Questions tagged [permissions]

Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

Filter by
Sorted by
Tagged with
1 vote
0 answers
33 views

Which user executes Postgres RLS policies (CURRENT_USER vs VIEW owner)?

Postgres seems to have some weird semantics around which user is actually invoking check functions defined in RLS policies. Specifically, if the check function is SECURITY INVOKER, it appears that the ...
colophonemes's user avatar
0 votes
0 answers
38 views

Balancing Legacy CRM Needs and Security in Multiple Databases

I have a set of databases on a server. Database_alpha Database_beta Database_gamma Database_delta Database_alpha houses a legacy CRM system which has an inbuilt dependency on the sa account to ...
betelgeuce's user avatar
1 vote
1 answer
43 views

postgresql: why owner of table is unable to select from it?

In postgresql documentation on GRANT option it is written: There is no need to grant privileges to the owner of an object (usually the user that created it), as the owner has all privileges by ...
pva's user avatar
  • 113
0 votes
1 answer
51 views

How to prevent an existing role being given permissions on a new database?

I'm fairly new to postgres permissions. I'm working with a postgres server to add/remove databases to it as part of a workflow. Each database needs to have a role associated with it that can do ...
adrianbanks's user avatar
-1 votes
2 answers
50 views

readonly user on PostgreSQL 14 let me create new tables, why?

I try to apply any of these to create read_only_user: https://docs.snaplet.dev/guides/postgresql https://www.commandprompt.com/education/how-to-create-a-read-only-user-in-postgresql/#:~:text=...
Eric Ouellet's user avatar
0 votes
0 answers
25 views

SSIS - "Access to the path '\\XXX\data2\TXX\zz\Tracker - xx.xlsx' is denied."

SSIS error: Recently the following error "Access to the path '\XXX\data2\TXX\zz\Tracker - xx.xlsx' is denied.". i occurring. The SSIS package is executed through SQL Agent using a Domain ...
mah's user avatar
  • 1
0 votes
0 answers
13 views

How to securely limit columns in postgres logical replication?

The docs currently have this to say about publications with specified column lists: The choice of columns can be based on behavioral or performance reasons. However, do not rely on this feature for ...
Felipe's user avatar
  • 283
0 votes
0 answers
7 views

Launch RDBMS Client GUIs from Delinea

I am using the delinea permission access management tool that I pointed to the application file of SSMS and it could launch my desired server instance with the secret server credentials configured on ...
franklwambo19's user avatar
0 votes
1 answer
282 views

Grant VIEW DATABASE STATE on master DB

I am asked to provide access to VIEW DATABASE STATE in the master DB of an Azure SQL Server instance (Premium P6) to an external user (vendor) in order some investigation to be done. When run "...
Pavel's user avatar
  • 1
0 votes
1 answer
27 views

SAGE ODBC driver - minimum required folder permisions

I have a website which I want to connect to SAGE ACCDATA folder (which resides on a different server but same network to the intranet server) using their proprietary ODBC driver. For security purposes ...
BLoB's user avatar
  • 143
0 votes
1 answer
56 views

How is SQL server engine account able to access disk drive folder without permission?

I have recently changed the SQL engine account to mydomain\sqlengine. This evening I setup SQL audit into F:\audits. I'm surprised to see the SQL server is able to create a file in this folder without ...
variable's user avatar
  • 3,442
0 votes
0 answers
10 views

Schedule group disable write - with custom error

I'm looking for a good solution to what seems to be a simple problem. I need to disable a user group from writing to any number of tables on a schedule - let say Saturday between 0600 and 1200. I'd ...
SmittyBoy's user avatar
  • 101
1 vote
1 answer
28 views

SHOW TRIGGERS privilege without also being able to DROP TRIGGER?

Is it possible to give a user privilege to view Triggers, i.e. execute the SHOW TRIGGERS command, without also giving them permission to DROP TRIGGER? Background is, I want to give certain users the ...
BrokenPhysics's user avatar
1 vote
2 answers
206 views

Unable to drop user due to assigned privileges?

How do you drop a user with read-only permission to PostgreSQL? I created a user, with read-only access to all tables, on an RDS Postgres database with: CREATE ROLE myuser WITH LOGIN PASSWORD '...
Cerin's user avatar
  • 1,324
1 vote
0 answers
39 views

Altering the column without sysadmin or db_owner roles in published tables

I am using replication between two MS SQL Servers (2017 14.0.3421.10). Unfortunately, when replication publishing is switched on, my user for database schema changes is not able to ALTER any columns. (...
Dex's user avatar
  • 111
0 votes
0 answers
22 views

Alter ownership of a table in a schema does not work

create role schema_owner; create role table_owner; Current signed in role is postgres create schema test; grant schema_owner to postgres; grant table_owner to postgres; alter schema test owner to ...
armchair's user avatar
0 votes
0 answers
40 views

Linked server view Select query doesn't execute on production server

I've build one view. I can run sys.databases from the linked server. However, when I tried to execute the following view. It is not retrieving any data from the linked server. USE [SSISDB] GO /****** ...
James's user avatar
  • 1
0 votes
1 answer
252 views

