Questions tagged [permissions]
Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
1,425
questions
0
votes
1answer
21 views
PSQL asks for password for a specific database
I am hosting two different databases (manage_invite and manage_invite_v49) on the same server.
As you can see, when I try to connect them using the CLI, it demands the password for the second ...
5
votes
1answer
297 views
How do I create an insert-only user for a Postgres table with an index?
Here's my proposed schema:
CREATE TABLE Surveys (
id serial primary key,
user_email citext,
survey_data jsonb,
created_at timestamp default current_timestamp
);
CREATE INDEX ...
0
votes
1answer
14 views
Creating specific permisions for DB user
I need to give access to CREATE QUEUE and DROP QUEUE queries. Can`t find that information over the internet, only found that db_ddladmin or db_owner fixed database roles, or the sysadmin have that ...
0
votes
0answers
20 views
The user privileges I have assigned don't work when someone imports my .sql database file on mySQL
I'm new to SQLs and mySQL, I and my colleagues who are also new to SQLs are working on a database project and I have successfully queried its structures and inserted data into them.
I then created ...
0
votes
0answers
37 views
Unable to delete server_principal due to granted permissions
I want to delete a server principal from my server because the member is not working at our company anymore. Unfortunately this principal is owner of objects / grantor of permissions because he ...
0
votes
0answers
31 views
The function fn_my_permissions is not showing ALTER permission even when appears assigned to the user
I have a DB user in SQL Server (2012) that I have granted ALTER permission for the DB (via the UI: DB name > Secuity > Users > affected user > Properties > Securables wherein I can see ...
0
votes
0answers
35 views
How can I DENY a SQL Server Database User from seeing tables in a specific schema? VIEW DEFINITION doesn't seem to work
This is somewhat of an X/Y Problem: my original problem is that I want to use SSDT to maintain my database design, with the catch that my database design uses two schemas:
The dbo schema that ...
0
votes
3answers
44 views
why is granting ALL permissions and privileges to a new role/user for a new database difficult with postgresql?
With mysql and am sure countless other database softwares, it is pretty easy to create a new database, create a new user and grant that user to own and be able to do everything on that database
this ...
-1
votes
2answers
34 views
Extremely safe Postgres table permissions
Let's say that I have four tables in my Postgres database, two of which are private and contain highly sensitive information (private1 and private2), and two that contain information I want to allow ...
0
votes
0answers
21 views
Privileges to select any table in Oracle
I'm using a Oracle database client application that connects to 1521 port to do "select" commands over every table in a Oracle db 12.1.
I told dba to create this role with these commands:
...
0
votes
0answers
25 views
SQL Server permissions to create arbitrary custom-types and stored procedures with them
What are the most restrictive permissions to allow for creation of arbitrary custom types and stored procedures with use the types in SQL Server?
For instance:
create type dbo.MyType as table (dt: ...
1
vote
1answer
36 views
Can sys.database_permissions contain REVOKE?
The Microsoft documentation for sys.database_permissions mentions that the valid values for state are "D", "R", "G", "W". The corresponding values for ...
0
votes
1answer
33 views
Can't create schema for a db with PostgreSQL
Use psql -U postgres to login.
postgres=> CREATE DATABASE mydb;
postgres=> \c mydb;
You are now connected to database "mydb" as user "postgres".
When create schema, got
...
1
vote
2answers
64 views
Create a view in a user database that can access selected system database tables
Using the principle of least privilege, what access should I give to a Role "Checklist_role" that has read permission to a view "MaintenanceJobs_view" in a user database "...
0
votes
1answer
29 views
Postgres 13 - Grant to Active Directory Groups?
Is it possible to grant an AD group in PG 13 without sorting to creating the group in the database?
Similar to how AD groups can be granted directly in SQL Server.
The PG server is on a Windows server ...
0
votes
0answers
22 views
Create non-sysdba user that can grant tablespace to other users
I am creating an Oracle role with Admin option Grants so that user with this role assigned, will not be a full sysdba but will be able to create other users and grant them permissions.
What I ...
0
votes
1answer
27 views
Disabled SA user is listed as logged in
I was looking for the last time users have been logged into the system and saw SA as being used. Strange is that SA is disabled by default and not used on our systems. How is that possible, what am I ...
