Questions tagged [permissions]
Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
0
votes
1answer
20 views
Grant CREATE SCHEMA (only) to users
Imagine I have one shared database set up for my class that each student has the potential to access (access to the database is open and only requires kerberos auth). The public space is where I ...
2
votes
2answers
129 views
Permission on Database [on hold]
I have a login user called TestUser created at the server level that is assigned to a read only role, now I need to create a user for the TestUser login on MyDb
USE [MyDB]
GO
CREATE USER [Test] FOR ...
0
votes
1answer
27 views
List of databases which a user can access in SQL 2008 R2
Is it possible to create a list of all the databases where a specific user can access?
For example,
My user is 'Domain\MarySmith'. This user can access on a single database or can access many ...
1
vote
1answer
50 views
Assign Permissions to a SQL User
I have active directory on my company, I have some login users created at the level of the SQL Server (2014) that I need to propagate to all my databases on that server. I want to create a read only ...
2
votes
1answer
38 views
Can't create read-write Postgresql user
I'm trying to create two users in a Postgres database—one with read-write access to all tables in two schemas, and one with read-write-create (i.e., able to make DDL changes) to the same schemas.
I ...
1
vote
1answer
30 views
Source of Entry in Postgres
I want to make a small web app using Postgres as database.
Is there a way to accept database access if and only if the SQL command is coming from my app, blocking any other access to the database?
1
vote
1answer
27 views
Insert- and Read-only table in Postgres
I want to create an "immutable" Postgres database, where users can insert/select (write/read) data only, but can not update/delete (change/delete).
I came to know there is FOR UPDATE lock, but did ...
0
votes
1answer
18 views
Login mapping only works for the first query in a window
I have a really odd login mapping error for one DB that I can't seem to figure out.
When running a simple select statement while impersonating a login (A) on DB(1), it appears to work fine. However ...
0
votes
0answers
25 views
Allowing a user to grant SELECT and VIEW DEFINITION permissions only on objects they create
How do I give access to a user so that they can grant SELECT and VIEW DEFINITION on any objects they create in a database.
For example, I have a user MyUser in the roles
db_datareader
db_datawriter
...
10
votes
5answers
1k views
How to deny access to SQL Server to certain login over SSMS, but allow over .Net SqlClient Data Provider
We have a situation where Developers do not have any UPDATE permissions, BUT they work with applications and see connection strings -> they know passwords from some SQL accounts (example SQLLogin1) ...
0
votes
2answers
42 views
Querying a view based on a table on which I don't have SELECT permission [duplicate]
Suppose I have the following table (in schema 'SchemaX') :
CREATE TABLE [SchemaX].[myTable]...
And the following view, build upon the previous table but on a different schema ('SchemaY) :
CREATE ...
0
votes
0answers
30 views
SELECT … INTO OUTFILE “Read-only file system” error
I'm using MariaDB 10.3.12 on CentOS 7, using the MariaDB-server RPM package from MariaDB's yum repository.
I'm trying to do a simple SELECT ... INTO OUTFILE into a different directory than /var/lib/...
4
votes
1answer
51 views
Can a non-owner of a table be allowed to disable the table's triggers?
I would like for one user who is not a table owner, give the permissions to turn off and turn on the triggers. Can it be done?
0
votes
1answer
41 views
Script for migrating server role permissions - SQL Server
I need to obtain a script for all the user-defined server roles in my SQL Server instance with their assigned permissions, such as the below:
GRANT ALTER ANY AVAILABILITY GROUP TO [ServerRole1]
What ...
0
votes
0answers
20 views
How does GRANT privileges function when recursive privileges?
I'm trying to understand how does granting privileges work on SQL.
According to what I understand, one user has privilege as long as said user has been granted privilege by someone or owns the ...
1
vote
0answers
21 views
PostgreSQL permissions
I'm trying to achieve a simple architecture:
An organization has many users
A user belongs to many organizations
A user can connect
A user can join and leave an organization
A user can read-only ...
1
vote
1answer
32 views
Grant all the privileges to a user over all other user's objects in Oracle
I would like to know how to grant all the privileges to a user over all other user's objects in oracle. Greetings and many thanks
0
votes
1answer
23 views
How to remotely manage (with PhpMyAdmin) a MySQL RDS on a load-balanced AWS Elastic Beanstalk setup?
