Questions tagged [access-control]

In information technology access control is a technique that is used to determine who can use which information or features by giving or denying authorization to authenticated or anonymous users.

Filter by
Sorted by
Tagged with
-1 votes
2 answers
73 views

readonly user on PostgreSQL 14 let me create new tables, why?

I try to apply any of these to create read_only_user: https://docs.snaplet.dev/guides/postgresql https://www.commandprompt.com/education/how-to-create-a-read-only-user-in-postgresql/#:~:text=...
Eric Ouellet's user avatar
0 votes
0 answers
19 views

Possible to revoke default ability for all future users to connect to *any* database?

I have a lab with a database that I would like to use as a "multi-tenant" database, in that I would like to create a database for each of the applications that I'm running and segregate ...
eriknelson's user avatar
0 votes
1 answer
182 views

SQL Server 2012 how to audit user's access to database tables and views?

We have a read-only login account that unfortunately was created without proper planning, and now users throughout the company are using this login to access tables and views in our database. The ...
Fandango68's user avatar
0 votes
1 answer
354 views

Why can't my read-only user role see any of my tables' primary key information in psql?

I have a PostgreSQL database on Azure, and I've created a readonly_user role that allows for external parties to connect to the db in a read-only capacity using a connection string. This readonly_user ...
justadampaul's user avatar
0 votes
0 answers
163 views

How to execute Stored Procedure by dedicated user with limited rights

My question is similar to Rights to execute stored procedure, but not read underlying tables directly, however my storedprocedure reads from different databases. I'm trying to read databases matching ...
Oak_3260548's user avatar
0 votes
3 answers
907 views

Is there a privilege in Oracle that lets a user view the objects in another schema?

Is there a privilege in Oracle that lets a user view or not view the list of objects in another schema? I've got a user where I've given them select rights to a view in another user's schema. However, ...
BIBD's user avatar
  • 164
0 votes
2 answers
825 views

Hide schemas (tables,views,etc under schema) from users

I want users not to be able to see the objects under a schema , as well as the schema. I have denied their access to all these objects on select, update, etc, which is successful. Hence they can’t ...
SSR's user avatar
  • 9
1 vote
0 answers
32 views

What are the disadvantages of RBAC with DENY command?

RBAC implementations used by databases like Postgres or MongoDB have additive permissions. By additive, I mean that the user's permissions are the sum of all the permissions granted to them by their ...
Daniel Rearden's user avatar
1 vote
1 answer
243 views

Enable remote access to database via proxy server

What's the most painless way to create something like a proxy server so that my dev team can access a database from anywhere? The server in question is a managed MongoDB database. Currently, I am just ...
Anson Kao's user avatar
  • 111
1 vote
0 answers
89 views

postgresql is my approach to row-based access control not simpler and more efficient under my stated assumptions?

When you have a 3 tier system with an application server in the middle, using a single database connection user but managing application users differently as it is typically done, how do you implement ...
Gunther Schadow's user avatar
1 vote
2 answers
331 views

How can one authenticate with AzAD while using Read-SqlTableData to read AzSQL tables

How should one specify the User ID while creating the $sqlcc object when using Read-SqlTableData to read a table in AzSQL with an Azure account? $sqlcc = new-object ('System.Data.SqlClient....
Ayan Mullick's user avatar
0 votes
0 answers
789 views

Azure Synapse - Need to have table access to View?

I've been trying to find information on this for quite some time but I couldn't find any confirmed results. I know that we can grant access to view without granting explicit access to the base table ...
zuheir's user avatar
  • 1
2 votes
2 answers
5k views

In trino I keep getting `Access Denied: Cannot select from table system.jdbc.tables`

I just created a new user dataengineer and user group data-engineer When I try to connect with the user dataengineer using dbeaver I get the following errors. SQL Error [4]: Query failed (#...
nelaaro's user avatar
  • 727
0 votes
1 answer
392 views

How do I prevent users from accessing mysql?

I installed MariaDB. I started the server as a local server(127.0.0.1:3306). I want to make sure that the www-data user can't access it. I tried to disable the mysql command for that user. But anyone ...
user avatar
0 votes
1 answer
311 views

Create Temporary Access to production support

We're thinking of creating a web site where a manager can provide temporary access to a person for a limited set of data in our production SQL azure database for production support. Auditing is ...
Zippo76's user avatar
0 votes
1 answer
157 views

is it safe to grant permission to all users in Microsoft sql server

I have a global production server and database, as I all users should have access to it by remote desktop. Is it possible to grant NTFS permission on all database files (mdf+ldf files) to all users? ...
saber tabatabaee yazdi's user avatar
2 votes
1 answer
156 views

