Questions tagged [permissions]
Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
1,380
questions
0
votes
1answer
14 views
Allow user to drop only tables / views created by that user in MySQL
Is it possible to allow a user to only drop tables and views that he/she created in MySQL? How is this achieved?
0
votes
0answers
13 views
MySQL User Privileges by IP using Wildcards (%)
To make a long story short, I'm taking over some support for an electronic medical record (EMR) with a MySQL backend. When troubleshooting an issue with functionality, we discovered the EMR ...
1
vote
2answers
34 views
Select failed from V$LOGMNR_CONTENTS when called from a procedure
Assuming the following user with these privileges granted:
-- create admin user on CDB
CREATE USER c##myadmin IDENTIFIED BY myadmin DEFAULT TABLESPACE system QUOTA UNLIMITED ON system ACCOUNT UNLOCK
/
...
1
vote
1answer
33 views
Permission denied for view beyond its own schema
There are two schemes rohdaten_fiat and staging_fiat. I have created a view in the latter one based on the first one.
CREATE VIEW staging_fiat.udz_odx_dtcs AS
SELECT * FROM rohdaten_fiat....
0
votes
1answer
29 views
Deny DDL_ADMIN permissions to a role on [dbo] schema
I have several database schemas like,
[ext],[stag],etc
and of course the built in [dbo] schema,
and also have a role called [MyRole].
My plan is to add [MyRole] to the DDL_ADMIN role, so they can ...
0
votes
0answers
15 views
Why isn't “DROP OWNED BY” freeing up my ability to drop a role?
I'm using Postgres 9.6 on Mac. I would like to drop a user/role. I logged in as my super user (postgres) and tried this
postgres=# DROP ROLE chicommons;
ERROR: role "chicommons" cannot be ...
0
votes
1answer
24 views
How to GRANT the USAGE privilege on SCHEMAS that will be created in the future
I need a role to access a schema owned by another role, which can be dropped and re-created in the future. For the first part of my requirement, i.e. for an existing schema, the following would do:
...
0
votes
1answer
25 views
Why does ALTER AUTHORIZATION on a table drop all permissions on the target?
This fact is documented here:
ALTER AUTHORIZATION (Transact-SQL)
If the target entity is not a database and the entity is being
transferred to a new owner, all permissions on the target will be
...
3
votes
1answer
75 views
PostgreSQL: Administration as Non-Superuser
I have a database on a shared PostgreSQL server. I possess the ownership of the database and the CREATEROLE privilege and would probably be able to get a few other privileges if I request them but I ...
0
votes
0answers
24 views
Can't see backup files in the shared folder
Yesterday we tried to perform a restore operation but faced with an issue where SQL Service Account couldn't see backup files that were located in shared folder. The SQL Service Account that we use is ...
0
votes
1answer
18 views
How do I terminate the old connection when a user of the same account login again?
I want to set up a server while multiple users could login at the same time, as long as they are not the "same user".
How could I set it up so when the user with the account username "...
0
votes
1answer
25 views
Confused by GRANT ALL PRIVILEGES causing Access Denied for database 'mysql'
I thought I understood grants in mysql, but this particular problem has me stumped.
I am logged in as the 'dbadmin' user on a mysql 5.6.27 database.
+---------------------------------------------------...
0
votes
1answer
106 views
ORA 01031 Insufficient privileges on GRANT SELECT on ALL_CATALOG to a user as system user
Command:
GRANT SELECT ON ALL_CATALOG TO appdbuser
*
Error:
ERROR at line 1:
ORA-01031: insufficient privileges
PROBLEM:
I want my Oracle XE system user (<-important) to be able ...
2
votes
3answers
143 views
Oracle allows inserting into table even after revoking quota
I am studying creating users and granting roles and I have come across this scenario where I grant unlimited quota to a user, insert into the table and then revoke the quota. I expected that after ...
0
votes
1answer
47 views
Switching SQL Server service credentials to AD account
To pursue best practice for SQL Service accounts, I’m working through changing the SQL service account to be AD accounts for our existing SQL servers. The first one I did was fine because it was a ...
0
votes
2answers
35 views
reapply permissions post sql server restart
In our environment, users were granted read/write/ddladmin permissions on tempdb database (dev/qa/prod).
These permissions will be lost when SQL Services restart, as tempdb rebuilds every time. One ...
