Questions tagged [access-control]
In information technology access control is a technique that is used to determine who can use which information or features by giving or denying authorization to authenticated or anonymous users.
90
questions
0
votes
0
answers
46
views
How to execute Stored Procedure by dedicated user with limited rights
My question is similar to Rights to execute stored procedure, but not read underlying tables directly, however my storedprocedure reads from different databases.
I'm trying to read databases matching ...
- 101
0
votes
3
answers
37
views
Is there a privilege in Oracle that lets a user view the objects in another schema?
Is there a privilege in Oracle that lets a user view or not view the list of objects in another schema?
I've got a user where I've given them select rights to a view in another user's schema. However, ...
- 164
0
votes
2
answers
117
views
Hide schemas (tables,views,etc under schema) from users
I want users not to be able to see the objects under a schema , as well as the schema. I have denied their access to all these objects on select, update, etc, which is successful. Hence they can’t ...
- 9
1
vote
0
answers
25
views
What are the disadvantages of RBAC with DENY command?
RBAC implementations used by databases like Postgres or MongoDB have additive permissions. By additive, I mean that the user's permissions are the sum of all the permissions granted to them by their ...
- 183
1
vote
1
answer
79
views
Enable remote access to database via proxy server
What's the most painless way to create something like a proxy server so that my dev team can access a database from anywhere?
The server in question is a managed MongoDB database. Currently, I am just ...
- 111
0
votes
0
answers
66
views
postgresql is my approach to row-based access control not simpler and more efficient under my stated assumptions?
When you have a 3 tier system with an application server in the middle, using a single database connection user but managing application users differently as it is typically done, how do you implement ...
- 405
1
vote
2
answers
161
views
How can one authenticate with AzAD while using Read-SqlTableData to read AzSQL tables
How should one specify the User ID while creating the $sqlcc object when using Read-SqlTableData to read a table in AzSQL with an Azure account?
$sqlcc = new-object ('System.Data.SqlClient....
- 115
0
votes
0
answers
462
views
Azure Synapse - Need to have table access to View?
I've been trying to find information on this for quite some time but I couldn't find any confirmed results. I know that we can grant access to view without granting explicit access to the base table ...
- 1
1
vote
1
answer
2k
views
In trino I keep getting `Access Denied: Cannot select from table system.jdbc.tables`
I just created a new user dataengineer and user group data-engineer
When I try to connect with the user dataengineer using dbeaver I get the following errors.
SQL Error [4]: Query failed (#...
- 667
0
votes
1
answer
255
views
How do I prevent users from accessing mysql?
I installed MariaDB. I started the server as a local server(127.0.0.1:3306). I want to make sure that the www-data user can't access it. I tried to disable the mysql command for that user. But anyone ...
Kavishka Gihan
0
votes
1
answer
169
views
Create Temporary Access to production support
We're thinking of creating a web site where a manager can provide temporary access to a person for a limited set of data in our production SQL azure database for production support. Auditing is ...
- 1
0
votes
1
answer
128
views
is it safe to grant permission to all users in Microsoft sql server
I have a global production server and database, as I all users should have access to it by remote desktop.
Is it possible to grant NTFS permission on all database files (mdf+ldf files) to all users? ...
2
votes
1
answer
123
views
Allow user to GRANT certain permissions to others
I have tried googling this but may well be using the wrong terms... permissions and the like aren't my strong point.
What I want to do is first create a role - eg 'Snr_Analyst' - with certain ...
- 278
0
votes
1
answer
44
views
Explicit usernames in references to objects
Much of our code -- both in external programs and in stored procedures -- uses explicit usernames, when referring to various DB-objects:
SELECT * FROM prod.object
or
prod.StoredProcedure(.....)
This ...
- 136
1
vote
0
answers
65
views
Best practices for users credentials [closed]
I am designing a C# client to connect to a MySQL DB and am having second thoughts on my design.
The users have credentials in order login in the C# client, so now it is designed like this:
1 - the C# ...
- 19
12
votes
1
answer
13k
views
Postgres get function owner
I would like to be able to get a table of function names and function owner names.
Currently, this query returns a list of functions for a given schema:
SELECT proname
FROM pg_catalog....
- 123
0
votes
1
answer
67
views
Why do databases in mongodb have roles?
I have read about mongodb role based access control and I have understood it to a large extent. I was going through this tutorial and when you run show roles on the mongo shell it returns a different ...
