Questions tagged [permissions]
Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
1,404
questions
0
votes
1answer
7 views
Postgres view role permissions
I am trying to work out how database roles work.
Here is my user case...
create role user1 login password 'user1';
create schema authorization user1;
CREATE ROLE DEV_ROLE;
grant connect, temporary ...
0
votes
1answer
20 views
How to test user permissions
I have two server users, lets say admin and notadmin. I need to test notadmin's permissions. I need set and test VIEW SERVER STATE permission on notadmin, but usually I have access only to database ...
0
votes
1answer
55 views
Powershell script executed by SQL Server doesn't take effect
I'm doing some testing and I want to execute a PowerShell script through xp_cmdshell. Below is the PowerShell script (c:\temp\sqltotext.ps1).
echo "haha" | Out-File "c:\temp\haha.txt&...
0
votes
0answers
51 views
The SQL Scripter library is running a SELECT COUNT(*), how do I stop it?
I'm using the Microsoft.SqlServer.Management.Smo.Scripter library from within a PowerShell script to pull SQL object creation scripts from a DB as part of an automated process. The user account used ...
0
votes
1answer
17 views
User cannot select from table when having SELECT permissions if CONTROL is denied
I'm setting up my database on an Azure SQL Server instance.
(I know the principal names are terrible, it's just a dry run test)
I created a login ("Test"), a user ("Test"), a ...
0
votes
2answers
35 views
How to GRANT or DENY access to an object based on metadata for that object in SQL Server?
We are in the process of reviewing our database permissions among various applications and business groups on SQL Server in a Windows Active Directory domain.
We currently do not use separate schemas ...
1
vote
1answer
28 views
PostgreSQL COPY TO doesn’t honor Linux group privileges
I have issues executing COPY to command, receiving below error msg:
ERROR: could not open file "/home/pgsql/TMP/out.txt" for writing:
Permission denied
Postgres engine is being run as ...
0
votes
0answers
16 views
MySQL: Grant creators of view DROP and ALTER on those views
Is it possible to automatically grant someone the permission to DROP or ALTER their view that they created?
The problem we've got is that there are some views that we don't want the BI team to be able ...
0
votes
1answer
42 views
How are the DBA, SYSDBA, SYSOPER roles and SYS, SYSTEM users related in Oracle?
I don't know if I understand correctly the privileges of these built-in users and roles.
This is the list of information I have found:
I think that DBA and SYSDBA roles enable to do everything - if ...
0
votes
1answer
20 views
Granting select on syscat.schemata - DB2
I was wondering if it is safe to grant select rights to syscat.schemata to users on a DB2 database? What could go "wrong"?
Some tool like DataGrip and DBeaver cannot load connection schemas ...
0
votes
0answers
8 views
Check when a privilege was granted - PostgreSQL
Is there any information_schema view that can tell when an object privilege was granted?
The pg_namespace view doesn't have that.
select
*
from pg_namespace
join lateral (
SELECT
*
from
...
1
vote
1answer
33 views
Find users having grants on a table in MySQL
We grant access to users with the following
grant select, insert, update, delete on product_events to 'product_admin'@'%' ;
Now, like this there are a lot of tables, and a lot of users.
I want to ...
1
vote
1answer
16 views
How do I set up privileges for different schemas?
How do I set up 2 schemas with a total of 5 users?
Schemas:
hp
hpc
Users:
dba - has full access to both schemas (hp, hpc)
hp_dbo - owns all objects in hp schema
hpc_fbo - owns all objects in hpc ...
2
votes
1answer
20 views
Should roles without login have the connect permission on a database?
I want to create a read-only role in PostgreSQL and use it to assign it to multiple new users, who should have read-only access. It makes sense to me to also grant the read-only permissions to the ...
0
votes
1answer
24 views
Why GRANT UPDATE on SEQUENCE in PostgreSQL
I have seen postgresql allowing users to Grant update on a sequence. But never seen any update query on the sequence.
Sequence values are usually changed using ALTER SEQUENCE command. I understand the ...
0
votes
1answer
32 views
is it safe to grant permission to all users in Microsoft sql server
I have a global production server and database, as I all users should have access to it by remote desktop.
Is it possible to grant NTFS permission on all database files (mdf+ldf files) to all users? ...
0
votes
2answers
41 views
MSSQL and ALTER AUTHORIZATION on table has no affect?
I have a schema called [test] with an owner X.
