Questions tagged [permissions]
Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
1,200
questions
0
votes
1answer
48 views
Set up read-only privileges on the dbo schema, but allow creation of entities in another schema?
Is it possible to create a custom schema in a database such that users that have read-only access in that database for the dbo schema can be set up with the ability to create and modify entities for ...
1
vote
1answer
36 views
Create a read-write user and a read-only user
I'm trying to do what I think is a common setup for a PostgreSQL database on a RDS instance. I want to have:
Either on public schema, or on a custom schema I don't especially care
A read-write user
A ...
0
votes
1answer
9 views
Cascading REVOKE not working in MYSQL
I've read about an SQL option of cascading permissions when issuing a REVOKE statement. I've googled for how this option is implemented in MySQL, but haven't found it at all.
This is the docs page ...
1
vote
2answers
16 views
GRANT permission ON database TO user not working on AWS
I'm having trouble granting a user permission on AWS.
mysql> GRANT CREATE ON *.* TO 'hmrex_db'@'%';
Query OK, 0 rows affected (0.01 sec)
mysql> SHOW GRANTS FOR 'hmrex_db'@'%';
+----------------...
3
votes
2answers
41 views
How can I determine which permissions needs to be assigned to the newly created login?
We have 4 databases which contain different procedures and functions. Till now the actual application can access the database using only the sa account, now I would like to change the app to use ...
-1
votes
1answer
57 views
SQL server login get unwanted high privileges on a db when created
We have a demand to create a new user with the ability to SELECT only 4 specific tables. In order to do that we create the login and map it to the requiered db :
USE [master]
GO
CREATE LOGIN [pos] ...
1
vote
1answer
38 views
PostgreSQL read only user
We have a PostgreSQL database 'db1', which is having around 500 schemas.
I am trying to create a read-only user for this particular PostgreSQL database.
I could find the following command for ...
1
vote
0answers
479 views
Failed to start of service MongoDB community4.2 using Homebrew in Mac OS Mojave 10.14
Error message while starting the mongoDB service.
Error:
Permission denied @ rb_sysopen -
/Users/syedahmed/Library/LaunchAgents/homebrew.mxcl.mongodb-community.plist
I installed/reinstall the ...
2
votes
0answers
58 views
BulkAdmin Role Doesn't Work
There is a query that our BI team use. They can not execute the query because of the error below.
Ad hoc access to ole db provider 'MSDASQL' has been denied. You must
access this provider ...
2
votes
1answer
27 views
Allow two users permission to execute single agent job
I am trying to allow two users to run a single agent job. With this in mind, I don't want to add the users to the SQLAgentOperatorRole role in msdb as that will give them excess priveleges.
I tried ...
0
votes
1answer
40 views
Which rights to grant for controlling an SQL Server Availability Group?
We are having the following setting:
For an ERP Test / Accept SQL Cluster we want to follow the least privilige principle to give the external engineers rights on the SQL server. We are running SQL ...
2
votes
0answers
30 views
How to reassign all privileges to another role in PostgreSQL?
On an existing PostgreSQL server let say that I have two users "Alice" & "Bob" and I want to clean up my policy because they actually have the same job and should have exactly the same privileges ...
0
votes
2answers
37 views
SQL Server — see when user/ login was last modified? And other meta-data
I know you can see when tables or views were last modifed in sys.tables or sys.views in SQL Server.
It does not appear there is a table like this for users or logins --- or is there?
Basically, a ...
0
votes
0answers
35 views
Grant Privileges on Production Database Throws “Error: tuple concurrently updated”
I would like to grant read access to all tables in my schema
GRANT SELECT ON ALL TABLES IN SCHEMA public TO XXX;
While it works on our alpha environment, it fails with our production database:
[...
0
votes
3answers
53 views
Create Synonym error for a user-SQL Server
I have a user who has permission to create synonym in my sql server 2016 database.That user also has data reader permission.
When the user tried to create synonym as shown below.
USE [DEMODB]
GO
...
0
votes
2answers
74 views
Which SQL Server/Windows logins require the sysadmin role?
I'm setting up a new SQL Server instance. Which of these SQL Server/Windows logins should have the sysadmin role?
NT AUTHORITY\SYSTEM
NT SERVICE\SQLWriter
NT SERVICE\Winmgmt
NT SERVICE\MSSQLSERVER ...