Allow user to GRANT certain permissions to others

I have tried googling this but may well be using the wrong terms... permissions and the like aren't my strong point. What I want to do is first create a role - eg 'Snr_Analyst' - with certain ...
JShark's user avatar
  • 278
0 votes
1 answer
46 views

Explicit usernames in references to objects

Much of our code -- both in external programs and in stored procedures -- uses explicit usernames, when referring to various DB-objects: SELECT * FROM prod.object or prod.StoredProcedure(.....) This ...
Mikhail T.'s user avatar
1 vote
0 answers
78 views

Best practices for users credentials [closed]

I am designing a C# client to connect to a MySQL DB and am having second thoughts on my design. The users have credentials in order login in the C# client, so now it is designed like this: 1 - the C# ...
Felipe's user avatar
  • 19
12 votes
1 answer
18k views

Postgres get function owner

I would like to be able to get a table of function names and function owner names. Currently, this query returns a list of functions for a given schema: SELECT proname FROM pg_catalog....
4x0v7's user avatar
  • 123
0 votes
1 answer
76 views

Why do databases in mongodb have roles?

I have read about mongodb role based access control and I have understood it to a large extent. I was going through this tutorial and when you run show roles on the mongo shell it returns a different ...
YulePale's user avatar
  • 127
1 vote
1 answer
44 views

What are the real life uses of role based authentication control in a database? [closed]

I am new to database management. I was going through the mongodb docs for Role Based Authentication Control. I have understood how it works, but I have a few questions. How is it applied in real life ...
YulePale's user avatar
  • 127
3 votes
1 answer
464 views

In the context of another principal what permissions hinge on the identity of the database owner?

By "database owner", here, I mean the principal whose SID is sys.databases.owner_sid. This answer to the question of best practices for database ownership includes the following: The answer here ...
alx9r's user avatar
  • 421
13 votes
2 answers
3k views

Why is database ownership by groups not allowed? Which user should own a database?

Per microsoft "ALTER AUTHORIZATION for databases for SQL Server": Requirements for the new owner: The new owner principal must be one of the following: A SQL Server authentication ...
alx9r's user avatar
  • 421
0 votes
2 answers
779 views

If I need to restrict access to certain databases?

So I've just created a MySQL server. I also created some users only having specific access to certain databases, but do I need to restrict access to default databases to the users I've created? If so, ...
user197577's user avatar
0 votes
1 answer
404 views

Can I grant access to a MySQL user for a single partition of a table?

Is there a way, in MySQL, to grant access to a single partition of a table to a specific user? I see no way in the doc for that, but maybe I'm missing it... Here's a test case: CREATE TABLE testing (...
Xenos's user avatar
  • 195
3 votes
1 answer
2k views

mongodb keyfile permission denied

I configured in /etc/mongod.conf to enforce keyfile access control, in security option enabled, keyFile is /root/dbtest.key (the absolute path of keyfile). I already gave the ownership to mongodb user ...
necroface's user avatar
  • 139
0 votes
1 answer
222 views

How can I setup users/groups in PostgreSQL so that each user has privileges on objects created by other users in the same group?

I have created a group (role) called "employees" and I've created some users that are its member and that inherit its rights. I have a database owned by the group "employees". The goal: To setup ...
user avatar
3 votes
1 answer
3k views

How to grant execute permissions to a stored procedure but not to the underlying databases

I am trying to allow a user to run a stored procedure while restricting them read/write access to the underlying tables. I am able to complete this with other stored procedures, but the one I am ...
skeller's user avatar
  • 31
1 vote
0 answers
492 views

PostgreSQL 10.7: pg_restore deletes access privileges on public schema

I have created a "custom" dump on one PostgreSQL 10.7 server and am restoring it on another PostgreSQL 10.7 server. Both on Linux. This is all very standard: pg_restore --single-transaction --clean -...
David Tonhofer's user avatar
0 votes
1 answer
331 views

Unable to view MySQL db stored procedure

We have many stored procedures created with SQL SECURITY DEFINER by user A Now user B is responsible for maintaining some of the stored procedure. However user B is unable to view/update the stored ...
mulder89520's user avatar
12 votes
6 answers
9k views

How to deny access to SQL Server to certain login over SSMS, but allow over .Net SqlClient Data Provider

We have a situation where Developers do not have any UPDATE permissions, BUT they work with applications and see connection strings -> they know passwords from some SQL accounts (example SQLLogin1) ...
Aleksey Vitsko's user avatar
1 vote
0 answers
4k views

Granting access control on specific columns in PostgreSQL

The following screenshot is from an online learning platform I am using to learn SQL (more specifically PostgreSQL). I am concerned that I'm not understanding the following paragraph correctly. It ...
ptk's user avatar
  • 111
1 vote
1 answer
8k views

`"C:\xampp\mysql\bin"' is not recognized as an internal or external command,operable program or batch file [closed]

