Questions tagged [access-control]

In information technology access control is a technique that is used to determine who can use which information or features by giving or denying authorization to authenticated or anonymous users.

Filter by
Sorted by
Tagged with
0
votes
1answer
23 views

How can I setup users/groups in PostgreSQL so that each user has privileges on objects created by other users in the same group?

I have created a group (role) called "employees" and I've created some users that are its member and that inherit its rights. I have a database owned by the group "employees". The goal: To setup ...
3
votes
1answer
91 views

How to grant execute permissions to a stored procedure but not to the underlying databases

I am trying to allow a user to run a stored procedure while restricting them read/write access to the underlying tables. I am able to complete this with other stored procedures, but the one I am ...
1
vote
0answers
19 views

PostgreSQL 10.7: pg_restore deletes access privileges on public schema

I have created a "custom" dump on one PostgreSQL 10.7 server and am restoring it on another PostgreSQL 10.7 server. Both on Linux. This is all very standard: pg_restore --single-transaction --clean -...
0
votes
0answers
17 views

Unable to view MySQL db stored procedure

We have many stored procedures created with SQL SECURITY DEFINER by user A Now user B is responsible for maintaining some of the stored procedure. However user B is unable to view/update the stored ...
0
votes
0answers
26 views

PostgreSQL: allow user to list only the owned tables

I want to disable users from seeing the names of tables that he doesn't have access to. So the goal is to have several tables and several users that can make \dt and see only tables they have access ...
0
votes
0answers
24 views

Masking Records Efficiently for Access Control

Is there a way to "mask" records at the SQL level so that large groups of records can be partitioned into different sets only visible or actionable by particular users? For example, let's say instead ...
10
votes
5answers
2k views

How to deny access to SQL Server to certain login over SSMS, but allow over .Net SqlClient Data Provider

We have a situation where Developers do not have any UPDATE permissions, BUT they work with applications and see connection strings -> they know passwords from some SQL accounts (example SQLLogin1) ...
1
vote
0answers
34 views

Granting access control on specific columns in PostgreSQL

The following screenshot is from an online learning platform I am using to learn SQL (more specifically PostgreSQL). I am concerned that I'm not understanding the following paragraph correctly. It ...
0
votes
1answer
1k views

`“C:\xampp\mysql\bin”' is not recognized as an internal or external command,operable program or batch file [closed]

I am trying to access to mysql from windows command prompt by this command: "C:\xampp\mysql\bin" mysql -u root - p But it sayas: `"C:\xampp\mysql\bin"' is not recognized as an internal or ...
0
votes
1answer
109 views

Designing Database access levels [closed]

At the moment our production and development databases give sysadmin access to all of devops, third party developers, etc. I'd like to propose new access levels based upon existing AD groups, but I'm ...
1
vote
1answer
274 views

pg_hba.conf entry query

I'm trying to formulate a rule from pg_hba.conf file. Thus far I have understood that pg_hba.conf file is used to give access to the specific user for a specific host. But I just want to take a second ...
1
vote
2answers
59 views

How do I Configure Per Database Roles for PostgreSQL?

The default for PostgreSQL is that roles are created per cluster not per database. I would like to have per database roles. I could have sworn I once read about a way to set that up but now I can't ...
1
vote
1answer
2k views

Need help designing an Access Control List (ACL) database structure

I need help with a database design for an ACL (Access Control List) system. Business rules Let me explain the requirements: Any business object in the system will get an ACL that explicitelly ...
-1
votes
1answer
48 views

Getting User Access in Individual Databases MSSQL

So, here is the scenario. I need to give user access on multiple databases ( but not all on the instance), and in this case, i cannot use AD group which is already having certain grants on all ...
1
vote
2answers
7k views

What does GRANT CONTROL on a schema do in MSSQL?

I'm using SQL Server 2016 for these tests. The following did not allow me to create a table in schema S for user U USE [D]; GRANT CONTROL ON SCHEMA :: [S] TO [U]; But this did: USE [D] GRANT ALTER ...
1
vote
2answers
64 views

Is it possible to grant role privileges to a user by document (not collection) in MongoDB?

