Questions tagged [permissions]
Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
1,171
questions
1
vote
3answers
70 views
T-SQLRevoke permissions to all tables in the sql server in one go
How can we revoke a certain permission to all tables?
I've tried (T-SQL):
REVOKE SELECT on schema::DBO TO [public] AS [dbo]
But nothing happens.. All tables still have Select permission.
I can ...
0
votes
0answers
20 views
MySQL 8 roles - I'm probably missing something obvious
I'm trying to use roles in MySQL 8, and failing. I have read the documentation and as far as I can tell, I'm doing it right. Since this is a 'hello world' level attempt, I assume I'm missing something ...
0
votes
1answer
37 views
Login permission on Availability group database
We have an availability group database. Just wanted to check on the below statement whether it needs to be run on all replica (By failing over and making it primary)or it can be run on the primary ...
1
vote
1answer
27 views
Prevent updating table using procedure in different database
This is my scenario:
Windows User Gabe has db_owner access of database DB1.
Windows User Gabe has db_reader on database DB2.
When the user executes UPDATE DB2.dbo.Tbl1 SET X = 1, they get "The ...
0
votes
0answers
33 views
Which permission is required for OBJECT_ID to return non-null value [on hold]
Firstly, yes, I know I've tagged this 2008, but unfortunately that is a requirement under this particular project I'm working on.
This is a rather complex setup, so please bear with me...
there are ...
0
votes
0answers
18 views
Azure VM Security
With the move to Azure Cloud things are moving fast! I have a question based on Azure VM with a shared SQL Server containing multiple instances.
For example if a Azure VM has 5 instances on there ...
-3
votes
1answer
47 views
Postgres Restore
I need to restore a single schema from production postgres to test.
Test database and schema already exists.
The users/roles & sequences are different on prod to test and after schema is ...
2
votes
1answer
22 views
Removing grants for databases that no longer exist
We have quite a few MariaDB servers with whom the permissions have gotten a bit messy over the years. I'd like to tidy them up.
I've already written some tools for presenting grants/table information ...
1
vote
1answer
30 views
Disallow superusers and single-user mode in POSTGRESQL
I have a doubt about superusers and single-user mode.
I want to restrict the access to a certain database, in a way that only those users which I gave privileges can see the structure of my database....
0
votes
1answer
37 views
how to script server side permissions - specifically EXECUTE ON SYS.XP_PROP_OLEDB_PROVIDER?
I could not script the following server side permissions:
GRANT VIEW DEFINITION ON LOGIN::[site_helpdesk] TO [Radhe]
but thanks to the question below I found a solution to that:
How to script out ...
1
vote
1answer
66 views
SQL statement to hide all system databases in Server from a server login
I want to create a Windows authentication server login and make it cannot see any system databases e.g.master, model.
I know that we can control view definition in database level e.g. database user, ...
1
vote
0answers
22 views
SQL Server Permissions for Intellisense for an Active Directory User? [duplicate]
I have created an Active Directory Group and created it as a user, we'll call it "AD SQL", in my DB. I can successfully login in using Active Directory Authentication and read/write.
However, ...
1
vote
1answer
31 views
PowerBI Service Account granting duplicate execute permissions on stored procedure almost constantly
I have PowerBi Server (Jan 2019) installed on my server. I can see from the default trace that that the PowerBi Service account NT SERVICE\PowerBIReportServer is granting execute permissions on a ...
0
votes
1answer
16 views
revoke and apply privileges on current active sessions
I am revoking some privileges to a user like this:
REVOKE INSERT, UPDATE, CREATE, ALTER ON `name`.* FROM 'user'@'%'
I verify via:
SHOW GRANTS FOR 'user'@'%';
And see that privileges really have ...
0
votes
0answers
29 views
How configure security to query second same server database
I have a database which holds all my permissions and a central database which holds all the logins for all my application. I need to create view that queries both database which reside on the same ...
0
votes
0answers
43 views
Why are my SQL Perfmon counters returning Zero?
I have set up a Perfmon data collector set on one of our servers with SQL server running on it. I also have a scheduled task which imports this data into SQL (set up by following this open source ...
5
votes
1answer
91 views
Grant dbcreator only for databases matching prefix
In Microsoft SQLServer 2017+ I would like to grant the dbcreator role on a single user but only allow her to create databases whose name matches a fixed prefix.
