grant access to a MySQL user for a single partition of a table?

Is there a way, in MySQL, to grant access to a single partition of a table to a specific user? I see no way in the doc for that, but maybe I'm missing it... Here's a test case: CREATE TABLE testing (...
user avatar
  • 175
1 vote
0 answers
2k views

mongodb keyfile permission denied

I configured in /etc/mongod.conf to enforce keyfile access control, in security option enabled, keyFile is /root/dbtest.key (the absolute path of keyfile). I already gave the ownership to mongodb user ...
user avatar
  • 119
0 votes
1 answer
155 views

How can I setup users/groups in PostgreSQL so that each user has privileges on objects created by other users in the same group?

I have created a group (role) called "employees" and I've created some users that are its member and that inherit its rights. I have a database owned by the group "employees". The goal: To setup ...
user avatar
  • 1
3 votes
1 answer
2k views

How to grant execute permissions to a stored procedure but not to the underlying databases

I am trying to allow a user to run a stored procedure while restricting them read/write access to the underlying tables. I am able to complete this with other stored procedures, but the one I am ...
user avatar
  • 31
1 vote
0 answers
229 views

PostgreSQL 10.7: pg_restore deletes access privileges on public schema

I have created a "custom" dump on one PostgreSQL 10.7 server and am restoring it on another PostgreSQL 10.7 server. Both on Linux. This is all very standard: pg_restore --single-transaction --clean -...
user avatar
0 votes
1 answer
136 views

Unable to view MySQL db stored procedure

We have many stored procedures created with SQL SECURITY DEFINER by user A Now user B is responsible for maintaining some of the stored procedure. However user B is unable to view/update the stored ...
user avatar
12 votes
6 answers
6k views

How to deny access to SQL Server to certain login over SSMS, but allow over .Net SqlClient Data Provider

We have a situation where Developers do not have any UPDATE permissions, BUT they work with applications and see connection strings -> they know passwords from some SQL accounts (example SQLLogin1) ...
user avatar
1 vote
0 answers
1k views

Granting access control on specific columns in PostgreSQL

The following screenshot is from an online learning platform I am using to learn SQL (more specifically PostgreSQL). I am concerned that I'm not understanding the following paragraph correctly. It ...
user avatar
  • 111
1 vote
1 answer
6k views

`"C:\xampp\mysql\bin"' is not recognized as an internal or external command,operable program or batch file [closed]

I am trying to access to mysql from windows command prompt by this command: "C:\xampp\mysql\bin" mysql -u root - p But it sayas: `"C:\xampp\mysql\bin"' is not recognized as an internal or ...
user avatar
  • 113
0 votes
1 answer
422 views

Designing Database access levels [closed]

At the moment our production and development databases give sysadmin access to all of devops, third party developers, etc. I'd like to propose new access levels based upon existing AD groups, but I'm ...
user avatar
  • 263
1 vote
1 answer
406 views

pg_hba.conf entry query

I'm trying to formulate a rule from pg_hba.conf file. Thus far I have understood that pg_hba.conf file is used to give access to the specific user for a specific host. But I just want to take a second ...
user avatar
2 votes
2 answers
538 views

How do I Configure Per Database Roles for PostgreSQL?

The default for PostgreSQL is that roles are created per cluster not per database. I would like to have per database roles. I could have sworn I once read about a way to set that up but now I can't ...
user avatar
1 vote
1 answer
5k views

Need help designing an Access Control List (ACL) database structure

I need help with a database design for an ACL (Access Control List) system. Business rules Let me explain the requirements: Any business object in the system will get an ACL that explicitelly ...
user avatar
  • 113
-1 votes
1 answer
58 views

Getting User Access in Individual Databases MSSQL

So, here is the scenario. I need to give user access on multiple databases ( but not all on the instance), and in this case, i cannot use AD group which is already having certain grants on all ...
user avatar
  • 49
4 votes
2 answers
23k views

What does GRANT CONTROL on a schema do in MSSQL?

I'm using SQL Server 2016 for these tests. The following did not allow me to create a table in schema S for user U USE [D]; GRANT CONTROL ON SCHEMA :: [S] TO [U]; But this did: USE [D] GRANT ALTER ...
user avatar
  • 2,005
1 vote
2 answers
102 views

Is it possible to grant role privileges to a user by document (not collection) in MongoDB?