0
votes
0answers
13 views
How can I manage newly created tables permissions in the PostgreSQL? [duplicate]
I want to create default permissions on the schema and automatically assign these permissions to newly created tables. For this purpose, I've created a role and assign a user. Afterward, I've created ...
1
vote
1answer
39 views
Significant performance differences executing alter and grant statements between users with same permissions
I am experiencing significant performances differences between users with the same permissions when executing alter and grant statements.
I have an automated build system that runs a series of SQL ...
0
votes
1answer
46 views
Is GRANT DELETE TABLE t TO PUBLIC and the revoke the right to DELETE TABLE t FROM user1 possible?
I have a production database that has GRANTs TO PUBLIC for INSERT, UPDATE, DELETE on specific tables of the production schema, table t1 being one of these tables.
Say I want to create a user user1 ...
0
votes
1answer
23 views
Create Temporary Access to production support
We're thinking of creating a web site where a manager can provide temporary access to a person for a limited set of data in our production SQL azure database for production support. Auditing is ...
0
votes
1answer
26 views
Can I GRANT SELECT on all schemas in a database?
I need to create role users of which can only read (select) data.
I can do it for a particular schema.
But I need it to work with all existing and future schemas (existing at least). How can I do it?
...
1
vote
1answer
25 views
Can not give NT SERVICE\MSSQLSERVER permissions on network drive
I have an SSIS package that I would like to run as a job. The flat file source sits on Server A while the package and job sit on Server B.
When I run the job that executes the SSIS package I get an ...
1
vote
3answers
196 views
Are there any things to consider before granting VIEW SERVER STATE and VIEW DEFINITION to Developers?
I would like to grant below to permissions to Developers group, on Production SQL Server:
VIEW SERVER STATE
VIEW DEFINITION (server level)
This is done to make them able to query some of dynamic ...
1
vote
0answers
46 views
Cannot use the special principal 'dbo' when addressing SQLMI risk VA2108
We've just set up a new SQL Managed Instance on Azure, and have restored a database to it for testing. After running an initial Azure Vulnerability Assessment, the results include this:
VA2108 - ...
0
votes
1answer
15 views
Postgres view role permissions
I am trying to work out how database roles work.
Here is my user case...
create role user1 login password 'user1';
create schema authorization user1;
CREATE ROLE DEV_ROLE;
grant connect, temporary ...
0
votes
1answer
27 views
How to test user permissions
I have two server users, lets say admin and notadmin. I need to test notadmin's permissions. I need set and test VIEW SERVER STATE permission on notadmin, but usually I have access only to database ...
0
votes
1answer
103 views
Powershell script executed by SQL Server doesn't take effect
I'm doing some testing and I want to execute a PowerShell script through xp_cmdshell. Below is the PowerShell script (c:\temp\sqltotext.ps1).
echo "haha" | Out-File "c:\temp\haha.txt&...
0
votes
0answers
52 views
The SQL Scripter library is running a SELECT COUNT(*), how do I stop it?
I'm using the Microsoft.SqlServer.Management.Smo.Scripter library from within a PowerShell script to pull SQL object creation scripts from a DB as part of an automated process. The user account used ...
0
votes
1answer
19 views
User cannot select from table when having SELECT permissions if CONTROL is denied
I'm setting up my database on an Azure SQL Server instance.
(I know the principal names are terrible, it's just a dry run test)
I created a login ("Test"), a user ("Test"), a ...
0
votes
2answers
35 views
How to GRANT or DENY access to an object based on metadata for that object in SQL Server?
We are in the process of reviewing our database permissions among various applications and business groups on SQL Server in a Windows Active Directory domain.
We currently do not use separate schemas ...
1
vote
1answer
30 views
PostgreSQL COPY TO doesn’t honor Linux group privileges
I have issues executing COPY to command, receiving below error msg:
ERROR: could not open file "/home/pgsql/TMP/out.txt" for writing:
Permission denied
Postgres engine is being run as ...
0
votes
0answers
17 views
MySQL: Grant creators of view DROP and ALTER on those views
Is it possible to automatically grant someone the permission to DROP or ALTER their view that they created?
The problem we've got is that there are some views that we don't want the BI team to be able ...
0
votes
1answer
96 views
How are the DBA, SYSDBA, SYSOPER roles and SYS, SYSTEM users related in Oracle?