Although there are similar questions and topics, I can't find a solution that currently works.
I specifically wrote remotely manage because I'd like to use my home computer's PhpMyAdmin to directly ...
1
vote
1answer
62 views
Privileges on SQL Server
I come from Oracle Database and now I am trying learn SQL Server and I don't undestand why may I viewer others databases, like the master for example, with a common user without privileges in this ...
0
votes
1answer
26 views
SQL Server: Remove public role privileges from login account
I've got a SQL Server (2012) and I need to create a read-only user. At first, I was just going to create a user, and then give them the db_datareader role. But while looking around, I saw the public ...
1
vote
0answers
49 views
Grant permissions over linked server
I need to grant select permissions to a sensitive table over the linked server. This table should only grant access to members of an AD group. I currently have other linked servers set up with remote ...
2
votes
1answer
68 views
How to Deny permissions for newly created user in DDL Trigger?
I'm having trouble with a SQL DDL trigger for Create_User and I'm wondering if there is an issue with my syntax or something else I'm not seeing?
I have some tables in my database which are only ...
1
vote
1answer
52 views
Unable to revoke permissions for 'NT AUTHORITY\SYSTEM' on SQL Server 2016
I have tried everything I know to do and spent several hours Googling without success. I want to revoke the SHUTDOWN and CONTROL SERVER permissions for the login NT AUTHORITY\SYSTEM.
When I run this ...
2
votes
2answers
46 views
How to grant user rights to create stored procedures in a custom schema
I'm trying to grant SQL Server login rights to create stored procedures and bind them to a custom schema. In this case I've created a schema called IC. A service account will then be added to the ...
-2
votes
3answers
58 views
Determine which data a SQL login account has access to?
I am a new DBA and am trying to do some documentation on the SQL estate that I am responsible for. Currently I have no documentation on anything so this is all from scratch. I am hoping to find out if ...
0
votes
1answer
63 views
Allow access to specific user only
I have a database with an owner for it. My problem is that, though I have assigned a password for the owner, any other database user can access this database locally, even without a password.
How can ...
0
votes
0answers
30 views
Permission issue with a view built on top of foreign tables
I am consolidating data from several postgresql databases, all with the same schema, into a new one. To do that I mapped the tables I am interested in the new DB as foreign tables with postgres_fdw. ...
0
votes
0answers
26 views
Integration Services Catalog folder permissions changed
Question: Do any of the SQL Server systems tables in either SSISDB or MSDB contain information that would allow me to discovered which users are making changes to folder permissions in the Integration ...
3
votes
2answers
133 views
GRANT SELECT ON SEQUENCE succeeds, but to no effect?
I am trying to grant select access to sequences from one user/role to another. There are no errors when I run the command but once run, the second role is unable to view the sequences. I have run the ...
0
votes
1answer
38 views
Permissions on SQL Server Sequences
The AD Group to which I belong has db_owner permissions on database LandingZone. The application I am debugging, that is running under my ID, is doing a SELECT NEXT VALUE FOR ThisSchema.ThatSequence. ...
1
vote
1answer
40 views
Despite of using GRANT … ON ALL TABLES (or ALL SEQUENCES) TO user, user cannot access newly created tables (or sequences)
For a production server, I wanted to separate the super user, admin and app roles to limit scope of mistakes.
So I've created an account that our app uses to access the DB, and an admin account. The ...
1
vote
1answer
126 views
Who has SHOWPLAN permissions on a database
Is there a way I can see all users in a database who currently have access to view execution plans? That is, who has SHOWPLAN permissions
0
votes
1answer
73 views
How to Restrict INSERT operations on table for DB2?
I have a table OAUTH20_TOKEN_CACHE for which I have restricted INSERT operations by running below command.
db2 REVOKE INSERT ON HVD121.OAUTH20_TOKEN_CACHE FROM USER HVD121
This could be seen
...
