Questions tagged [permissions]
Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
1,248
questions
2
votes
2answers
43 views
Permission hierarchy vs. WITH GRANT OPTION
I have an Azure SQL database with this security setup:
SchemaUpdater user with db_ddladmin, db_datawriter, and db_datareader roles. The user is used to execute database change scripts during ...
0
votes
0answers
13 views
How to handle spoon err: Permission Denied in Redis
I'm new to Redis and I'm facing this error on Windows 10 Pro (64 bit) when trying to do the background save of Redis:
[14932] 18 Jan 10:57:24 # Failed saving the DB: Permission denied
[14932] 18 Jan ...
0
votes
1answer
27 views
How to Grant A User Under A Sql Domain Account To Insert and Update Records
I have a sql domain account in sql server like DOMAIN\GroupName. There are many user accounts under that account like DOMAIN\user.name. I want to give insert and update permission only to a user under ...
0
votes
1answer
65 views
You do not have permission [closed]
I have this grant permission below
use eNtsaRegistrationDB
go
grant select on UserReg to Users;
Cannot find the object 'UserReg', because it does not exist or you do not have permission.
Both of ...
2
votes
0answers
48 views
db_datawriter vs grant delete, update, insert
I have an application set up in which the service account uses a user defined role which has each object in the database defined with specific permissions. It seems that every table in the database is ...
0
votes
0answers
19 views
SSRS 2017 permissions required to deploy
I'm having issues with one of our developers deploying reports to SSRS, they seem to be able to deploy datasets, however not reports themselves. As a temporary measure, we've granted all privileges e....
0
votes
1answer
38 views
Create limited admin role in SQL Server that cannot alter row level security
I would like to know if there is a practical way to create an admin role in SQL Server that can essentially do anything except alter row level security policy.
It is simple enough to create row level ...
3
votes
0answers
177 views
In the context of another principal what permissions hinge on the identity of the database owner?
By "database owner", here, I mean the principal whose SID is sys.databases.owner_sid.
This answer to the question of best practices for database ownership includes the following:
The answer here ...
13
votes
2answers
2k views
Why is database ownership by groups not allowed? Which user should own a database?
Per microsoft "ALTER AUTHORIZATION for databases for SQL Server":
Requirements for the new owner:
The new owner principal must be one of the following:
A SQL Server authentication ...
-1
votes
2answers
65 views
Sql Server roles [closed]
Recently I was asked question - what is the difference between Standard Server roles and Fixed server roles.
I know Fixed Server roles include: Sysadmin, Securityadmin, etc.
I am not sure about ...
1
vote
1answer
26 views
postgresql: make objects owned by parent role
I have a set of apps that produce data. Each app has its own credentials to access the DB, and they all inherit from a common role (producer).
I'd like to set default privileges to grant access to ...
8
votes
1answer
136 views
Permissions required for row counts to show up on Object Explorer Details
I'm having a weird security issue. I have a user that's using SSMS 18.2 on a SQL 2016 server. They are a member of db_datareader but when they pull up the the Row Count column in Object Explorer ...
1
vote
2answers
61 views
How to Add A User To A Database In Standby / Read-Only Mode In Sql Server
I have a database which is in standby / read-only mode in my reporting server. But, I can not add a new user to this database. How can i add a new user to this database?
-1
votes
1answer
45 views
Denying DDL & DML Privileges Based On HostName
Developers must not use DML and DDL commands in my company. So, I revoked their authority like update, delete, or drop commands. But, they are able to alter or update some stored procedures or records ...
0
votes
0answers
44 views
Executing 'GRANT SELECT' in a trigger possible?
Trying to grant select privilege on table USER1.AAA to USER2 when table USER1.AAA is created, using system trigger.
The trigger below seems to be processed when table AAA is created but it receives ...
0
votes
1answer
39 views
Can a role be granted roles+privileges in oracle all at the same time?
I know that you can grant a role:
Other roles
System privileges
Object privileges
But, can you grant to the same role all at once? I mean, for example you grant a role:
2 roles
1 system ...
3
votes
1answer
125 views
Allowing non-privileged users to cause privileged code to run
Context:
Our SQL server is used for teaching, and we need to be able to automatically create databases for the students on demand and in real-time. We also need the students to be able to delete ...
