Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
0
votes
1answer
27 views
Can't create database on volume mounted as folder (Error Msg 5123 & 1802)
SQL Server 2016 SP1 + CU8 Installed on Windows Server 2016 Standard Edition.
Everything was working fine for a while and I was able to create databases until for some reason unbeknownst to me, a ...
0
votes
1answer
10 views
Audit MariaDB Which User Account Privileges Are Being Used
I'm looking to improve the security of my MariaDB installation by better auditing the user accounts and the privileges of each user account.
This database is being provided as a service out to many ...
0
votes
0answers
34 views
How can I get all the users on a database along with the access levels(not using system database)
I've come across few example to get users and permission on master or msdb. How do I list user(s) and their access level(s) on a user database using the SSMS UI.
0
votes
0answers
7 views
Azure SQL database AAD user can't connect
I've read through the documentation and have tried many, many things to get this to work but am still having trouble.
The AAD user is a member of a group that has been provisioned Contributor ...
2
votes
2answers
96 views
How can to make a new user see table in existing schema [closed]
I'm new into Oracle so this question might be dumb. I created new user and now I would like him to see table (or even better all tables by one command) in already existing schema (hr schema in this ...
0
votes
0answers
5 views
Netezza permissions binary calculation
The Netezza system stores the user/group permissions as a binary number. Has anyone documented which permissions have which values? I have figured out three, but I don't want to reinvent the wheel.
1
vote
2answers
72 views
GRANT ALL ON ALL TABLES IN SCHEMA does not allow user to see tables
I have a pretty simple script to create a new database and to create a new user to access this database. This is run by the default postgres user. After granting access to the database and schema to ...
1
vote
2answers
67 views
Switch user to 'postgres' user on macOS results in “su: Sorry” error
The Postgres installers kindly provided to the community by EnterpriseDB.com creates a postgres user account on macOS as is common.
In a console session in Terminal.app, I need to switch to that user....
2
votes
0answers
42 views
Postgres: permission denied for relation for read_only user
I am trying to set up a new read only user in postgres. I did the following steps to create the new user:
sudo -u postgres createuser --interactive
name: read_only_user
superuser: n
...
0
votes
0answers
44 views
is it best practices leaving the sql server browser account as nt authority\local service?
The SQL Server Browser Service requires the following privileges:
Account Privileges:
SQL Server Browser listens on a UDP port and accepts unauthenticated requests by using SQL Server ...
0
votes
1answer
26 views
Which grants are needed to access a table?
I want to know which grants at the very least are required to select/insert/update/delete from a table.
Say I have a table t in schema s in database d and a role r.
I start with granting the ...
1
vote
1answer
31 views
Database Reader Role with the ability to Create, View and execute stored procedure's and view's in sql server
I will need to allow report writers on the Subscription database to be able to view the table, create alter and delete stored procedure and views. Since it is a transactional replication they cannot ...
0
votes
1answer
45 views
cross database ownership - The server principal is not able to access the database under the current security context
I have this script that set a bunch of databases to the same db owner, and set cross database ownership on at database level
select database_name=name,
db_owner_name=suser_sname(owner_sid),
...
1
vote
1answer
26 views
The current security context cannot be reverted
Msg 15199, Level 16, State 1, Line 29 T he current security context
cannot be reverted.
Please switch to the original database where Execute As was called
and try it again.
execute as login=...
0
votes
0answers
22 views
permissions for the account running the sql server reporting services
I was checking one of my SSRS (sql server reporting services) server and notice that the SSRS service is using the same account that is used for the SQL Server services.
I would prefer it had its own ...
1
vote
1answer
34 views
What is included in ALL permissions for functions in PostgreSQL?
I am trying to find references to what the difference between EXECUTE and ALL is in:
GRANT { EXECUTE | ALL [ PRIVILEGES ] } ON { FUNCTION | ALL FUNCTIONS IN SCHEMA }...
but all I can find is what ...
1
vote
1answer
35 views
how to script out all the permissions in a folder using powershell?
Using the script below I find out where are the data and log folders:
declare @rc int,
@dir nvarchar(4000)
declare @data nvarchar(4000)
declare @log nvarchar(4000)
...
4
votes
1answer
293 views
What are the rules for using COLLATE in a query?