I am working on a database for investigation purposes. I want to make some of that information public but other pieces of information are highly confidential. I want to create a user and grant ...
3
votes
1answer
3k views

How to allow user access to non-owned objects in Postgres?

I am in the process of creating a pre-prod Postgres database, and want to ensure the accessing user has limited access. I want to setup tables in such a way that the accessing user can't CREATE, DROP ...
2
votes
1answer
127 views

I'm a MS SQL DB Developer looking to get more permissions on the server [closed]

So I am trying to use Visual studio and I can't import the DEV database into a project. I run into this issue a couple times a week since I am either creating SSIS Packages, or building a database ...
0
votes
1answer
65 views

Row-based Permission in SQL Server Newbie Question

I am relatively new to this( Database, general security issues) , so I may be over-complicating this. I have a database containing student grades . I want to design a view in which I restrict access ...
2
votes
1answer
68 views

Access rights on SQL Server 2012

I have a Microsoft SQL Server 2012 server used by two Active Directory groups. How can I configure this groups so that: group 1: Can do everything on database level, including read everything, ...
2
votes
1answer
1k views

Deny dbo schema permission

I'm trying to deny all permissions on the dbo schema for a particular user, as I only want that user to access a specific schema. When I try the following (using sa): DENY CONTROL, ALTER ON SCHEMA :: ...
1
vote
0answers
284 views

Access-PostgreSQL: Link tables as readonly, edit registers in form

I have a PostgreSQL database working as backend and I have to develop an Access frontend solution for regular users of this database. I decided it best to create some forms to manage the input, ...
0
votes
2answers
93 views

Scipt User roles and permissions

I am having issues with the user accounts in SQL Server v 11.0.6020. I need to run a script that will allow for the copy of the principal user account: 'TrainID1' and all of the user rights and ...
1
vote
1answer
44 views

Restrict access to Edition- or instance-specific databases

I have the following issue with SQL Server. On my Windows Sever, SQL Server 2008 Express Edition is running. Now I have installed SQL Server 2008 Web Edition on the same server. My problem is, when ...
0
votes
1answer
43 views

Determining whether a MySQL column is ever used

How can I determine whether a particular column in a MySQL table is ever SELECTed or explicitly UPDATEd or INSERTed or referenced in a WHERE clause? It'd be nice if I could determine the db user who ...
1
vote
2answers
158 views

Revoking execute access on builtin functions on SQL Server

I am trying to lock down a SQL Server database server and I want to revoke execute access from all users on specific builtin functions such as LEFT, RIGHT SUBSTRING, etc. When I try to execute: ...
1
vote
0answers
26 views

Configuring Custom Hierarchical Reporting Roles

I need to set up some custom database roles within Microsoft SQL Server 2014 for reporting purposes. I need to set up the following roles: Administrative Reporting Role Read-only access to some ...
1
vote
0answers
147 views

How would I access a system view in SQL Azure master database without logging into master?

My service needs to periodically read sys.resource_stats which is only in "master" database of SQL Azure server. The service currently only accesses a "regular" database in the same server. Accessing "...
3
votes
1answer
70 views

Use large set of data in multiple databases

I have been thinking about this a lot but somehow can't figure out how to deal with it in an efficient matter. Say you have a large set "X" of data that consists of multiple tables. For the sake of ...
0
votes
1answer
900 views

SQL Server 2014 All Administrator Accounts Disabled

I made the most ridiculous thing. I accidentally disabled both remote logins and database accesses for the Administrator accounts (including the one with Windows Authentication (Administrator account) ...
1
vote
0answers
34 views

Access algorithms in Partial Index implementation of PostgreSQL 9.4?

I am studying big-O time-space complexities of different algorithms with the partial index of PostgreSQL 9.4: introsort (O(n log n)-time, O(log n)-space) and heapsort (O(n log(n))-time O(1)-space), ...
4
votes
3answers
323 views

MS-SQL 2014 Log Shipping: Access permission question

Wonder if someone could provide some advice or point me in the right direction towards achieving the below objective please. Unfortunately I have not been very successful in finding a solution online. ...
2
votes
4answers
607 views

Individual SQL account per user?