0
votes
0answers
12 views
How do I enable pgadmin4 (PostgreSQL12) to read and write files in directories of other Linux Users on RHEL8/CentOS8 [duplicate]
While trying to export a query result set from PGAdmin4 on PostgreSQL12 to a CSV I am encountering the following error:
ERROR: could not open file "/home/linuxusername/Downloads/data.csv" ...
0
votes
3answers
60 views
Revoke and Grant Privileges on SQL Server Database
I have a user that I want to grant all privileges on all database tables except for DROP, TRUNCATE, DELETE, INSERT and UPDATE.
The Database has over 300 tables and I can't do this one by one. I need ...
7
votes
4answers
2k views
What could cause SQL Server to deny execution of a SP at first, but allow it later with no privileges change?
A user (Windows login) just complained he was denied the execution of a procedure. I went to check and verified he had the privileges to execute it. I didn't change anything (and right now I'm the ...
0
votes
2answers
42 views
Changing Table Ownership in Postgres from Postgres User
I have a database with some tables that was created by a certain user. All tables and sequences in that DB were owned by that user. I needed to change the owner of those tables and sequences to be ...
1
vote
0answers
27 views
Create a user with rights and privileges between root and limited (CRUD single database) user
Is it possible to create a mid-root MySQL user, who will have the ability to create other users, with scope limited to databases which mid-root user creates? This mid-root user would not have the ...
0
votes
2answers
82 views
MySQL do not accepts wildcard for tables name level grant
Trying to grant a user select privilege on multiple tables using wildcards as following:
GRANT SELECT ON 'DBname'.'foo_%' TO 'username'@'%' IDENTIFIED BY 'password';
But keep giving the following ...
0
votes
1answer
25 views
Stored Procedure Signed by Certificate Unable to Add Members to Database Roles
I created a Stored Procedure that performs the Following tasks:
Creates database
Change owner to sa
Set recovery model
Creates users in database
Adds users to database roles.
Grants execute and view ...
0
votes
1answer
45 views
MariaDB: How can I grant read-only privileges for Stored Procedures?
I've granted SELECT privileges for a user to select on all tables of a database. However that user is unsable to view store procedures.
I'd want to grant only the permission for SHOW CREATE PROCEDURE (...
0
votes
1answer
19 views
GRANT ROLE TO USER in MySQL
I created one role QI_RO, granted all privileges on all schemas on the server and I was trying to grant role privilege to another user but throwing error.
GRANT QI_RO to test_user@'%';
Error Message:
...
1
vote
1answer
31 views
I need a way to give a sql authenticated user read access to a windows directory
A SQL-authenticated user SBA_USER is selecting from a View which uses Linked Server which points to an Excel spreadsheet in the I:\Folder directory on a windows server.
Problem I have is that the ...
0
votes
1answer
129 views
How is the “Adjust memory quotas for a process” user right assignment used in SQL Server 2019?
I am looking at the Configure Windows Service Accounts and Permissions doc (https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/configure-windows-service-accounts-and-permissions?...
0
votes
0answers
4 views
SSAS permissions needed for Xevents
What permissions are minimum needed to allow developers to create and view Xevents sessions on an SSAS instance.
Do they need Full control on the instance or can this be done with less permissions?
...
1
vote
1answer
46 views
how to run SQL query without permission
there is a sql query that joins both example1.dbo.table1 and example2.dbo.table2
User1 has no select permission on example1 DB.
User1 has select permission on example2 DB.
User2 can run that query
how ...
0
votes
2answers
38 views
User cannot query cross-database, despite having permissions for both databases
SQL Server 2017 Enterprise (14.0.3356.20), running on Windows Server 2016.
I have a situation where an application's user needs to join on a table in a separate database in the same instance, but I'm ...
-2
votes
2answers
52 views
How to prevent database shrinking
We have a 3° party application, with an application user who needs to be db_owner on the database (not my choice) on SQL Server system. All stored procedures are encrypted in this database. At some ...
0
votes
1answer
30 views
drop postgresql schema public without losing extensions
As part of my development workflow, I often use
drop schema public cascade;
create schema public;
in order to get a clean state of the test database before re-loading my table and stored procedure ...
0
votes
1answer
19 views
Grant permissions to only specific tables in a Schema
I am having a schema where I wanted to grant permissions in the following manner. What is the right way of doing this? To keep this simple, I am putting an example.
SCHEMA - HR
TABLES:
GEO_EMPLOYEE
...