I don't know if I understand correctly the privileges of these built-in users and roles.
This is the list of information I have found:
I think that DBA and SYSDBA roles enable to do everything - if ...
0
votes
1answer
28 views
Granting select on syscat.schemata - DB2
I was wondering if it is safe to grant select rights to syscat.schemata to users on a DB2 database? What could go "wrong"?
Some tool like DataGrip and DBeaver cannot load connection schemas ...
0
votes
0answers
12 views
Check when a privilege was granted - PostgreSQL
Is there any information_schema view that can tell when an object privilege was granted?
The pg_namespace view doesn't have that.
select
*
from pg_namespace
join lateral (
SELECT
*
from
...
1
vote
1answer
34 views
Find users having grants on a table in MySQL
We grant access to users with the following
grant select, insert, update, delete on product_events to 'product_admin'@'%' ;
Now, like this there are a lot of tables, and a lot of users.
I want to ...
1
vote
1answer
16 views
How do I set up privileges for different schemas?
How do I set up 2 schemas with a total of 5 users?
Schemas:
hp
hpc
Users:
dba - has full access to both schemas (hp, hpc)
hp_dbo - owns all objects in hp schema
hpc_fbo - owns all objects in hpc ...
2
votes
1answer
22 views
Should roles without login have the connect permission on a database?
I want to create a read-only role in PostgreSQL and use it to assign it to multiple new users, who should have read-only access. It makes sense to me to also grant the read-only permissions to the ...
0
votes
1answer
29 views
Why GRANT UPDATE on SEQUENCE in PostgreSQL
I have seen postgresql allowing users to Grant update on a sequence. But never seen any update query on the sequence.
Sequence values are usually changed using ALTER SEQUENCE command. I understand the ...
0
votes
1answer
36 views
is it safe to grant permission to all users in Microsoft sql server
I have a global production server and database, as I all users should have access to it by remote desktop.
Is it possible to grant NTFS permission on all database files (mdf+ldf files) to all users? ...
0
votes
2answers
42 views
MSSQL and ALTER AUTHORIZATION on table has no affect?
I have a schema called [test] with an owner X.
I transferred an ownership of one table [test].[table] (ALTER AUTHORIZATION) to owner Y.
Now, if I understand correctly, even though the owner X owns the ...
2
votes
1answer
23 views
MySQL: Block ANALYZE TABLE Queries
Is there a way to revoke access for ANALYZE TABLE which is granted by needed Insert privilege?
I have an application that throw multiple ANALYZE TABLE queries per second. And am looking for a way to ...
2
votes
1answer
51 views
How to grant access to a specific table across all databases in Mysql?
I want to Grant access like so:
> GRANT INSERT, UPDATE ON `%`.my_table TO 'user'@'%';
ERROR 1146 (42S02): Table '%.my_table' doesn't exist
This is not possible per Mysql documentation on grant:
...
1
vote
1answer
40 views
Copy mysql_native_password to new server
I did a mysqldump of my entire database mysqldump --defaults-file="/home/ubuntu/.my.conf" -u api --all-databases > full-dump.sql . I setup a new mysql and phpmyadmin and loaded the ...
1
vote
2answers
145 views
How to list all grants per user/role on PostgreSQL
I've run these statements on Postgres CLI (I'm using PostgreSQL v13.1):
CREATE ROLE blog_user;
GRANT blog_user TO current_user;
And I created a function
CREATE FUNCTION SIGNUP(username TEXT, email ...
0
votes
1answer
25 views
User Permisssions White List vs Black List
I have Applications, Roles, Users, Permissions, Application_Permissions, User_Permissions, Role_Permissions, Application_Roles and Role_Permissions tables. So, permission can be defined at application ...
2
votes
1answer
109 views
Allow user to GRANT certain permissions to others
I have tried googling this but may well be using the wrong terms... permissions and the like aren't my strong point.
What I want to do is first create a role - eg 'Snr_Analyst' - with certain ...
3
votes
3answers
159 views
Error 297, Severity 19 trying to create new table as sysadmin
I am completely scratching my head right now. I have two database instances that I am trying to add a table to, and both give me the same error:
The user does not have permission to perform this ...
0
votes
0answers
44 views
Linked server anonymous login error
I am trying to access a database in my UAT server through a windows login credential. When I try to access the database, I get the error Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON' This ...