1
vote
1answer
38 views
SQL server database Role management - Azure SQL MI
In my database I have multiple users with SQL server authentication login and AD login.
For ex: User 1 and user 2 are from same team(ABC), if I create a role db_abc
User 1 needs read access to table ...
3
votes
2answers
111 views
Restore from SQL Server 2008 to 2014
When a full-backup is restored by the DBA, does the DBA need to restore permissions, users, and roles separately? Or does it all come with the full restore?
I am from the dev team. We are migrating ...
0
votes
1answer
31 views
User Account Mismatch
My disk crashed so I reinstalled SQL Server to a new drive and restored my databases from my backup drive. However, when I attempt to install Diagram support, I get this message:
Cannot execute as ...
-1
votes
1answer
63 views
CREATE/ALTER INDEX permission
How can I grant a user create/alter index permissions without giving db_ddladmin? I want them to have the minimum permissions possible.
0
votes
1answer
49 views
Windows user automatically gets db_owner?
All databases from a server have just been migrated to a new server. It looks as if some users were carried across and some weren't, I'm not really sure as I did not know the server very well.
One ...
4
votes
3answers
97 views
SQL Server User Can't See All Logins
I have a SQL Server 2016 instance and I've just noticed that some user logins aren't listed for some users. For example, if I execute this query:
select count(*) FROM sys.database_principals a where ...
0
votes
1answer
20 views
Group not inheriting access privileges for all tables
I can't figure out why tables created by one user can be accessed by a read-only user, but not tables created by another user.
I have a viewers read-only group with this access:
-- Grant access ...
0
votes
2answers
50 views
Same query, different result (depending on user's permissions)
A question about SQL in general:
If two users execute the same sql statement, is it possible that user1 gets different results than user2?
Imagine user1 has more permissions than user2.
With other ...
1
vote
1answer
31 views
migrate users from mariadb10.1 to mysql5.7
My company is moving our databases from self-hosted mariadb 10.1 to Google CloudSQL (which is essentially MySQL 5.7).
Dumping / restoring our application schemas looks straightforward. However I'm ...
1
vote
1answer
35 views
User is in multiple Active Directory groups with multiple roles in database
I have a user that is a member of multiple Active Directory (AD) groups. Within SQL Server 2012, these AD groups have been assigned to different database roles. This user is not getting the correct ...
0
votes
0answers
28 views
How to grant a group to another group in Redshift
I am trying to build a matrix of roles to dynamically change priorities for our users. In other database I would be doing something like:
create role role1;
create role role2;
grant role role1 to ...
4
votes
1answer
258 views
Can SET IDENTITY_INSERT be allowed with less privileges than db_ddladmin?
I've inherited a system where the application is running under sysadmin account.
I limited this account to db_datareader + db_datawriter + EXECUTE on all database and set extended events session to ...
2
votes
0answers
40 views
Error in ALTER DEFAULT PRIVILEGES
I'm trying to create a new user in AWS Aurora Postgres DB.
Create user worked fine and I can login to the DB using that account.
granting permissions to it isn't.
First:
GRANT ALL on ALL tables in ...
0
votes
2answers
36 views
How do you detect whether you have permission to query sys.dm_os_performance_counters?
According to the sys.dm_os_performance_counters documentation:
On SQL Server, requires VIEW SERVER STATE permission.
On SQL Database Premium Tiers, requires the VIEW DATABASE STATE permission ...
0
votes
0answers
29 views
Linked Server using Impersonation fails SSMS GUI Connection test but sp_testlinkedserver succeeds
I have a linked server (Server B) set up on Server A with permissions set as follows:
This means that there are five Windows Logins (of which my windows account is one) who can access the linked ...
0
votes
1answer
91 views
MySQL least privileges to get database/tables size
I'm using centreon_plugins to monitor some mysql databases. As a best practice I create a dedicated user for monitoring and I give it the least possible privileges.
For simple monitoring I usually ...
1
vote
0answers
36 views
If a Login is not granted the db_ddladmin role on a database, but is individually granted CREATE VIEW on it, will they still be denied?
Since SQL Server permissions work as "deny first", I was wondering if that applies downward to individual permissions that are granted, if the parent permission isn't granted e.g. db_ddladmin is not ...