- 127
1
vote
1
answer
43
views
What are the real life uses of role based authentication control in a database? [closed]
I am new to database management. I was going through the mongodb docs for Role Based Authentication Control. I have understood how it works, but I have a few questions.
How is it applied in real life ...
- 127
3
votes
1
answer
382
views
In the context of another principal what permissions hinge on the identity of the database owner?
By "database owner", here, I mean the principal whose SID is sys.databases.owner_sid.
This answer to the question of best practices for database ownership includes the following:
The answer here ...
- 321
13
votes
2
answers
3k
views
Why is database ownership by groups not allowed? Which user should own a database?
Per microsoft "ALTER AUTHORIZATION for databases for SQL Server":
Requirements for the new owner:
The new owner principal must be one of the following:
A SQL Server authentication ...
- 321
0
votes
2
answers
536
views
If I need to restrict access to certain databases?
So I've just created a MySQL server. I also created some users only having specific access to certain databases, but do I need to restrict access to default databases to the users I've created?
If so, ...
0
votes
1
answer
288
views
Can I grant access to a MySQL user for a single partition of a table?
Is there a way, in MySQL, to grant access to a single partition of a table to a specific user? I see no way in the doc for that, but maybe I'm missing it...
Here's a test case:
CREATE TABLE testing (...
- 185
2
votes
0
answers
2k
views
mongodb keyfile permission denied
I configured in /etc/mongod.conf to enforce keyfile access control, in security option enabled, keyFile is /root/dbtest.key (the absolute path of keyfile). I already gave the ownership to mongodb user ...
- 129
0
votes
1
answer
214
views
How can I setup users/groups in PostgreSQL so that each user has privileges on objects created by other users in the same group?
I have created a group (role) called "employees" and I've created some users that are its member and that inherit its rights. I have a database owned by the group "employees".
The goal: To setup ...
- 1
3
votes
1
answer
2k
views
How to grant execute permissions to a stored procedure but not to the underlying databases
I am trying to allow a user to run a stored procedure while restricting them read/write access to the underlying tables. I am able to complete this with other stored procedures, but the one I am ...
- 31
1
vote
0
answers
353
views
PostgreSQL 10.7: pg_restore deletes access privileges on public schema
I have created a "custom" dump on one PostgreSQL 10.7 server and am restoring it on another PostgreSQL 10.7 server. Both on Linux.
This is all very standard:
pg_restore --single-transaction --clean -...
- 185
0
votes
1
answer
206
views
Unable to view MySQL db stored procedure
We have many stored procedures created with SQL SECURITY DEFINER by user A
Now user B is responsible for maintaining some of the stored procedure. However user B is unable to view/update the stored ...
12
votes
6
answers
7k
views
How to deny access to SQL Server to certain login over SSMS, but allow over .Net SqlClient Data Provider
We have a situation where Developers do not have any UPDATE permissions, BUT they work with applications and see connection strings -> they know passwords from some SQL accounts (example SQLLogin1) ...
- 5,099
1
vote
0
answers
2k
views
Granting access control on specific columns in PostgreSQL
The following screenshot is from an online learning platform I am using to learn SQL (more specifically PostgreSQL). I am concerned that I'm not understanding the following paragraph correctly.
It ...
- 111
1
vote
1
answer
7k
views
`"C:\xampp\mysql\bin"' is not recognized as an internal or external command,operable program or batch file [closed]
I am trying to access to mysql from windows command prompt by this command:
"C:\xampp\mysql\bin" mysql -u root - p
But it sayas:
`"C:\xampp\mysql\bin"' is not recognized as an internal or ...
- 113
0
votes
1
answer
460
views
Designing Database access levels [closed]
At the moment our production and development databases give sysadmin access to all of devops, third party developers, etc.
I'd like to propose new access levels based upon existing AD groups, but I'm ...
- 273
1
vote
1
answer
487
views
pg_hba.conf entry query
I'm trying to formulate a rule from pg_hba.conf file. Thus far I have understood that pg_hba.conf file is used to give access to the specific user for a specific host. But I just want to take a second ...
- 153
2
votes
2
answers
680
views
How do I Configure Per Database Roles for PostgreSQL?
The default for PostgreSQL is that roles are created per cluster not per database. I would like to have per database roles. I could have sworn I once read about a way to set that up but now I can't ...
