Questions tagged [permissions]
Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
0
votes
1answer
29 views
Permissions on SQL Server Sequences
The AD Group to which I belong has db_owner permissions on database LandingZone. The application I am debugging, that is running under my ID, is doing a SELECT NEXT VALUE FOR ThisSchema.ThatSequence. ...
1
vote
1answer
32 views
Despite of using GRANT … ON ALL TABLES (or ALL SEQUENCES) TO user, user cannot access newly created tables (or sequences)
For a production server, I wanted to separate the super user, admin and app roles to limit scope of mistakes.
So I've created an account that our app uses to access the DB, and an admin account. The ...
1
vote
1answer
69 views
Who has SHOWPLAN permissions on a database
Is there a way I can see all users in a database who currently have access to view execution plans? That is, who has SHOWPLAN permissions
0
votes
1answer
57 views
How to Restrict INSERT operations on table for DB2?
I have a table OAUTH20_TOKEN_CACHE for which I have restricted INSERT operations by running below command.
db2 REVOKE INSERT ON HVD121.OAUTH20_TOKEN_CACHE FROM USER HVD121
This could be seen
...
0
votes
0answers
8 views
Can not move MySQL data folderto external storage
OS Ubuntu 18.04, laptop, ssd partitioned for two OS (win8 and linux), second drive mounted with permissions. Line from fstab:
UUID={UUID} /media/iam/storage ntfs-3g permissions 0 1
I created dir db/ ...
1
vote
0answers
9 views
virtual MySql server with mounted RAID array
I have a Ubuntu 16.04 server with an 18TB RAID array. I am running virtual servers on the server using Wok/Kimchi and am wondering if it is reasonable to run a MySQL virtual server and set the data ...
1
vote
1answer
34 views
How to change owner of a table within a PostgreSQL Database on Azure?
I attempting to restore a database into a PostgreSQL instance on Azure.
I am issuing these statements as postgres and attempting to change owner to another role that was a superuser.
My restore ...
0
votes
2answers
29 views
SQL Server database level roles for creating tables
Is there a way to create or change a special role for creating tables? Our software developer team has db_datareader and db_datawriter roles but they can not create new tables.
I read this article ...
0
votes
1answer
20 views
Postgres 10.5: Granting full schema access to a user that isn't the owner
So the underlying problem I'm having is trying to migrate my on premise Postgres 10.5 instance to RDS. RDS does NOT give end users the SuperUser role so I'm hitting tons of permissions issues when ...
1
vote
2answers
36 views
Creating/restoring mdf/ldf to non-default file location giving access denied
Default folder is typical C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\DATA. But C: drive on server is almost full.
So, in restoring an 11gb database from another server, I ...
-1
votes
0answers
18 views
mysql - allow a user to grant privilliges to databases to other users
My goal is to allow the blah_service user to grant privileges to all databases that start with blah to other database users.
/* This results in access denied error.
-- execute this as DB Super user
...
-1
votes
2answers
45 views
What permissions should be added to public users sql [closed]
I have a SQL Server and am looking at making it public.
What I mean by this is: I can create a DB and give access to myself and friends etc.
I need to create a login which can only view databases it ...
1
vote
1answer
61 views
SQL Server - drop user triggered silent revoke of privileges
I encountered following scenario:
A user X granted a ton of permission in the SQL Server database. For example it granted SELECT permission on table Y to user Z.
A user X was dropped with simple ...
0
votes
0answers
36 views
NT SERVICE accounts should be sysadmins? [duplicate]
I have the following query to get me a list of sysadmins in the current server:
select 'ServerRole' = SUSER_NAME(rm.role_principal_id),
'MemberName' = lgn.name ,
'Status'= Case when ...
1
vote
0answers
19 views
Granting access control on specific columns in PostgreSQL
The following screenshot is from an online learning platform I am using to learn SQL (more specifically PostgreSQL). I am concerned that I'm not understanding the following paragraph correctly.
It ...
1
vote
1answer
71 views
Can't create database on volume mounted as folder (Error Msg 5123 & 1802)
SQL Server 2016 SP1 + CU8 Installed on Windows Server 2016 Standard Edition.
Everything was working fine for a while and I was able to create databases until for some reason unbeknownst to me, a ...