0
votes
2answers
53 views
Not able to delete transaction log backup file
I have a big SQL Server database (~1.5 TB) and i didn't take log backup of that database for last two weeks for some reason.
Today i found that the .ldf file of that database became huge around 1.5 TB....
0
votes
1answer
14 views
How to reset object permissions to default?
I've just been added to a project using Postgresql 11.4 where database security has been an afterthought. As part of tightening things up, I've used ALTER DEFAULT PERMISSIONS to set sane ACLs on any ...
2
votes
1answer
32 views
Msg 15404, Level 16, State 10, Procedure xp_logininfo - missing permissions [duplicate]
I have a server based in the USA, where I am not a domain admin, and my permissions are limited to sql server only - where I am sysadmin.
after a migration of a few databases to a new server, I ...
0
votes
0answers
17 views
Reader rights by default in Postgres
My question is about database permissions and rights in Postgres. How can I create reader rights by default when objects are uploaded into PGadmin 4 schemata?
I created the following schema in ...
0
votes
0answers
60 views
mongodb keyfile permission denied
I configured in /etc/mongod.conf to enforce keyfile access control, in security option enabled, keyFile is /root/dbtest.key (the absolute path of keyfile). I already gave the ownership to mongodb user ...
0
votes
1answer
19 views
List database CONNECT privileges on PostgreSQL
How can I view database-level privileges like CONNECT of users?
I found 2 ways already, but neither of them is perfect:
Use function has_database_privilege().
This works, but I have to run it ...
0
votes
3answers
32 views
MySQL: list users which have been granted EXECUTE permission on a given procedure
I would like to audit my database to check which users have been granted individual EXECUTE permission to which procedure.
I would like to use this information to be able to save GRANTs when changing ...
1
vote
2answers
38 views
Does an Oracle user have all privileges in its schema?
I'm learning Oracle and did some testing. I used the sys user and created a table t in the scott schema and I found t's owner is scott, and scott has full access to t. I want to confirm, does scott ...
0
votes
1answer
16 views
What privileges are need for a normal Oracle user to access V$ and DBA_ views?
I'm connecting to Oracle 19c as HR user. I want to execute the following SQL and some dba_... views:
select s.sid
,s.serial#
,s.username
,s.machine
,s.status
,s.lockwait
...
1
vote
1answer
48 views
Why can members of db_datareader SELECT sys views
In SQL Azure my understanding of db_datareader is that it is allowed to SELECT all user tables.
I couldn't find a definition of exactly what a user table is, but I assumed it was all of the non-...
0
votes
0answers
26 views
Can I get pg_dump to simplify the ACL commands?
When using pg_dump with a database with non-default schema foo like so:
pg_dump --schema-only --schema='foo' -U myuser -d mydb -h myhost -W > mydb.sql
The SQL dump file is full of these seemingly ...
0
votes
2answers
36 views
Difference between db_owner and having all other database roles except the 2 containing the deny keyword
What is the difference between having only the db_owner database role and having all other except db_denydatareader and db_denydatawriter?
db_securityadmin +
db_accessadmin +
db_backupoperator +
...
0
votes
2answers
45 views
How To Grant A User Just To Create A Table In Existing Database But Not To See Other Existing Tables In It
We have dealed with an outsource company to install an application for use of our accounting department. Now, they want to access our existing database to install their application but i don't want ...
1
vote
3answers
92 views
T-SQLRevoke permissions to all tables in the sql server in one go
How can we revoke a certain permission to all tables?
I've tried (T-SQL):
REVOKE SELECT on schema::DBO TO [public] AS [dbo]
But nothing happens.. All tables still have Select permission.
I can ...
0
votes
1answer
27 views
MySQL 8 roles - I'm probably missing something obvious
I'm trying to use roles in MySQL 8, and failing. I have read the documentation and as far as I can tell, I'm doing it right. Since this is a 'hello world' level attempt, I assume I'm missing something ...
0
votes
1answer
41 views
Login permission on Availability group database
We have an availability group database. Just wanted to check on the below statement whether it needs to be run on all replica (By failing over and making it primary)or it can be run on the primary ...
1
vote
1answer
28 views
Prevent updating table using procedure in different database
This is my scenario:
Windows User Gabe has db_owner access of database DB1.
Windows User Gabe has db_reader on database DB2.