The SELECT permission was denied on the object '__EFMigrationsHistory', database 'master', schema 'dbo'

I'm trying to create asp.net core web api. (https://youtu.be/EmV_IBYIlyo?si=GcPVN7BuautDy6-j&t=1351) At the point where he executes Add-Migration InitialCreate and Update-database my console ...
Lukas Čaplikas's user avatar
0 votes
1 answer
215 views

Postgresql: Even when I grant the owner role, I can't alter tables

I have a Postgres database with a schema named foo owned by a user also named foo, which also owns all of the tables in it. While logged in as foo, I created a user bar and granted it everything foo: ...
Isaac Moses's user avatar
0 votes
0 answers
12 views

Possible to revoke default ability for all future users to connect to *any* database?

I have a lab with a database that I would like to use as a "multi-tenant" database, in that I would like to create a database for each of the applications that I'm running and segregate ...
eriknelson's user avatar
0 votes
2 answers
56 views

How can I view permissions granted to Public

I have a schema called Lookups within a SQL Azure database. The Public database role has SELECT permissions granted on that Schema. But how can I see this via a query? I've spent the last couple of ...
Andrew Richards's user avatar
1 vote
1 answer
84 views

Sql Server access user to database after restore

I've written this script to restore a database backup (from another server instance) and assign to a specific user an access to it. This script has run in powershell console I've already got a valid ...
Joe Taras's user avatar
  • 672
2 votes
1 answer
112 views

Can a user with db_ddladmin elevate their privileges to db_owner

I have a question about DB-level roles in SQL Server, can a user with db_ddladmin elevate their privileges to db_owner or any other role? Thank you.
Layan's user avatar
  • 21
0 votes
1 answer
225 views

Postgres 15.3 fails to create new tablespace (could not set permissions)

I am unable to create new tablespaces on a fresh Postgres 15.3 installation on Ubuntu 22.04. I tried the following so far: re-install Postgres fully loosen file system permission disabled SELinux ...
Luís de Sousa's user avatar
0 votes
2 answers
72 views

What are the Minimum Permissions to Create an MSSQL Database and Take Ownership of it?

I would like a less privileged user (KINGDOM\joker) to be able to create, manage, and drop databases on an MSSQL 2017 server [14.0.2027.2 (X64)]. KINGDOM\joker should only be able to affect the ...
Anthony Ciani's user avatar
1 vote
1 answer
876 views

What permissions are needed to truncate a table in PostgreSQL?

I’ve just started with a web host which supports PostgreSQL. When setting up a database user, I have the choice of the following privileges: ■ ALTER ■ CREATE ■ DELETE ■ EXECUTE ■ DROP ■ EVENT ■ INDEX ■...
Manngo's user avatar
  • 2,789
0 votes
1 answer
90 views

postgres - granting SELECT inside SCHEMA

I have created a database, role and schema with this script: -- ----------------------------------------------------------------------------- -- set variables ------------------------------------------...
vrms's user avatar
  • 175
0 votes
1 answer
125 views

Execute Permission Denied on Stored Procedure using Microsoft JDBC Driver and Windows Authentication

I have a Microsoft SQL Server database that I use Stored Procedures to read/write data to through a Integration Engine in this case InterSystem IRIS. Originally I was using a local server user to do ...
sroth79's user avatar
0 votes
1 answer
125 views

Why is the SYS user granted both the DBA role and the SYSDBA privilege?

If the SYSDBA privilege gives the grantee ultimate authority, then why does the SYS user also have the DBA role in addition to the SYSDBA privilege?
Mehdi Charife's user avatar
9 votes
1 answer
406 views

WITH EXECUTE AS SELF returning an error when running sys.fn_dump_dblog

I'm attempting to configure a stored procedure to EXECUTE AS a user with sysadmin privileges to allow a non-privileged user to obtain results from the undocumented TVF sys.fn_dump_dblog. I'm creating ...
Hannah Vernon's user avatar
  • 69.7k
0 votes
2 answers
136 views

which privileges should I grant to run the query below in a postgresql instance

I faced a task: find out minimal user permissions that I should grant to run a query: select grantee, routine_name from information_schema.routine_privileges where routine_name in ('pg_read_file', '...
Gregor76's user avatar
0 votes
1 answer
158 views

What is the difference between a securable and permission in SQL Server?

In Microsoft SQL Server you have the possibility to set permissions at server and database level. You are also able to select a server login or database user and then set securables. I am wondering ...
Jacob Gomez Hansen's user avatar
0 votes
2 answers
1k views

Truncate tables in other schema

I have logged into a dev02 schema with a user and password and another schema dev08 with a different user/password in the Oracle database. Now from dev02, I run the command: truncate table dev08....
nicku's user avatar
  • 101
0 votes
1 answer
613 views

Access Denied error when running job in SQL Server Agent

Problem: While trying to execute an exe (kept in network path) through Sql Job (type: Operatingsystem(CmdExec)) below error occurred: Executed as user: NT Service\SQLAgent$SQL2017STD. The process ...
IT Researcher143's user avatar
2 votes
1 answer
493 views

In Postgres, is an unprivileged role able to execute a function with elevated privileges?