I am designing a web application that will have probably around ~1000 users. The website is facing the internet but it can only be used by partners (i.e. the general public cannot just "sign up an ...
1
vote
1answer
3k views

PostgreSQL: a Login Role to only access Views [duplicate]

I need to write a SQL file which must do the following: create a role called 'selection' grant connect/usage to the current database grant select/execute to all views of all schemas (or at least on ...
2
votes
1answer
2k views

Query for hierarchical RBAC scenario

I have a SQLite database with a hierarchical role-based access control (RBAC) data model. In this model, users are granted permissions to perform certain actions against various resources either ...
2
votes
1answer
6k views

How to set user-level security in 2007+ MS Access?

I've read this MS info which should cover my problem. There are quite clear steps: Open the .mdb or .mde file that you want to help protect. On the Database Tools tab, in the Administer group, ...
0
votes
2answers
58 views

How to access to DB Instance from another DB Instance with Windows Authentication

I have two database servers DB_INSTANCE1 DB_INSTANCE2 Is it possible to access from DB_INSTANCE1\DB1 SQL script to DB_INSTANCE2\DB2 tables without using SQL Logins? (not every database servers are ...
13
votes
1answer
40k views

Grant access to all tables of a database

I recently wanted to share regular access rights with one user of a server and I realized that a simple CREATE USER and GRANT ALL ON DATABASE commands didn't let him run a simple SELECT on the data. ...
2
votes
2answers
114 views

How do I prevent my clients viewing my database definition when it is installed on their server?

I want to give my database to the client to install on their server. However, I want to deny the client rights to see the tables and stored procedures and also want to restrict that database to run ...
0
votes
1answer
52 views

Does DB2 support host based access control?

Coming from MySQL I was wondering whether DB2 has something similar to MySQL's user@host access rights concept.
1
vote
1answer
590 views

My connection to a Mysql DB has been blocked after spamming queries, for how long?

I am creating a web application that depends on querying a legacy DB without an API. It's MySql. Off course the lack of an API eventually got me in trouble. A feedback loop while testing the app ...
1
vote
1answer
684 views

SQL Server Chain Permission

We have the 2 databases. Reporting HR There are some users who want to extract data from HR database. But we don't want to give direct access to that HR database. So, we created the special views ...
1
vote
0answers
78 views

Row level security and full text searching

How do you approach the problem of resolving access permissions when matching tens of thousands of users with tens of millions of documents containing unstructured data? How do you even build and ...
3
votes
2answers
4k views

Why can a new user select from any table?

When I create a user in Postgres, create user test with password 'test'; The user ends up being able to connect to every database in the instance. The user can also select from any table: # psql -...
3
votes
3answers
9k views

Block user access to certain tables

DBMS allows the admin to grant table access to a user using something like: GRANT ALL ON mydb.mytbl1, mydb.mytbl2 TO 'someuser'@'somehost'; However, is it possible to grant all tables to a user and ...
1
vote
1answer
1k views

database design for dynamic menu bar [closed]

I am trying to create a menu bar which will load dynamically on user log in, based on the user roles. Say if the user is an admin he can see all the items listed under the header and if a user is a ...
2
votes
1answer
133 views

Difference of write authorization on file system with mySQL

On my local mySQL (on CentOS 6 VM) database I wanted to export some data from the DB to a file like this: SELECT html FROM mytable WHERE lang = 'en' and id='KEY01' INTO OUTFILE 'key01_en.html' By ...
4
votes
1answer
2k views

Adding group rights in db2 for a stored procedure

I have a list of user accounts on AIX server, where the db2 database resides in. The user accounts all belong to a specific group which I can confirm from aix shell. User accounts work in DB2. ...
0
votes
1answer
120 views

How to grant select on a view … based on IP adress?

I wonder if it's possible to allow a client A to "see" some data in a view while allowing any other clients, namely B and C, to see ALL data from the same view. The distinction between A, B and C ...
2
votes
1answer
1k views

How do I add a user that has read access to only ONE database?

I have two databases admin and testdb ; Added a user Alice in the test database db.addUser( { user: "Alice",pwd: "Moon1234",roles: [ "readWrite" ] } ); But when I login using the user Alice, I can ...