I transferred an ownership of one table [test].[table] (ALTER AUTHORIZATION) to owner Y.
Now, if I understand correctly, even though the owner X owns the ...
2
votes
1answer
20 views
MySQL: Block ANALYZE TABLE Queries
Is there a way to revoke access for ANALYZE TABLE which is granted by needed Insert privilege?
I have an application that throw multiple ANALYZE TABLE queries per second. And am looking for a way to ...
2
votes
1answer
47 views
How to grant access to a specific table across all databases in Mysql?
I want to Grant access like so:
> GRANT INSERT, UPDATE ON `%`.my_table TO 'user'@'%';
ERROR 1146 (42S02): Table '%.my_table' doesn't exist
This is not possible per Mysql documentation on grant:
...
1
vote
1answer
34 views
Copy mysql_native_password to new server
I did a mysqldump of my entire database mysqldump --defaults-file="/home/ubuntu/.my.conf" -u api --all-databases > full-dump.sql . I setup a new mysql and phpmyadmin and loaded the ...
1
vote
2answers
57 views
How to list all grants per user/role on PostgreSQL
I've run these statements on Postgres CLI (I'm using PostgreSQL v13.1):
CREATE ROLE blog_user;
GRANT blog_user TO current_user;
And I created a function
CREATE FUNCTION SIGNUP(username TEXT, email ...
0
votes
1answer
25 views
User Permisssions White List vs Black List
I have Applications, Roles, Users, Permissions, Application_Permissions, User_Permissions, Role_Permissions, Application_Roles and Role_Permissions tables. So, permission can be defined at application ...
2
votes
1answer
106 views
Allow user to GRANT certain permissions to others
I have tried googling this but may well be using the wrong terms... permissions and the like aren't my strong point.
What I want to do is first create a role - eg 'Snr_Analyst' - with certain ...
3
votes
3answers
157 views
Error 297, Severity 19 trying to create new table as sysadmin
I am completely scratching my head right now. I have two database instances that I am trying to add a table to, and both give me the same error:
The user does not have permission to perform this ...
0
votes
0answers
33 views
Linked server anonymous login error
I am trying to access a database in my UAT server through a windows login credential. When I try to access the database, I get the error Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON' This ...
0
votes
1answer
12 views
How to structure MySQL database tables for users and how to handle adding/removing permissions?
I am making a database structure for users, who can become part of a group, and within that group the admin of the group can assign as many permissions to a user as they would like.
This part seems ...
1
vote
1answer
52 views
Why is my Postgres database working for a while and then not able to “start server” once restarted?
Recently, I've started playing around with an old Raspberry Pi 3 b+, and I thought it would be good practice to host a Postgres database on my local network and use it for whatever I want to work ...
2
votes
2answers
46 views
How to allow a certain domain user to create databases on a remote SQL instance?
I want to allow for a certain domain user to be able to create databases on a remote SQL instance.
What steps are necessary and is it possible to perform those steps programmatically in a C# ...
0
votes
1answer
18 views
Allow user to drop only tables / views created by that user in MySQL
Is it possible to allow a user to only drop tables and views that he/she created in MySQL? How is this achieved?
0
votes
0answers
23 views
MySQL User Privileges by IP using Wildcards (%)
To make a long story short, I'm taking over some support for an electronic medical record (EMR) with a MySQL backend. When troubleshooting an issue with functionality, we discovered the EMR ...
1
vote
2answers
43 views
Select failed from V$LOGMNR_CONTENTS when called from a procedure
Assuming the following user with these privileges granted:
-- create admin user on CDB
CREATE USER c##myadmin IDENTIFIED BY myadmin DEFAULT TABLESPACE system QUOTA UNLIMITED ON system ACCOUNT UNLOCK
/
...
1
vote
1answer
68 views
Permission denied for view beyond its own schema
There are two schemes rohdaten_fiat and staging_fiat. I have created a view in the latter one based on the first one.
CREATE VIEW staging_fiat.udz_odx_dtcs AS
SELECT * FROM rohdaten_fiat....
0
votes
1answer
35 views
Deny DDL_ADMIN permissions to a role on [dbo] schema
I have several database schemas like,
[ext],[stag],etc
and of course the built in [dbo] schema,
and also have a role called [MyRole].
My plan is to add [MyRole] to the DDL_ADMIN role, so they can ...
0
votes
0answers
19 views
Why isn't “DROP OWNED BY” freeing up my ability to drop a role?