- 183
1
vote
1
answer
6k
views
Need help designing an Access Control List (ACL) database structure
I need help with a database design for an ACL (Access Control List) system.
Business rules
Let me explain the requirements:
Any business object in the system will get an ACL that explicitelly ...
- 113
-1
votes
1
answer
58
views
Getting User Access in Individual Databases MSSQL
So, here is the scenario.
I need to give user access on multiple databases ( but not all on the instance), and in this case, i cannot use AD group which is already having certain grants on all ...
- 49
4
votes
2
answers
26k
views
What does GRANT CONTROL on a schema do in MSSQL?
I'm using SQL Server 2016 for these tests.
The following did not allow me to create a table in schema S for user U
USE [D];
GRANT CONTROL ON SCHEMA :: [S] TO [U];
But this did:
USE [D]
GRANT ALTER ...
- 2,027
1
vote
2
answers
103
views
Is it possible to grant role privileges to a user by document (not collection) in MongoDB?
I am working on a database for investigation purposes. I want to make some of that information public but other pieces of information are highly confidential.
I want to create a user and grant ...
- 13
3
votes
1
answer
15k
views
How to allow user access to non-owned objects in Postgres?
I am in the process of creating a pre-prod Postgres database, and want to ensure the accessing user has limited access.
I want to setup tables in such a way that the accessing user can't CREATE, DROP ...
- 245
2
votes
1
answer
307
views
I'm a MS SQL DB Developer looking to get more permissions on the server [closed]
So I am trying to use Visual studio and I can't import the DEV database into a project. I run into this issue a couple times a week since I am either creating SSIS Packages, or building a database ...
0
votes
1
answer
77
views
Row-based Permission in SQL Server Newbie Question
I am relatively new to this( Database, general security issues) , so I may be over-complicating this. I have a database containing student grades . I want to design a view in which I restrict access ...
- 137
2
votes
1
answer
83
views
Access rights on SQL Server 2012
I have a Microsoft SQL Server 2012 server used by two Active Directory groups.
How can I configure this groups so that:
group 1:
Can do everything on database level, including read everything, ...
- 123
3
votes
1
answer
3k
views
Deny dbo schema permission
I'm trying to deny all permissions on the dbo schema for a particular user, as I only want that user to access a specific schema. When I try the following (using sa):
DENY CONTROL, ALTER ON SCHEMA :: ...
- 173
1
vote
0
answers
415
views
Access-PostgreSQL: Link tables as readonly, edit registers in form
I have a PostgreSQL database working as backend and I have to develop an Access frontend solution for regular users of this database.
I decided it best to create some forms to manage the input, ...
- 191
0
votes
2
answers
218
views
Scipt User roles and permissions
I am having issues with the user accounts in SQL Server v 11.0.6020. I need to run a script that will allow for the copy of the principal user account: 'TrainID1' and all of the user rights and ...
- 9
1
vote
1
answer
51
views
Restrict access to Edition- or instance-specific databases
I have the following issue with SQL Server.
On my Windows Sever, SQL Server 2008 Express Edition is running. Now I have installed SQL Server 2008 Web Edition on the same server.
My problem is, when ...
- 21
0
votes
1
answer
51
views
Determining whether a MySQL column is ever used
How can I determine whether a particular column in a MySQL table is ever SELECTed or explicitly UPDATEd or INSERTed or referenced in a WHERE clause? It'd be nice if I could determine the db user who ...
- 350
1
vote
2
answers
264
views
Revoking execute access on builtin functions on SQL Server
I am trying to lock down a SQL Server database server and I want to revoke execute access from all users on specific builtin functions such as LEFT, RIGHT SUBSTRING, etc.
When I try to execute:
...
- 33
1
vote
0
answers
27
views
Configuring Custom Hierarchical Reporting Roles
I need to set up some custom database roles within Microsoft SQL Server 2014 for reporting purposes. I need to set up the following roles:
Administrative Reporting Role
Read-only access to some ...
- 11
1
vote
0
answers
159
views
How would I access a system view in SQL Azure master database without logging into master?
My service needs to periodically read sys.resource_stats which is only in "master" database of SQL Azure server. The service currently only accesses a "regular" database in the same server. Accessing "...
- 1,291
3
votes
1
answer
100
views
Use large set of data in multiple databases
I have been thinking about this a lot but somehow can't figure out how to deal with it in an efficient matter.
Say you have a large set "X" of data that consists of multiple tables. For the sake of ...
- 133