I am putting a script together, that gives me the permissions on database objects.
SELECT permission_order=710
,permission_type = 'Object Level Permissions'
,db = db_name(),
login_=...
0
votes
0answers
26 views
SQL Login for SSRS Reports require EXECUTE permissions?
Recently my team did a SSRS report deployment.The reporting server was installed in application server and it was pointed to database server.I don't know why we do like that?Probably to avoid load on ...
0
votes
2answers
99 views
Why is dbo the only grantor in Microsoft SQL Server?
I can't understand why is dbo the only grantor in SQL Server? Or am I wrong?
I mean it as follow:
No matter as which user I am currently loged in in SQL Server Management Studio, when I go to ...
1
vote
1answer
23 views
oracle: deny naked sql statements
I'm looking for a solution in oracle 12c to deny INSERT, UPDATE and DELETE statements on tables.
I would only provide SELECT privileges and exec rights to execute procedures which INSERT, UPDATE or ...
2
votes
1answer
99 views
How to script out the grant view on login permission?
I create the following login without any permissions.
USE [master]
GO
IF NOT EXISTS (SELECT * FROM sys.server_principals WHERE name = N'Radhe')
CREATE LOGIN [Radhe] WITH PASSWORD=N'...
2
votes
1answer
37 views
Only allow access to a table via a function, not directly via queries
I have a table t and some functions which access t. For example:
create function list_t() returns setof t as $$
select * from t;
$$ language sql stable;
Is it possible to define role permissions ...
1
vote
1answer
65 views
Error granting SELECT on view that uses ALL_OBJECTS
I'm in the middle of testing Oracle 12c for our application. I have something similar to this view in a particular schema, which we'll call MY_OWNER_SCHEMA for this question:
CREATE OR REPLACE VIEW ...
1
vote
0answers
30 views
Create a postgres user role that can't access a specific table
I have a postgres 9.6 database with many tables. I need to create a role that doesn't have access to one of these tables.
I think I need to do a Grant Permissions, but I haven't been able to find ...
1
vote
2answers
79 views
Bit column vs relationships?
Two examples:
Table users, each user may have or not have some of ~10 possible permissions (like "can login, can post, can edit, can delete" etc).
Table articles, each article may have or not have ...
0
votes
1answer
15 views
How to grant Connect & Create Privilege on current Database in PostgreSQL?
After looking at the docs, I know that you can grant Connect & Create Privileges by using the following commands:
GRANT CREATE ON DATABASE <db_name> TO user;
GRANT CONNECT ON DATABASE <...
9
votes
1answer
460 views
Grant deny permission stacking
For the role db_denycustomer, I want only the column code of the customer table to be SELECTable, and none of the others. So I did this:
DENY SELECT ON dbo.customer TO db_denycustomer
GRANT SELECT ON ...
2
votes
1answer
40 views
Does a user who has permissions to select from a view also need select granted to the children entities of that view?
If view 1 uses tables A and B, and a user has SELECT granted on view 1 is that sufficient for the user to select from view 1 or does he also need SELECT granted on tables A and B.
Specific details on ...
1
vote
1answer
412 views
The EXECUTE permission was denied on the object 'SPROC', database 'DATABASE', schema 'dbo'
I have a few users that are unexpectedly receiving this error message today when they attempt to refresh a stored procedure via Excel:
The EXECUTE permission was denied on the object 'SPROC', ...
1
vote
1answer
44 views
Apache Cassandra INSERT-only permissions
Looking at the Cassandra documentation, it appears that the smallest write-only permission on a table you can grant is MODIFY, which includes UPDATE, DELETE and TRUNCATE.
Is there a proper way to ...
0
votes
0answers
28 views
Apply default privileges to tables when their owner changes
I am using an event trigger to change view and table owners upon creation.
Unfortunately that means that default privileges are not applied. Is there a good way of applying default privileges in this ...
-1
votes
1answer
100 views
granting permissions in MS SQL Server
I am logged in with a windows authentication account which is sa. Trying to grant CONTROL SERVER permission to myself, and shows this error
Cannot grant, deny, or revoke permissions to sa, dbo, ...
1
vote
1answer
43 views
MySQL privileges for roles aren't applying to users?