I'm using Postgres 9.6 on Mac. I would like to drop a user/role. I logged in as my super user (postgres) and tried this
postgres=# DROP ROLE chicommons;
ERROR: role "chicommons" cannot be ...
0
votes
1answer
31 views
How to GRANT the USAGE privilege on SCHEMAS that will be created in the future
I need a role to access a schema owned by another role, which can be dropped and re-created in the future. For the first part of my requirement, i.e. for an existing schema, the following would do:
...
0
votes
1answer
42 views
Why does ALTER AUTHORIZATION on a table drop all permissions on the target?
This fact is documented here:
ALTER AUTHORIZATION (Transact-SQL)
If the target entity is not a database and the entity is being
transferred to a new owner, all permissions on the target will be
...
3
votes
1answer
87 views
PostgreSQL: Administration as Non-Superuser
I have a database on a shared PostgreSQL server. I possess the ownership of the database and the CREATEROLE privilege and would probably be able to get a few other privileges if I request them but I ...
0
votes
0answers
26 views
Can't see backup files in the shared folder
Yesterday we tried to perform a restore operation but faced with an issue where SQL Service Account couldn't see backup files that were located in shared folder. The SQL Service Account that we use is ...
0
votes
1answer
18 views
How do I terminate the old connection when a user of the same account login again?
I want to set up a server while multiple users could login at the same time, as long as they are not the "same user".
How could I set it up so when the user with the account username "...
0
votes
1answer
68 views
Confused by GRANT ALL PRIVILEGES causing Access Denied for database 'mysql'
I thought I understood grants in mysql, but this particular problem has me stumped.
I am logged in as the 'dbadmin' user on a mysql 5.6.27 database.
+---------------------------------------------------...
0
votes
1answer
368 views
ORA 01031 Insufficient privileges on GRANT SELECT on ALL_CATALOG to a user as system user
Command:
GRANT SELECT ON ALL_CATALOG TO appdbuser
*
Error:
ERROR at line 1:
ORA-01031: insufficient privileges
PROBLEM:
I want my Oracle XE system user (<-important) to be able ...
2
votes
3answers
159 views
Oracle allows inserting into table even after revoking quota
I am studying creating users and granting roles and I have come across this scenario where I grant unlimited quota to a user, insert into the table and then revoke the quota. I expected that after ...
0
votes
1answer
59 views
Switching SQL Server service credentials to AD account
To pursue best practice for SQL Service accounts, I’m working through changing the SQL service account to be AD accounts for our existing SQL servers. The first one I did was fine because it was a ...
0
votes
2answers
37 views
reapply permissions post sql server restart
In our environment, users were granted read/write/ddladmin permissions on tempdb database (dev/qa/prod).
These permissions will be lost when SQL Services restart, as tempdb rebuilds every time. One ...
0
votes
0answers
12 views
How do I enable pgadmin4 (PostgreSQL12) to read and write files in directories of other Linux Users on RHEL8/CentOS8 [duplicate]
While trying to export a query result set from PGAdmin4 on PostgreSQL12 to a CSV I am encountering the following error:
ERROR: could not open file "/home/linuxusername/Downloads/data.csv" ...
0
votes
3answers
98 views
Revoke and Grant Privileges on SQL Server Database
I have a user that I want to grant all privileges on all database tables except for DROP, TRUNCATE, DELETE, INSERT and UPDATE.
The Database has over 300 tables and I can't do this one by one. I need ...
7
votes
4answers
2k views
What could cause SQL Server to deny execution of a SP at first, but allow it later with no privileges change?
A user (Windows login) just complained he was denied the execution of a procedure. I went to check and verified he had the privileges to execute it. I didn't change anything (and right now I'm the ...
0
votes
2answers
167 views
Changing Table Ownership in Postgres from Postgres User
I have a database with some tables that was created by a certain user. All tables and sequences in that DB were owned by that user. I needed to change the owner of those tables and sequences to be ...
1
vote
0answers
27 views
Create a user with rights and privileges between root and limited (CRUD single database) user
Is it possible to create a mid-root MySQL user, who will have the ability to create other users, with scope limited to databases which mid-root user creates? This mid-root user would not have the ...
0
votes
2answers
177 views
MySQL do not accepts wildcard for tables name level grant
Trying to grant a user select privilege on multiple tables using wildcards as following:
GRANT SELECT ON 'DBname'.'foo_%' TO 'username'@'%' IDENTIFIED BY 'password';
But keep giving the following ...