When the user executes UPDATE DB2.dbo.Tbl1 SET X = 1, they get "The ...
0
votes
0answers
21 views
Azure VM Security
With the move to Azure Cloud things are moving fast! I have a question based on Azure VM with a shared SQL Server containing multiple instances.
For example if a Azure VM has 5 instances on there ...
-3
votes
1answer
51 views
Postgres Restore [closed]
I need to restore a single schema from production postgres to test.
Test database and schema already exists.
The users/roles & sequences are different on prod to test and after schema is ...
2
votes
2answers
35 views
Removing grants for databases that no longer exist
We have quite a few MariaDB servers with whom the permissions have gotten a bit messy over the years. I'd like to tidy them up.
I've already written some tools for presenting grants/table information ...
1
vote
1answer
33 views
Disallow superusers and single-user mode in POSTGRESQL
I have a doubt about superusers and single-user mode.
I want to restrict the access to a certain database, in a way that only those users which I gave privileges can see the structure of my database....
0
votes
1answer
52 views
how to script server side permissions - specifically EXECUTE ON SYS.XP_PROP_OLEDB_PROVIDER?
I could not script the following server side permissions:
GRANT VIEW DEFINITION ON LOGIN::[site_helpdesk] TO [Radhe]
but thanks to the question below I found a solution to that:
How to script out ...
1
vote
1answer
73 views
SQL statement to hide all system databases in Server from a server login
I want to create a Windows authentication server login and make it cannot see any system databases e.g.master, model.
I know that we can control view definition in database level e.g. database user, ...
1
vote
0answers
23 views
SQL Server Permissions for Intellisense for an Active Directory User? [duplicate]
I have created an Active Directory Group and created it as a user, we'll call it "AD SQL", in my DB. I can successfully login in using Active Directory Authentication and read/write.
However, ...
1
vote
1answer
35 views
PowerBI Service Account granting duplicate execute permissions on stored procedure almost constantly
I have PowerBi Server (Jan 2019) installed on my server. I can see from the default trace that that the PowerBi Service account NT SERVICE\PowerBIReportServer is granting execute permissions on a ...
0
votes
1answer
18 views
revoke and apply privileges on current active sessions
I am revoking some privileges to a user like this:
REVOKE INSERT, UPDATE, CREATE, ALTER ON `name`.* FROM 'user'@'%'
I verify via:
SHOW GRANTS FOR 'user'@'%';
And see that privileges really have ...
0
votes
0answers
30 views
How configure security to query second same server database
I have a database which holds all my permissions and a central database which holds all the logins for all my application. I need to create view that queries both database which reside on the same ...
0
votes
0answers
52 views
Why are my SQL Perfmon counters returning Zero?
I have set up a Perfmon data collector set on one of our servers with SQL server running on it. I also have a scheduled task which imports this data into SQL (set up by following this open source ...
5
votes
1answer
113 views
Grant dbcreator only for databases matching prefix
In Microsoft SQL Server 2017+ I would like to grant the dbcreator role on a single user but only allow her to create databases whose name matches a fixed prefix.
Is it possible to do this at the ...
2
votes
1answer
68 views
In what order MySQL permissions are applied on database?
I want to understand the priority of executing MySQL grants privileges.
For e.g.:
I want to grant two different types of privileges on a single db Demo.
1.GRANT SELECT ON Demo.table1 TO abc@123;
...
0
votes
1answer
36 views
Assigning Permission on Azure SQL Database
I have an azure SQL Database. I already created a new login and user on the database. Question is i want to assign permission on the said user. Permission that will restrict the user to drop table, ...
3
votes
1answer
144 views
How to grant execute permissions to a stored procedure but not to the underlying databases
I am trying to allow a user to run a stored procedure while restricting them read/write access to the underlying tables. I am able to complete this with other stored procedures, but the one I am ...
2
votes
1answer
52 views
Does the SQL Server Service Account have to have access to a network share to perform a backup?
I've been provided a specific domain account to handle backups from my sysadmins. I am slightly confused as I've never been provided a separate domain account to handle backups in the past. I still ...
0
votes
1answer
104 views
Is it possible to grant trigger permissions on only one schema MySQL
I am an analyst that was recently granted a schema on MySQL that I could use for some business needs.
I was told by my DBA that the permissions associated with Triggers require global super user ...