I am trying to access to mysql from windows command prompt by this command: "C:\xampp\mysql\bin" mysql -u root - p But it sayas: `"C:\xampp\mysql\bin"' is not recognized as an internal or ...
user3486308's user avatar
0 votes
1 answer
516 views

Designing Database access levels [closed]

At the moment our production and development databases give sysadmin access to all of devops, third party developers, etc. I'd like to propose new access levels based upon existing AD groups, but I'm ...
Asher's user avatar
  • 303
1 vote
1 answer
740 views

pg_hba.conf entry query

I'm trying to formulate a rule from pg_hba.conf file. Thus far I have understood that pg_hba.conf file is used to give access to the specific user for a specific host. But I just want to take a second ...
Ratatouille's user avatar
2 votes
2 answers
922 views

How do I Configure Per Database Roles for PostgreSQL?

The default for PostgreSQL is that roles are created per cluster not per database. I would like to have per database roles. I could have sworn I once read about a way to set that up but now I can't ...
Gregory Arenius's user avatar
1 vote
1 answer
6k views

Need help designing an Access Control List (ACL) database structure

I need help with a database design for an ACL (Access Control List) system. Business rules Let me explain the requirements: Any business object in the system will get an ACL that explicitelly ...
Raul's user avatar
  • 113
-1 votes
1 answer
60 views

Getting User Access in Individual Databases MSSQL

So, here is the scenario. I need to give user access on multiple databases ( but not all on the instance), and in this case, i cannot use AD group which is already having certain grants on all ...
JayM's user avatar
  • 41
4 votes
2 answers
31k views

What does GRANT CONTROL on a schema do in MSSQL?

I'm using SQL Server 2016 for these tests. The following did not allow me to create a table in schema S for user U USE [D]; GRANT CONTROL ON SCHEMA :: [S] TO [U]; But this did: USE [D] GRANT ALTER ...
JustBeingHelpful's user avatar
1 vote
2 answers
119 views

Is it possible to grant role privileges to a user by document (not collection) in MongoDB?

I am working on a database for investigation purposes. I want to make some of that information public but other pieces of information are highly confidential. I want to create a user and grant ...
Malena's user avatar
  • 13
4 votes
1 answer
19k views

How to allow user access to non-owned objects in Postgres?

I am in the process of creating a pre-prod Postgres database, and want to ensure the accessing user has limited access. I want to setup tables in such a way that the accessing user can't CREATE, DROP ...
Andre M's user avatar
  • 275
2 votes
1 answer
346 views

I'm a MS SQL DB Developer looking to get more permissions on the server [closed]

So I am trying to use Visual studio and I can't import the DEV database into a project. I run into this issue a couple times a week since I am either creating SSIS Packages, or building a database ...
Phillip Putzback's user avatar
0 votes
1 answer
77 views

Row-based Permission in SQL Server Newbie Question

I am relatively new to this( Database, general security issues) , so I may be over-complicating this. I have a database containing student grades . I want to design a view in which I restrict access ...
MSIS's user avatar
  • 137
2 votes
1 answer
87 views

Access rights on SQL Server 2012

I have a Microsoft SQL Server 2012 server used by two Active Directory groups. How can I configure this groups so that: group 1: Can do everything on database level, including read everything, ...
H_G's user avatar
  • 123
3 votes
1 answer
3k views

Deny dbo schema permission

I'm trying to deny all permissions on the dbo schema for a particular user, as I only want that user to access a specific schema. When I try the following (using sa): DENY CONTROL, ALTER ON SCHEMA :: ...
Amy Barrett's user avatar
1 vote
0 answers
420 views

Access-PostgreSQL: Link tables as readonly, edit registers in form

I have a PostgreSQL database working as backend and I have to develop an Access frontend solution for regular users of this database. I decided it best to create some forms to manage the input, ...
Feillen's user avatar
  • 191
0 votes
2 answers
299 views

Scipt User roles and permissions

I am having issues with the user accounts in SQL Server v 11.0.6020. I need to run a script that will allow for the copy of the principal user account: 'TrainID1' and all of the user rights and ...
Sean's user avatar
  • 9
1 vote
1 answer
65 views

Restrict access to Edition- or instance-specific databases

I have the following issue with SQL Server. On my Windows Sever, SQL Server 2008 Express Edition is running. Now I have installed SQL Server 2008 Web Edition on the same server. My problem is, when ...
Knight Rider's user avatar
0 votes
1 answer
52 views

Determining whether a MySQL column is ever used

How can I determine whether a particular column in a MySQL table is ever SELECTed or explicitly UPDATEd or INSERTed or referenced in a WHERE clause? It'd be nice if I could determine the db user who ...
pilcrow's user avatar
  • 360