Questions tagged [permissions]
Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
7
votes
3answers
210 views
Access to the path 'c:\some\path' is denied for MSSQL CLR
I think this is a permissions problem, but I'm having trouble locating it.
I have a group of CLRs on one server (SQL Server 2016) and they work as they should. All are marked UNSAFE and they do ...
1
vote
1answer
22 views
How to GRANT SELECT by default to B, on tables created by A?
Background
In my PostgreSQL instance (say with one unique database constituted of one table only), I have 2 users:
user_A, who can create and populate my_table,
user_B, who should only be able to ...
1
vote
2answers
19 views
postgresql 9.* - user cannot SELECT from VIEW inside a SCHEMA as DEFAULT PRIVILEGE
hope you can help me.
I have 3 users
First is me, the db admin. I run the GRANT queries, I can do anything. (name doesn't matter now)
Second is the data manager user. = manager_u
Third is the data ...
0
votes
1answer
27 views
Postgres role without attribute Login
I am a bit confused by the role attribute LOGIN | NONLOGIN, where postgres docs says:
These clauses determine whether a role is allowed to log in; that is,
whether the role can be given as the ...
4
votes
1answer
55 views
Execute Permissions for a Store Procedure that creates databases
I have a Stored Procedure that creates a Database for a specific project which needs to run every month by one of our Data Analysts. The question is how do I structure this to enable the Analyst to ...
0
votes
1answer
8 views
Permission Error when trying to import SQL [on hold]
On an attempt to import an SQL into a Database I get this error.
* Error 0xc002f210: Preparation SQL Task 1: Executing the query "IF NOT EXISTS(SELECT * FROM sys.schemas WHERE name..." failed with ...
3
votes
1answer
35 views
Changing Database Owner Removed User Mapping
I ran an ALTER AUTHORIZATION to change a database owner from an AD account to sa and it seemed to cause the user mapping for a specific database to be removed. I’m not sure why this happened.
Is ...
0
votes
1answer
10 views
mongoDB: Limit user to find documents only by ObjectId
I'm using mongoDB version 4.0.9 for various things. One of them is storing and retrieving files in mongoDB via GridFS. For that purpose, I have created a role/user in mongo with the privileges "...
2
votes
2answers
39 views
SQL script to count rows for all views in a database with SELECT-only access
I need to know the row count for every view in a third-party database that I have been given SELECT-only access to. The following script works for tables but not views:
SELECT SCHEMA_NAME(A....
0
votes
1answer
26 views
Disable Saving/Exporting Results of TSQL Query in SSMS?
I really don't want to go in to too much detail as to WHY I want to do this. Just know that it would be ideal for my use case.
Is there a way to disable a specific database role from using the Copy, ...
1
vote
1answer
21 views
AWS RDS (PostgreSQL) - Master user lost all privileges after upgrading from v9.6 to v10.6-R1
I just upgraded my AWS RDS DB instance from Postgresql v9.6 to v10.6-R1. I did this manually using the "Modify" tab in the Databases section under the Dashboard. Immediately afterwards, as the master ...
4
votes
2answers
228 views
Start job from another SQL server instance
I have a job on an SQL 2008 server (Server A) (I know this is not ideal... That issue is being addressed). The agent runs under NT AUTHORITY\NETWORK SERVICE.
I want to add a step that runs a job that ...
4
votes
1answer
48 views
SQL Server impersonation
This question is about impersonation in Microsoft SQL Server. I want to know that if I have impersonation permissions on a specific login then I can easily impersonate that login whenever I want and I ...
0
votes
0answers
15 views
PRIVILEGES table for ROUTINES in INFORMATION_SCHEMA
In information_schema, there are four privileges table.
show tables like '%PRIV%';
+---------------------------------------+
| Tables_in_information_schema (%PRIV%) |
+-------------------------------...
1
vote
0answers
18 views
How to change permissions of Oracle generated logs?
The oracle generated logs (ie. alert and listener logs) are being created with 600 permissions. These files are of course created automatically by the oracle user. How would I change the permissions ...
1
vote
1answer
9 views
What is the permission necessary to drop a service in service-broker?
When I want to drop a service which is already created, this error happens:
Msg 15151, Level 16, State 1, Line 316
Cannot drop the service '//Audit/Contract', because it does not exist or you do not ...