2
votes
1answer
93 views
Why can't I create a new schema with the owner set to dbo?
I created a test account for checking permissions against.
It currently has the db_datareader, db_datawriter, and db_ddladmin roles for the Northwind database.
But when it tries to create a new schema ...
0
votes
1answer
33 views
Why is MongoDB user with the only privilege as “find” able to insert and update collection?
I want my user to have only find action privilege on a specific collection. However, when I create the user with the privilege, restart the mongod server and run the mongo shell again with -u -p and --...
1
vote
2answers
73 views
SSMS login by external developers
This is my first question so please bear with me !
We have an external company whose developers need to login into an instance on our on-premise SQL Server 2016.
They have AD logins, and these are ...
0
votes
1answer
93 views
Create a user on database A with a procedure from database B (with EXECUTE AS)
I have 2 logins :
LoginA: role dbcreator + CONNECT ANY DATABASE
LoginB: role sysadmin
I have 2 databases :
dbA: everyone has all rights on it
dbB: only LoginB has rights on it, LoginA is only the ...
0
votes
0answers
25 views
Grant `UPDATE` right on MySQL non-system schema?
After doing some tests and despite not seeing any warning in MySQL documentation, it seems that a user who has UPDATE right on all databases can do updates in the mysql.user table, and so, this user ...
1
vote
1answer
49 views
Integrity checks permissions issue
I am running Hallengren's IntegrityChecks job which fails with the following error:
CREATE FILE encountered operating system error 5(Access is denied.) while attempting to open or create the ...
0
votes
1answer
25 views
Revoke User Access to all System Information Functions on Postgresql
Is there a way to remove access to all system information functions for a given user (which is already limited to read only access) in Postgres?
For example, a user could normally run ...
1
vote
2answers
41 views
How can I create a user who could only create tables and can't delete/drop them
There's my problem. I'm using PostgreSQL and tried so many things to create a user who can create tables but can't drop them, it's like create a table but assign it to another user. I've tried one ...
3
votes
1answer
171 views
How do I grant a SELECT permission to an individual user who's part of a large group that is explicitly denied?
I have a table SuperSecretData which is currently setup to deny SELECT to everyone in the company by the standard Active Directory account "Domain Users". But a couple of specific individual users do ...
3
votes
1answer
55 views
User Mapping on a DB that's part of an AG. DB is READ only? [duplicate]
I'm a sys admin being tossed in to a DBA role. I currently have two SQL Server boxes, 2016 Enterprise, in an AG. The DB has synchronized without any issues.
A third party vendor needs to have an ...
0
votes
0answers
48 views
Why can every PostgreSQL user see all databases and their tables? [duplicate]
I'm running a PostgreSQL database server, version 10 on Linux, for multiple users. Today I found out by surprise that any user can see all other users' databases and their tables, columns and other ...
0
votes
1answer
1k views
How to modify authentication plugin in mariadb starting with 10.4.1 to get mysql access for root user without password when migrating mysql to Mariadb
At https://kofler.info/root-login-problem-mit-mariadb/ a method is described for modifying the plugin being used for authenticating a user
update mysql.user set plugin='' where user='root';
leading ...
0
votes
2answers
58 views
Can't create database even with all privileges
[mariaDB on RedHat 7.7]
I just want to create a new database, but found "access denied":
create database lamp_k;
ERROR 1044 (42000): Access denied for user 'lamp'@'localhost' to database 'lamp_k'
...
1
vote
2answers
218 views
sp_updatestats doesn't seem to work for non-sysadmin logins
Microsoft SQL Server 2017 (RTM-CU16)
When trying to update statistics under a user which is a member of db_owner database role via
EXEC sp_updatestats;
SQL Server throws an error:
Msg 15247, ...
0
votes
1answer
105 views
Can't Grant Users Update permission
There are several Active Directory user groups in my SQL Server database environment. I changed the users' permissions on all databases on the server. Several users wanted me to give them the update ...
0
votes
1answer
388 views
Access denied for user 'me'@'localhost' (using password: NO)
I am am trying to learn mysql 101. Doing so, I broke my ability to login as root.
At first I could simply connect to mysql by running
sudo mysql
In an attempt to alleviate a problem, I ...