0
votes
1answer
16 views
Audit MariaDB Which User Account Privileges Are Being Used
I'm looking to improve the security of my MariaDB installation by better auditing the user accounts and the privileges of each user account.
This database is being provided as a service out to many ...
0
votes
0answers
12 views
Azure SQL database AAD user can't connect
I've read through the documentation and have tried many, many things to get this to work but am still having trouble.
The AAD user is a member of a group that has been provisioned Contributor ...
2
votes
2answers
101 views
How can to make a new user see table in existing schema [closed]
I'm new into Oracle so this question might be dumb. I created new user and now I would like him to see table (or even better all tables by one command) in already existing schema (hr schema in this ...
1
vote
2answers
404 views
GRANT ALL ON ALL TABLES IN SCHEMA does not allow user to see tables
I have a pretty simple script to create a new database and to create a new user to access this database. This is run by the default postgres user. After granting access to the database and schema to ...
1
vote
2answers
256 views
Switch user to 'postgres' user on macOS results in “su: Sorry” error
The Postgres installers kindly provided to the community by EnterpriseDB.com creates a postgres user account on macOS as is common.
In a console session in Terminal.app, I need to switch to that user....
2
votes
0answers
160 views
Postgres: permission denied for relation for read_only user
I am trying to set up a new read only user in postgres. I did the following steps to create the new user:
sudo -u postgres createuser --interactive
name: read_only_user
superuser: n
...
0
votes
1answer
27 views
Which grants are needed to access a table?
I want to know which grants at the very least are required to select/insert/update/delete from a table.
Say I have a table t in schema s in database d and a role r.
I start with granting the ...
1
vote
1answer
32 views
Database Reader Role with the ability to Create, View and execute stored procedure's and view's in sql server
I will need to allow report writers on the Subscription database to be able to view the table, create alter and delete stored procedure and views. Since it is a transactional replication they cannot ...
0
votes
1answer
113 views
cross database ownership - The server principal is not able to access the database under the current security context
I have this script that set a bunch of databases to the same db owner, and set cross database ownership on at database level
select database_name=name,
db_owner_name=suser_sname(owner_sid),
...
1
vote
1answer
46 views
The current security context cannot be reverted
Msg 15199, Level 16, State 1, Line 29 T he current security context
cannot be reverted.
Please switch to the original database where Execute As was called
and try it again.
execute as login=...
0
votes
0answers
37 views
permissions for the account running the sql server reporting services
I was checking one of my SSRS (sql server reporting services) server and notice that the SSRS service is using the same account that is used for the SQL Server services.
I would prefer it had its own ...
1
vote
1answer
82 views
What is included in ALL permissions for functions in PostgreSQL?
I am trying to find references to what the difference between EXECUTE and ALL is in:
GRANT { EXECUTE | ALL [ PRIVILEGES ] } ON { FUNCTION | ALL FUNCTIONS IN SCHEMA }...
but all I can find is what ...
1
vote
1answer
48 views
how to script out all the permissions in a folder using powershell?
Using the script below I find out where are the data and log folders:
declare @rc int,
@dir nvarchar(4000)
declare @data nvarchar(4000)
declare @log nvarchar(4000)
...
4
votes
1answer
355 views
What are the rules for using COLLATE in a query?
I am putting a script together, that gives me the permissions on database objects.
SELECT permission_order=710
,permission_type = 'Object Level Permissions'
,db = db_name(),
login_=...
0
votes
0answers
35 views
SQL Login for SSRS Reports require EXECUTE permissions?
Recently my team did a SSRS report deployment.The reporting server was installed in application server and it was pointed to database server.I don't know why we do like that?Probably to avoid load on ...
0
votes
2answers
161 views
Why is dbo the only grantor in Microsoft SQL Server?
I can't understand why is dbo the only grantor in SQL Server? Or am I wrong?
I mean it as follow:
No matter as which user I am currently loged in in SQL Server Management Studio, when I go to ...
1
vote
1answer
26 views
oracle: deny naked sql statements
I'm looking for a solution in oracle 12c to deny INSERT, UPDATE and DELETE statements on tables.
I would only provide SELECT privileges and exec rights to execute procedures which INSERT, UPDATE or ...
2
votes
1answer
171 views
How to script out the grant view on login permission?
I create the following login without any permissions.