0
votes
1answer
43 views
How to grant permissions to database but restrict to certain schemas?
I am new to database administration and work within a small team of data analysts trying to modernise. We have recently set up an Azure SQL DB server we are accessing using SQL Server Management ...
0
votes
0answers
22 views
ERROR: cannot update table “pg_enum” because it does not have a replica identity and publishes updates
I was trying to update the enum label using the following SQL query
UPDATE pg_enum SET enumlabel = 'Cash Recivied' WHERE enumtypid = '1203702' AND enumlabel = 'Cash';
but it throws an error
ERROR: ...
0
votes
0answers
39 views
postgresql - Disallow getting list of databases
How can I disallow getting list of databases on the PostgreSQL server? That can be done (for example) using \l in psql.
1
vote
0answers
13 views
Dumping Postgres schema from Google cloud SQL
Now this may look trivial but it is a managed service so I don't have the superuser rights. And various schema/tables/sequences have different roles/users as their owners so I can't just use pg_dump ...
0
votes
1answer
42 views
Unable to edit some records in SQL
I have a table we just transferred from MS Access to SQL Server 2016.
It's a simple table for creating load numbers for shipping products. Using access we link to the SQL Server and we are able to ...
3
votes
1answer
46 views
PostgreSQL 11: Replace function body by users from the same group
In the documentation of CREATE FUNCTION is stated that ''You must own the function to replace it (this includes being a member of the owning role).''
Two questions:
I don't understand what exactly ...
0
votes
1answer
117 views
mysqld: Can't create/write to file '/home/mysqltmp/ibXXX' Permission denied
My main volume is a 20GB SSD disk mounted on /. I have a 4TB HDD mounted in /home. So to save space I want to set the mysql temporary directory to /home/mysqltmp.
However when I set to this directory ...
0
votes
0answers
25 views
PostgreSQL: allow user to list only the owned tables
I want to disable users from seeing the names of tables that he doesn't have access to. So the goal is to have several tables and several users that can make \dt and see only tables they have access ...
0
votes
0answers
21 views
Restricting access to tables/views in pg_catalog schema in Redshift
The general advice seems to be that the access to system tables (in pg_catalog schema) should not be restricted from database users.
I couldn't find a succinct explanation exactly why or how to ...
0
votes
1answer
58 views
How to change the default database for login in T-SQL
I was trying to change the default database for logins in the sql server instance to the database they are mapped to. Currently, the default database of all logins in master database.
Alter login ...
0
votes
0answers
97 views
Column level security in SQL server
Is it possible to assign column level security in SQL Server directly on a table, without using a view?
For example, for table 'tbl', if I want column 1 to be restricted for user 1, is it possible ...
1
vote
2answers
39 views
Grant CREATE SCHEMA (only) to users
Imagine I have one shared database set up for my class that each student has the potential to access (access to the database is open and only requires kerberos auth). The public space is where I ...
2
votes
2answers
143 views
Permission on Database [closed]
I have a login user called TestUser created at the server level that is assigned to a read only role, now I need to create a user for the TestUser login on MyDb
USE [MyDB]
GO
CREATE USER [Test] FOR ...
0
votes
1answer
28 views
List of databases which a user can access in SQL 2008 R2
Is it possible to create a list of all the databases where a specific user can access?
For example,
My user is 'Domain\MarySmith'. This user can access on a single database or can access many ...
1
vote
1answer
57 views
Assign Permissions to a SQL User
I have active directory on my company, I have some login users created at the level of the SQL Server (2014) that I need to propagate to all my databases on that server. I want to create a read only ...
2
votes
1answer
54 views
Can't create read-write Postgresql user
I'm trying to create two users in a Postgres database—one with read-write access to all tables in two schemas, and one with read-write-create (i.e., able to make DDL changes) to the same schemas.
I ...
1
vote
1answer
31 views
Source of Entry in Postgres
I want to make a small web app using Postgres as database.
Is there a way to accept database access if and only if the SQL command is coming from my app, blocking any other access to the database?
1
vote
1answer
49 views
Insert- and Read-only table in Postgres
I want to create an "immutable" Postgres database, where users can insert/select (write/read) data only, but can not update/delete (change/delete).