0
votes
0answers
17 views
Can not move MySQL data folderto external storage
OS Ubuntu 18.04, laptop, ssd partitioned for two OS (win8 and linux), second drive mounted with permissions. Line from fstab:
UUID={UUID} /media/iam/storage ntfs-3g permissions 0 1
I created dir db/ ...
1
vote
0answers
11 views
virtual MySql server with mounted RAID array
I have a Ubuntu 16.04 server with an 18TB RAID array. I am running virtual servers on the server using Wok/Kimchi and am wondering if it is reasonable to run a MySQL virtual server and set the data ...
1
vote
1answer
49 views
How to change owner of a table within a PostgreSQL Database on Azure?
I attempting to restore a database into a PostgreSQL instance on Azure.
I am issuing these statements as postgres and attempting to change owner to another role that was a superuser.
My restore ...
0
votes
2answers
53 views
SQL Server database level roles for creating tables
Is there a way to create or change a special role for creating tables? Our software developer team has db_datareader and db_datawriter roles but they can not create new tables.
I read this article ...
0
votes
1answer
79 views
Postgres 10.5: Granting full schema access to a user that isn't the owner
So the underlying problem I'm having is trying to migrate my on premise Postgres 10.5 instance to RDS. RDS does NOT give end users the SuperUser role so I'm hitting tons of permissions issues when ...
1
vote
2answers
48 views
Creating/restoring mdf/ldf to non-default file location giving access denied
Default folder is typical C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\DATA. But C: drive on server is almost full.
So, in restoring an 11gb database from another server, I ...
-1
votes
2answers
46 views
What permissions should be added to public users sql [closed]
I have a SQL Server and am looking at making it public.
What I mean by this is: I can create a DB and give access to myself and friends etc.
I need to create a login which can only view databases it ...
1
vote
1answer
63 views
SQL Server - drop user triggered silent revoke of privileges
I encountered following scenario:
A user X granted a ton of permission in the SQL Server database. For example it granted SELECT permission on table Y to user Z.
A user X was dropped with simple ...
0
votes
0answers
36 views
NT SERVICE accounts should be sysadmins? [duplicate]
I have the following query to get me a list of sysadmins in the current server:
select 'ServerRole' = SUSER_NAME(rm.role_principal_id),
'MemberName' = lgn.name ,
'Status'= Case when ...
1
vote
0answers
22 views
Granting access control on specific columns in PostgreSQL
The following screenshot is from an online learning platform I am using to learn SQL (more specifically PostgreSQL). I am concerned that I'm not understanding the following paragraph correctly.
It ...
2
votes
2answers
137 views
Can't create database on volume mounted as folder (Error Msg 5123 & 1802)
SQL Server 2016 SP1 + CU8 Installed on Windows Server 2016 Standard Edition.
Everything was working fine for a while and I was able to create databases until for some reason unbeknownst to me, a ...
0
votes
1answer
20 views
Audit MariaDB Which User Account Privileges Are Being Used
I'm looking to improve the security of my MariaDB installation by better auditing the user accounts and the privileges of each user account.
This database is being provided as a service out to many ...
0
votes
0answers
17 views
Azure SQL database AAD user can't connect
I've read through the documentation and have tried many, many things to get this to work but am still having trouble.
The AAD user is a member of a group that has been provisioned Contributor ...
2
votes
2answers
103 views
How can to make a new user see table in existing schema [closed]
I'm new into Oracle so this question might be dumb. I created new user and now I would like him to see table (or even better all tables by one command) in already existing schema (hr schema in this ...
2
votes
2answers
1k views
GRANT ALL ON ALL TABLES IN SCHEMA does not allow user to see tables
I have a pretty simple script to create a new database and to create a new user to access this database. This is run by the default postgres user. After granting access to the database and schema to ...
1
vote
2answers
910 views
Switch user to 'postgres' user on macOS results in “su: Sorry” error
The Postgres installers kindly provided to the community by EnterpriseDB.com creates a postgres user account on macOS as is common.
In a console session in Terminal.app, I need to switch to that user....
3
votes
0answers
368 views
Postgres: permission denied for relation for read_only user
I am trying to set up a new read only user in postgres. I did the following steps to create the new user:
sudo -u postgres createuser --interactive
name: read_only_user
superuser: n
...