I am working on a database for investigation purposes. I want to make some of that information public but other pieces of information are highly confidential. I want to create a user and grant ...
user avatar
  • 13
3 votes
1 answer
13k views

How to allow user access to non-owned objects in Postgres?

I am in the process of creating a pre-prod Postgres database, and want to ensure the accessing user has limited access. I want to setup tables in such a way that the accessing user can't CREATE, DROP ...
user avatar
  • 225
2 votes
1 answer
292 views

I'm a MS SQL DB Developer looking to get more permissions on the server [closed]

So I am trying to use Visual studio and I can't import the DEV database into a project. I run into this issue a couple times a week since I am either creating SSIS Packages, or building a database ...
user avatar
0 votes
1 answer
75 views

Row-based Permission in SQL Server Newbie Question

I am relatively new to this( Database, general security issues) , so I may be over-complicating this. I have a database containing student grades . I want to design a view in which I restrict access ...
user avatar
  • 137
2 votes
1 answer
80 views

Access rights on SQL Server 2012

I have a Microsoft SQL Server 2012 server used by two Active Directory groups. How can I configure this groups so that: group 1: Can do everything on database level, including read everything, ...
user avatar
  • 123
3 votes
1 answer
3k views

Deny dbo schema permission

I'm trying to deny all permissions on the dbo schema for a particular user, as I only want that user to access a specific schema. When I try the following (using sa): DENY CONTROL, ALTER ON SCHEMA :: ...
user avatar
1 vote
0 answers
381 views

Access-PostgreSQL: Link tables as readonly, edit registers in form

I have a PostgreSQL database working as backend and I have to develop an Access frontend solution for regular users of this database. I decided it best to create some forms to manage the input, ...
user avatar
  • 191
0 votes
2 answers
184 views

Scipt User roles and permissions

I am having issues with the user accounts in SQL Server v 11.0.6020. I need to run a script that will allow for the copy of the principal user account: 'TrainID1' and all of the user rights and ...
user avatar
  • 9
1 vote
1 answer
47 views

Restrict access to Edition- or instance-specific databases

I have the following issue with SQL Server. On my Windows Sever, SQL Server 2008 Express Edition is running. Now I have installed SQL Server 2008 Web Edition on the same server. My problem is, when ...
user avatar
0 votes
1 answer
50 views

Determining whether a MySQL column is ever used

How can I determine whether a particular column in a MySQL table is ever SELECTed or explicitly UPDATEd or INSERTed or referenced in a WHERE clause? It'd be nice if I could determine the db user who ...
user avatar
  • 350
1 vote
2 answers
233 views

Revoking execute access on builtin functions on SQL Server

I am trying to lock down a SQL Server database server and I want to revoke execute access from all users on specific builtin functions such as LEFT, RIGHT SUBSTRING, etc. When I try to execute: ...
user avatar
  • 33
1 vote
0 answers
27 views

Configuring Custom Hierarchical Reporting Roles

I need to set up some custom database roles within Microsoft SQL Server 2014 for reporting purposes. I need to set up the following roles: Administrative Reporting Role Read-only access to some ...
user avatar
1 vote
0 answers
157 views

How would I access a system view in SQL Azure master database without logging into master?

My service needs to periodically read sys.resource_stats which is only in "master" database of SQL Azure server. The service currently only accesses a "regular" database in the same server. Accessing "...
user avatar
  • 1,273
3 votes
1 answer
84 views

Use large set of data in multiple databases

I have been thinking about this a lot but somehow can't figure out how to deal with it in an efficient matter. Say you have a large set "X" of data that consists of multiple tables. For the sake of ...
user avatar
  • 133
0 votes
1 answer
1k views

SQL Server 2014 All Administrator Accounts Disabled

I made the most ridiculous thing. I accidentally disabled both remote logins and database accesses for the Administrator accounts (including the one with Windows Authentication (Administrator account) ...
user avatar
  • 155
1 vote
0 answers
37 views

Access algorithms in Partial Index implementation of PostgreSQL 9.4?

I am studying big-O time-space complexities of different algorithms with the partial index of PostgreSQL 9.4: introsort (O(n log n)-time, O(log n)-space) and heapsort (O(n log(n))-time O(1)-space), ...
user avatar
4 votes
3 answers
572 views

MS-SQL 2014 Log Shipping: Access permission question

Wonder if someone could provide some advice or point me in the right direction towards achieving the below objective please. Unfortunately I have not been very successful in finding a solution online. ...
user avatar