I came to know there is FOR UPDATE lock, but did ...
0
votes
1answer
19 views
Login mapping only works for the first query in a window
I have a really odd login mapping error for one DB that I can't seem to figure out.
When running a simple select statement while impersonating a login (A) on DB(1), it appears to work fine. However ...
0
votes
0answers
26 views
Allowing a user to grant SELECT and VIEW DEFINITION permissions only on objects they create
How do I give access to a user so that they can grant SELECT and VIEW DEFINITION on any objects they create in a database.
For example, I have a user MyUser in the roles
db_datareader
db_datawriter
...
10
votes
5answers
2k views
How to deny access to SQL Server to certain login over SSMS, but allow over .Net SqlClient Data Provider
We have a situation where Developers do not have any UPDATE permissions, BUT they work with applications and see connection strings -> they know passwords from some SQL accounts (example SQLLogin1) ...
0
votes
2answers
44 views
Querying a view based on a table on which I don't have SELECT permission [duplicate]
Suppose I have the following table (in schema 'SchemaX') :
CREATE TABLE [SchemaX].[myTable]...
And the following view, build upon the previous table but on a different schema ('SchemaY) :
CREATE ...
0
votes
0answers
94 views
SELECT … INTO OUTFILE “Read-only file system” error
I'm using MariaDB 10.3.12 on CentOS 7, using the MariaDB-server RPM package from MariaDB's yum repository.
I'm trying to do a simple SELECT ... INTO OUTFILE into a different directory than /var/lib/...
4
votes
1answer
62 views
Can a non-owner of a table be allowed to disable the table's triggers?
I would like for one user who is not a table owner, give the permissions to turn off and turn on the triggers. Can it be done?
0
votes
1answer
52 views
Script for migrating server role permissions - SQL Server
I need to obtain a script for all the user-defined server roles in my SQL Server instance with their assigned permissions, such as the below:
GRANT ALTER ANY AVAILABILITY GROUP TO [ServerRole1]
What ...
0
votes
0answers
24 views
How does GRANT privileges function when recursive privileges?
I'm trying to understand how does granting privileges work on SQL.
According to what I understand, one user has privilege as long as said user has been granted privilege by someone or owns the ...
1
vote
0answers
22 views
PostgreSQL permissions
I'm trying to achieve a simple architecture:
An organization has many users
A user belongs to many organizations
A user can connect
A user can join and leave an organization
A user can read-only ...
1
vote
1answer
69 views
Grant all the privileges to a user over all other user's objects in Oracle
I would like to know how to grant all the privileges to a user over all other user's objects in oracle. Greetings and many thanks
0
votes
1answer
47 views
How to remotely manage (with PhpMyAdmin) a MySQL RDS on a load-balanced AWS Elastic Beanstalk setup?
Although there are similar questions and topics, I can't find a solution that currently works.
I specifically wrote remotely manage because I'd like to use my home computer's PhpMyAdmin to directly ...
1
vote
1answer
71 views
Privileges on SQL Server
I come from Oracle Database and now I am trying learn SQL Server and I don't undestand why may I viewer others databases, like the master for example, with a common user without privileges in this ...
0
votes
1answer
154 views
SQL Server: Remove public role privileges from login account
I've got a SQL Server (2012) and I need to create a read-only user. At first, I was just going to create a user, and then give them the db_datareader role. But while looking around, I saw the public ...
1
vote
0answers
174 views
Grant permissions over linked server
I need to grant select permissions to a sensitive table over the linked server. This table should only grant access to members of an AD group. I currently have other linked servers set up with remote ...
2
votes
1answer
80 views
How to Deny permissions for newly created user in DDL Trigger?
I'm having trouble with a SQL DDL trigger for Create_User and I'm wondering if there is an issue with my syntax or something else I'm not seeing?
I have some tables in my database which are only ...
1
vote
1answer
119 views
Unable to revoke permissions for 'NT AUTHORITY\SYSTEM' on SQL Server 2016
I have tried everything I know to do and spent several hours Googling without success. I want to revoke the SHUTDOWN and CONTROL SERVER permissions for the login NT AUTHORITY\SYSTEM.
When I run this ...