Is it possible to do this at the ...
2
votes
1answer
62 views
In what order MySQL permissions are applied on database?
I want to understand the priority of executing MySQL grants privileges.
For e.g.:
I want to grant two different types of privileges on a single db Demo.
1.GRANT SELECT ON Demo.table1 TO abc@123;
...
0
votes
1answer
21 views
Assigning Permission on Azure SQL Database
I have an azure SQL Database. I already created a new login and user on the database. Question is i want to assign permission on the said user. Permission that will restrict the user to drop table, ...
3
votes
1answer
94 views
How to grant execute permissions to a stored procedure but not to the underlying databases
I am trying to allow a user to run a stored procedure while restricting them read/write access to the underlying tables. I am able to complete this with other stored procedures, but the one I am ...
2
votes
1answer
41 views
Does the SQL Server Service Account have to have access to a network share to perform a backup?
I've been provided a specific domain account to handle backups from my sysadmins. I am slightly confused as I've never been provided a separate domain account to handle backups in the past. I still ...
0
votes
1answer
28 views
Is it possible to grant trigger permissions on only one schema MySQL
I am an analyst that was recently granted a schema on MySQL that I could use for some business needs.
I was told by my DBA that the permissions associated with Triggers require global super user ...
1
vote
0answers
33 views
MongoDB Fails due to permission error even though its setup
Attempting to start my MongoDB server using service mongod start fails for the reason: exception in initAndListen: IllegalOperation: Attempted to create a lock file on a read-only directory: /var/lib/...
2
votes
4answers
98 views
What permissions are required for UPDATE STATISTICS #table WITH ROWCOUNT = xxx?
Can anyone point me to the correct documentation or additional permissions I need besides SA to do the following?
When I run it, I receive the following error:
Cannot find the object "#test" because ...
3
votes
1answer
34 views
How can I check if my user has create index permission?
I'm working on a .NET library that is used with a third-party product I support. My library may be used with many different versions of the product. I don't control the schema of that product, but I ...
7
votes
3answers
547 views
Access to the path 'c:\some\path' is denied for MSSQL CLR
I think this is a permissions problem, but I'm having trouble locating it.
I have a group of CLRs on one server (SQL Server 2016) and they work as they should. All are marked UNSAFE and they do ...
2
votes
1answer
82 views
How to GRANT SELECT by default to B, on tables created by A?
Background
In my PostgreSQL instance (say with one unique database constituted of one table only), I have 2 users:
user_A, who can create and populate my_table,
user_B, who should only be able to ...
1
vote
2answers
22 views
postgresql 9.* - user cannot SELECT from VIEW inside a SCHEMA as DEFAULT PRIVILEGE
hope you can help me.
I have 3 users
First is me, the db admin. I run the GRANT queries, I can do anything. (name doesn't matter now)
Second is the data manager user. = manager_u
Third is the data ...
0
votes
1answer
34 views
Postgres role without attribute Login
I am a bit confused by the role attribute LOGIN | NONLOGIN, where postgres docs says:
These clauses determine whether a role is allowed to log in; that is,
whether the role can be given as the ...
4
votes
1answer
82 views
Execute Permissions for a Store Procedure that creates databases
I have a Stored Procedure that creates a Database for a specific project which needs to run every month by one of our Data Analysts. The question is how do I structure this to enable the Analyst to ...
0
votes
1answer
14 views
Permission Error when trying to import SQL [closed]
On an attempt to import an SQL into a Database I get this error.
* Error 0xc002f210: Preparation SQL Task 1: Executing the query "IF NOT EXISTS(SELECT * FROM sys.schemas WHERE name..." failed with ...
3
votes
1answer
43 views
Changing Database Owner Removed User Mapping
I ran an ALTER AUTHORIZATION to change a database owner from an AD account to sa and it seemed to cause the user mapping for a specific database to be removed. I’m not sure why this happened.
Is ...
0
votes
1answer
12 views
mongoDB: Limit user to find documents only by ObjectId
I'm using mongoDB version 4.0.9 for various things. One of them is storing and retrieving files in mongoDB via GridFS. For that purpose, I have created a role/user in mongo with the privileges "...