USE [master]
GO
IF NOT EXISTS (SELECT * FROM sys.server_principals WHERE name = N'Radhe')
CREATE LOGIN [Radhe] WITH PASSWORD=N'...
2
votes
1answer
37 views
Only allow access to a table via a function, not directly via queries
I have a table t and some functions which access t. For example:
create function list_t() returns setof t as $$
select * from t;
$$ language sql stable;
Is it possible to define role permissions ...
1
vote
1answer
109 views
Error granting SELECT on view that uses ALL_OBJECTS
I'm in the middle of testing Oracle 12c for our application. I have something similar to this view in a particular schema, which we'll call MY_OWNER_SCHEMA for this question:
CREATE OR REPLACE VIEW ...
1
vote
0answers
33 views
Create a postgres user role that can't access a specific table
I have a postgres 9.6 database with many tables. I need to create a role that doesn't have access to one of these tables.
I think I need to do a Grant Permissions, but I haven't been able to find ...
1
vote
2answers
83 views
Bit column vs relationships?
Two examples:
Table users, each user may have or not have some of ~10 possible permissions (like "can login, can post, can edit, can delete" etc).
Table articles, each article may have or not have ...
0
votes
1answer
68 views
How to grant Connect & Create Privilege on current Database in PostgreSQL?
After looking at the docs, I know that you can grant Connect & Create Privileges by using the following commands:
GRANT CREATE ON DATABASE <db_name> TO user;
GRANT CONNECT ON DATABASE <...
9
votes
1answer
476 views
Grant deny permission stacking
For the role db_denycustomer, I want only the column code of the customer table to be SELECTable, and none of the others. So I did this:
DENY SELECT ON dbo.customer TO db_denycustomer
GRANT SELECT ON ...
2
votes
1answer
44 views
Does a user who has permissions to select from a view also need select granted to the children entities of that view?
If view 1 uses tables A and B, and a user has SELECT granted on view 1 is that sufficient for the user to select from view 1 or does he also need SELECT granted on tables A and B.
Specific details on ...
1
vote
1answer
781 views
The EXECUTE permission was denied on the object 'SPROC', database 'DATABASE', schema 'dbo'
I have a few users that are unexpectedly receiving this error message today when they attempt to refresh a stored procedure via Excel:
The EXECUTE permission was denied on the object 'SPROC', ...
1
vote
1answer
50 views
Apache Cassandra INSERT-only permissions
Looking at the Cassandra documentation, it appears that the smallest write-only permission on a table you can grant is MODIFY, which includes UPDATE, DELETE and TRUNCATE.
Is there a proper way to ...
0
votes
0answers
28 views
Apply default privileges to tables when their owner changes
I am using an event trigger to change view and table owners upon creation.
Unfortunately that means that default privileges are not applied. Is there a good way of applying default privileges in this ...
-1
votes
1answer
157 views
granting permissions in MS SQL Server
I am logged in with a windows authentication account which is sa. Trying to grant CONTROL SERVER permission to myself, and shows this error
Cannot grant, deny, or revoke permissions to sa, dbo, ...
1
vote
1answer
79 views
MySQL privileges for roles aren't applying to users?
I've done what I consider to be sufficient research with no answers to justify posting this question here. I am attempting to grant users permission to execute certain stored procedures. And because ...
1
vote
1answer
161 views
Mysql preventing truncate and drop table statements for a specific table
I have a MySQL table that serves as an immutable event store. I added triggers to prevent rows from being updated or deleted;
CREATE TABLE t2 (
str VARCHAR(32),
ts TIMESTAMP(6) DEFAULT ...
2
votes
1answer
122 views
Stored Procedure Execute as Owner Close Database Connections Not Working
I created a stored procedure to allow users to Close All Db connections in the QA environment. I am SA and created the procedure.
When I modify the SP , run it Without 'Execute as Owner', I get ...
0
votes
2answers
55 views
read/write/execute to pl/sql grants [closed]
For a current task and future references, I am wondering how pl/sql grants (select, insert, update, delete, references, alter, index, all) are categorized from a read/write/execute or read/read-write/...
1
vote
1answer
16 views
DB user restricted permissions vs Docker?
As far as I know, it's usually considered a good practice when developing websites to store in website config DB credentials of the user without ALTER/DROP permissions (so user may only select, insert,...