0
votes
0answers
7 views
In Redshift how can I create an user which which has only user creation privileges?
The primary requirement is to automatically create or alter users based on user information stored in a table. I am planning to write a stored procedure / use Databricks notebook to do the automation. ...
0
votes
0answers
19 views
Mysql user with grant option cannot grant access to another user
in my mysql server there is a user mgenkin with the following privileges:
+---------------------------------------------------------------------------+
| Grants for mgenkin@% ...
0
votes
0answers
10 views
db_datawriter and db_ddladmin on a server-level? [duplicate]
Ok, since SQL Server 2016 we have new server-level permissions that allow to grant connect and select to/on any exising or future databases on the server instance
use master
grant connect any ...
0
votes
0answers
13 views
SQL Group Execution Rights to Read only SPs and functions - By not changing objects' schemas
We have a SQL Developer Group.. We want to give them access to execute functions and sps but not to any that amends data in any way..
We currently only have the DBO schema and all objects sits on that ...
0
votes
1answer
104 views
Oracle: ORA-00942: “table or view does not exist” in SQL Developer
in SQL Developer when i get session information he return me this error message: (ORA-00942: "table or view does not exist"). Can i resolve this with add grant to privilege of my user? Wich ...
0
votes
1answer
19 views
Is it possible to grant a user the equivalence of ownership over a another users schema?
Im trying to create a trainer/trainee environment in Oracle 18c XE. So far I have 4 trainee users which all have the hr-sample installed. Now, I plan on having one trainer user that is able see ...
0
votes
1answer
44 views
“Permission denied” in Postgres 12 trying to use to_regclass() on table partitions
I have a partitioned table public.events owned by user web. Running this query:
SELECT to_regclass('public.events_52642b42e4b0889a77dcd6db')
(to confirm that a partition is present for a given ...
0
votes
1answer
133 views
Execute privilege granted successfully, but I can't execute the procedure
I am using the database as me.
The procedure exists as an object that belongs to me.
Grant sucessful.
But when I attempt to EXECUTE insert_into_purified; i get
Error starting at line : 469 in ...
-1
votes
1answer
19 views
Permissions needed to list databases
A remote application is able to list database names if we give 'sa' rights to the application group. If we remove 'sa' rights, just with public server role they can't see databases, even the ...
0
votes
1answer
44 views
postgresql grant user privilages to dynamically created tables
We have 2 postgresql users. One user (dbworkeruser) for creating tables dynamically (from C# worker) and other user (injestworkeruser) for inserting data into these tables (from another C# worker as ...
0
votes
1answer
26 views
MS SQL Server 2016 - Database Security - Login Permissions
I have an SQL Server 2016 database with Always On structure. I have a login that I called x. My x login's properties are:
Default database: abc
Server roles: public (ticked)
User mapping: Map (ticked)...
0
votes
0answers
52 views
Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE' vulnerability for Windows 2008 R2 SQL
I have a MSSQL Windows 2008 R2 server. Vulnerability for "Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'" has been found. Current ...
0
votes
1answer
15 views
POWA analyzer displays error 500 after logging in
I tried to install POWA web analyzer. I can see the login page but after login there is a 500 error message.
This is the error at the server:
ProgrammingError: (psycopg2.errors.InsufficientPrivilege) ...
1
vote
1answer
40 views
Do I need GRANT for INSERT to table If has EXECUTION GRANT for procedure?
I have five domain users and five roles in my database. GRANT EXECUTE adds to the appropriate roles. Roles are included in other roles, i.e. at most we have one role that has grants for two procedures,...
0
votes
2answers
119 views
Oracle 12c - Insufficient Privileges When Trying To Create A Trigger With SYS User
I want to create a trigger for CRE schema. I'm trying to create this trigger with SYS user but I have insufficient privileges error.
My trigger:
CREATE OR REPLACE TRIGGER CRE.TRIGGER_NAME
AFTER LOGON ...
0
votes
1answer
217 views
How to check who has permission to execute a stored procedure?
I have two environments/servers. Each has two databases, say DATABASE_A and DATABASE_B. There is a stored procedure in DATABASE_A (in both environments) that queries DATABASE_B and also calls multiple ...
0
votes
1answer
22 views
Oracle auditing: Is it possible to log when a permission is being used?
Does Oracle offer a way to log instances where a given permission is evaluated?
Suppose I GRANT SELECT ANY DICTIONARY or something similar to a role, I am looking for a way to log every instance where ...