For context, I am using: postgREST: a thin REST client on top of Postgres (which does all the heavy lifting) Azure AD: which handles identity and access of the organization Since users, roles, ...
dnk8n's user avatar
  • 143
3 votes
0 answers
117 views

SQLPackage Revoking and Granting Permission on Database Roles

The Behavior I am using Visual Studio SQL database projects to source control our azure SQL DB's. As part of the project definition, we have database roles which are managed. When the project is ...
rustayscot's user avatar
0 votes
1 answer
3k views

Cannot find the object because it does not exist or you do not have permission

Trying to do a simple GRANT EXECUTE ON OBJECT::dbo.sp_add_job TO [user] GO and I am getting Msg 15151, Level 16, State 1, Line 1 Cannot find the object 'sp_add_job', because it does not exist or you ...
cj_kai's user avatar
  • 3
1 vote
1 answer
57 views

Revoke access to database from user with global permission?

Consider a user with global database access: GRANT ALL PRIVILEGES ON *.* TO 'myuser'@'%' IDENTIFIED BY PASSWORD 'xxx' WITH GRANT OPTION Due to legacy issues and number of databases involved, I'd like ...
chell's user avatar
  • 195
0 votes
0 answers
112 views

Postgresql Large object permissions for two users

I would like two separate users of a postgresql database to have access to large objects created by the other user. I don't have control over the code being run by these users, and if it matters, that ...
mattm's user avatar
  • 101
0 votes
0 answers
11 views

How to restrict user from viewing certain schemas [duplicate]

I have a PostgreSQL database with one schema per user. Normally, users don't directly interact with the database, and instead, go through a web UI. However, I'd like to give one technical user ...
Cerin's user avatar
  • 1,324
0 votes
1 answer
120 views

Inherit permissions in postgres

I currently have a group role. This group role is called team. Team currently has the permission to create databases. I have one user that is a member of team. But that user is unable to create a ...
Master's user avatar
  • 121
2 votes
1 answer
523 views

MySQL 8 Couldn't execute FLUSH TABLES Access denied

I have MySQL 8 database with a user to whom I grant ALL privileges as follows: GRANT ALL ON test_db.* TO 'test_user'@'%'; When I login to mysql as this user and run the following command I get error ...
adam78's user avatar
  • 155
0 votes
1 answer
409 views

How to revoke all roles from a schema in Postgres?

How can I revoke all roles (or all roles except the creator of the schema) from a specific schema in Postgres 14? I have an ETL process that periodically dynamically creates a Postgres schema and ...
svenema's user avatar
  • 151
1 vote
0 answers
66 views

PostgreSQL roles with cyclic membership

I have a PostgreSQL database that I would like to manage "like a MS SQL Server" database but only for authorized people. There are a few "business tables" to which they should have ...
JulienPoulain's user avatar
0 votes
0 answers
323 views

How to check if the current user has the permission to create a database view in MySQL?

I want to check if CURRENT_USER() has the permission to create a VIEW on a certain MySQL database xyz. To do so, I run SHOW GRANTS FOR CURRENT_USER() Depending on how the grants are set, the output ...
smolo's user avatar
  • 101
0 votes
3 answers
729 views

Is there a privilege in Oracle that lets a user view the objects in another schema?

Is there a privilege in Oracle that lets a user view or not view the list of objects in another schema? I've got a user where I've given them select rights to a view in another user's schema. However, ...
BIBD's user avatar
  • 164
0 votes
1 answer
622 views

MariaDB privileges for "SHOW DATABASES" vs "SELECT * FROM information_schema"

I have a user with an access to several databases. In MariaDB 10.6.11 I cannot use the following command to list all accessible databases: SHOW DATABASES; /* SQL Error (1227): Access denied; you need (...
oneee's user avatar
  • 23
0 votes
0 answers
57 views

How to avoid new users to be able to access old and new databases in postgresql?

I am trying this query: ALTER DEFAULT PRIVILEGES IN SCHEMA public; REVOKE CONNECT ON DATABASE FROM PUBLIC; but I am unable to make it work in PostgreSQL. My goal is to avoid new users to be able to ...
Akiru's user avatar
  • 1
2 votes
1 answer
40 views

SYSCTRL like role in PostgreSQL

I want to set up a workflow, where a third party (still within the org) grants accesses to our database by granting to a role that has the select or update access to the tables. I would also want this ...
sifear's user avatar
  • 21
2 votes
1 answer
75 views

Drop privileges for the current connection in MSSQL

Is it possible to actively remove some permissions only for the current connection to the database? There is a database user with all permissions to its dababase, which sometimes is necessary (schema ...
Dehalion's user avatar
  • 121

1
2 3 4 5
32