I've done what I consider to be sufficient research with no answers to justify posting this question here. I am attempting to grant users permission to execute certain stored procedures. And because ...
1
vote
1answer
98 views
Mysql preventing truncate and drop table statements for a specific table
I have a MySQL table that serves as an immutable event store. I added triggers to prevent rows from being updated or deleted;
CREATE TABLE t2 (
str VARCHAR(32),
ts TIMESTAMP(6) DEFAULT ...
2
votes
1answer
90 views
Stored Procedure Execute as Owner Close Database Connections Not Working
I created a stored procedure to allow users to Close All Db connections in the QA environment. I am SA and created the procedure.
When I modify the SP , run it Without 'Execute as Owner', I get ...
0
votes
2answers
48 views
read/write/execute to pl/sql grants [closed]
For a current task and future references, I am wondering how pl/sql grants (select, insert, update, delete, references, alter, index, all) are categorized from a read/write/execute or read/read-write/...
1
vote
1answer
13 views
DB user restricted permissions vs Docker?
As far as I know, it's usually considered a good practice when developing websites to store in website config DB credentials of the user without ALTER/DROP permissions (so user may only select, insert,...
0
votes
1answer
24 views
Organizing and assigning privileges to multiple objects in MySQL
I'm new to MySQL, moving from MS SQL Server, and I'm wondering if there's a way to logically group tables, views, sp's, etc in the same manner as you would with schemas in SQL Server....seeing as how ...
1
vote
1answer
72 views
What permissions does HAS_DBACCESS check?
I assume that
SELECT HAS_DBACCESS('database name')
is equivalent to
SELECT HAS_PERMS_BY_NAME('database name', 'DATABASE', 'permission name')
for some permission (or set of permissions, the results ...
0
votes
1answer
17 views
Postgres - Revoke database acess from user, but allow replication acess
The DB have a replication server, i need to revoke the permission on the user "user_bi" but allow the acess of this same user on the replication server!
REVOKE ALL ON ALL TABLES IN SCHEMA public FROM ...
0
votes
0answers
20 views
How to create a user in postgres that has a access to particular schema
I want to create a user in the postgres database which has read access to a particular schema in the database. how can I create that?
eg:- if in case a database has 3 schemas public, test and test2. ...
2
votes
1answer
200 views
SQL Server Error while creating User
I tried creating a user with all privileges but I am getting this error:
Microsoft SQL Server Management Studio
Create failed for User 'Hru'. (Microsoft.SqlServer.Smo)
Additional ...
1
vote
1answer
30 views
Permissions for runtime user on all objects in schema (including future objects)
In PostgreSQL 10 - when using an "owner user" (login role owning a schema and all tables, not used by the application at runtime) and a "runtime" user I can GRANT Select/Update/Delete permissions on ...
0
votes
1answer
148 views
How to give read only access to a user to view the tables of different owner in oracle
I have 2 users are present in oracle ex User1 and User2, Under user1 some tables are present ex t1,t2,t3 etc.. . what are the minimum permissions to view the tables of user1 by using user2 ( Just want ...
0
votes
0answers
20 views
How to connect to mdb fie
I have a exe file that read and write from local Db file.
I check this file with Detect It Easy and it tell me that is mdb file.
I can open this file with Microsoft Access, and watch all the tables ...
3
votes
1answer
58 views
Querying an Oracle view don't return records using some clients but it does using others
I was given this view that when I query it using OracleSQLDeveloper it returns nothing, but if I use Toad it does return records!
I cannot inspect the definition of the view, and no errors are ...
1
vote
1answer
18 views
Permission errors on insert after schema drop/create (Pg 9.0.23)
We have a web application that allows users to modify data through an API. In order to allow people to run tests, we provide a sandbox area called 'daily'. This sandbox gets refreshed every day from ...
1
vote
1answer
30 views
PostgreSQL - automating database grants [closed]
We're managing about 200 instances of postgres on Amazon RDS. The problem that we're constantly experiencing is that our "DBA" accounts can't access stuff. Basic stuff. Tables, views, etc.
Is there ...
2
votes
2answers
41 views
How to revoke “Alter role” on users
I have a user "sa" which is sysadmin in a MSSQL instance.
All users who log into the database have the permission to change the password and delete the "sa" user.
Is there a way to revoke this ...