2
votes
2answers
49 views
SQL script to count rows for all views in a database with SELECT-only access
I need to know the row count for every view in a third-party database that I have been given SELECT-only access to. The following script works for tables but not views:
SELECT SCHEMA_NAME(A....
0
votes
1answer
29 views
Disable Saving/Exporting Results of TSQL Query in SSMS?
I really don't want to go in to too much detail as to WHY I want to do this. Just know that it would be ideal for my use case.
Is there a way to disable a specific database role from using the Copy, ...
1
vote
1answer
70 views
AWS RDS (PostgreSQL) - Master user lost all privileges after upgrading from v9.6 to v10.6-R1
I just upgraded my AWS RDS DB instance from Postgresql v9.6 to v10.6-R1. I did this manually using the "Modify" tab in the Databases section under the Dashboard. Immediately afterwards, as the master ...
4
votes
2answers
252 views
Start job from another SQL server instance
I have a job on an SQL 2008 server (Server A) (I know this is not ideal... That issue is being addressed). The agent runs under NT AUTHORITY\NETWORK SERVICE.
I want to add a step that runs a job that ...
4
votes
1answer
59 views
SQL Server impersonation
This question is about impersonation in Microsoft SQL Server. I want to know that if I have impersonation permissions on a specific login then I can easily impersonate that login whenever I want and I ...
0
votes
0answers
18 views
PRIVILEGES table for ROUTINES in INFORMATION_SCHEMA
In information_schema, there are four privileges table.
show tables like '%PRIV%';
+---------------------------------------+
| Tables_in_information_schema (%PRIV%) |
+-------------------------------...
1
vote
0answers
24 views
How to change permissions of Oracle generated logs?
The oracle generated logs (ie. alert and listener logs) are being created with 600 permissions. These files are of course created automatically by the oracle user. How would I change the permissions ...
1
vote
1answer
12 views
What is the permission necessary to drop a service in service-broker?
When I want to drop a service which is already created, this error happens:
Msg 15151, Level 16, State 1, Line 316
Cannot drop the service '//Audit/Contract', because it does not exist or you do not ...
0
votes
1answer
47 views
How to grant permissions to database but restrict to certain schemas?
I am new to database administration and work within a small team of data analysts trying to modernise. We have recently set up an Azure SQL DB server we are accessing using SQL Server Management ...
0
votes
0answers
49 views
ERROR: cannot update table “pg_enum” because it does not have a replica identity and publishes updates
I was trying to update the enum label using the following SQL query
UPDATE pg_enum SET enumlabel = 'Cash Recivied' WHERE enumtypid = '1203702' AND enumlabel = 'Cash';
but it throws an error
ERROR: ...
0
votes
0answers
39 views
postgresql - Disallow getting list of databases
How can I disallow getting list of databases on the PostgreSQL server? That can be done (for example) using \l in psql.
1
vote
0answers
20 views
Dumping Postgres schema from Google cloud SQL
Now this may look trivial but it is a managed service so I don't have the superuser rights. And various schema/tables/sequences have different roles/users as their owners so I can't just use pg_dump ...
0
votes
1answer
42 views
Unable to edit some records in SQL
I have a table we just transferred from MS Access to SQL Server 2016.
It's a simple table for creating load numbers for shipping products. Using access we link to the SQL Server and we are able to ...
3
votes
1answer
47 views
PostgreSQL 11: Replace function body by users from the same group
In the documentation of CREATE FUNCTION is stated that ''You must own the function to replace it (this includes being a member of the owning role).''
Two questions:
I don't understand what exactly ...
0
votes
1answer
275 views
mysqld: Can't create/write to file '/home/mysqltmp/ibXXX' Permission denied
My main volume is a 20GB SSD disk mounted on /. I have a 4TB HDD mounted in /home. So to save space I want to set the mysql temporary directory to /home/mysqltmp.
However when I set to this directory ...
0
votes
0answers
26 views
PostgreSQL: allow user to list only the owned tables
I want to disable users from seeing the names of tables that he doesn't have access to. So the goal is to have several tables and several users that can make \dt and see only tables they have access ...
0
votes
0answers
32 views
Restricting access to tables/views in pg_catalog schema in Redshift
The general advice seems to be that the access to system tables (in pg_catalog schema) should not be restricted from database users.
I couldn't find a succinct explanation exactly why or how to ...
