Questions tagged [permissions]

Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

Filter by
Sorted by
Tagged with
0
votes
0answers
15 views

Showing a different set of fields for different rows

In my Postgres database I have a table of employees: CREATE TABLE employee ( id integer PRIMARY KEY GENERATED ALWAYS AS IDENTITY name text, email text, phone text, department text )...
0
votes
0answers
13 views

Azure SQL database make AD user see more databases in SSMS

I'm using Azure SQL databases and want to add a user from my company using Active Directory auth, so adding the user from external provider. The problem - by design Azure SQL creates AD users as ...
1
vote
1answer
25 views

set a lower privilege permission on a specific database when a GRANT ALL exists on a pattern matching this database on MySQL

I have a user which has access (GRANT ALL) to a set of databases matching a wildcard pattern, now I would like to remove one specific database matching this wildcard from it's access. mysql> select ...
0
votes
1answer
14 views

Postgres preventing update on "events" table but insert "warning" event

I'm facing a bit of a problem on some restrictions I'm trying to implement on my postgresql database. My dilemma is as follows: I have an event table that logs basically everything that happens on my ...
1
vote
2answers
62 views

SQL Server 2019 - using MSA as a proxy account

I'm thinking about using MSA (or gMSA) as proxies inside my SQL Server instances. This proxies would be used for example for running SSIS packages or xp_cmdshell command. But based on what I've ...
0
votes
0answers
19 views

Give SQL Server DB Login permission

I have SQL Server 2017 instance with many databases, as an example, I have a database on this instant called DB_A, and I want to create a SQL Server user account to log in to this database (I will ...
0
votes
1answer
61 views

What is the permission that makes the user a SQL Server administrator?

From the documentation: Determining Effective Database Engine Permissions SQL Server administrators can see information about all logins and users. Less privileged users usually see information about ...
0
votes
1answer
16 views

How to query the effective permission of sql login (windows and/or sql user)?

How to query the SQL server to fetch the effective permission of the following SQL logins under the Security/Logins: SQL user Windows user Windows group
1
vote
1answer
24 views

What is effective permission if windows user is added as login as well as via group membership; with only public permission given via the user login?

Link: https://docs.microsoft.com/en-us/sql/relational-databases/security/authentication-access/determining-effective-database-engine-permissions?view=sql-server-ver15#principals Remember that a ...
1
vote
1answer
28 views

How to remove user from login (user is already part of group) and keep the jobs?

I have a sql login for windows group. One of the members of ths group was also added as a sql login. This user has 1 job in which he is registered as the owner. I want to remove this user login ...
0
votes
1answer
18 views

Does deleting the login retain the permissions given via group membership?

I have a windows group account added as login in sql server. The group contains around 100 members. The above windows group login is given specific database level permissions like db_datareader, ...
0
votes
1answer
17 views

Explicitly revoke privileges from a user who is a member of a role that is granted those privileges in PostgreSQL

Let's say I have a user on my PostgreSQL instance called "myuser", and I add it to a new group called "update_all" like this: CREATE ROLE update_all WITH NOLOGIN ROLE myuser; I ...
0
votes
1answer
31 views

Postgres Role access privileges

I am trying to assign select privs via a role for current and future tables, and i cant see to figure this out. Please advise. create role dev_role; grant usage on schema address to dev_role grant ...
0
votes
0answers
14 views

MongoDB - Grant permission over one collection that exists on all databases

I have several databases on my MongoDB, all of them have or will have a collection called _schema. Currently, I'm granting permissions like this: db.grantRolesToUser("userA",[ {"role&...
0
votes
1answer
21 views

Dropping everything in a database owned by a certain role -- not working

I want to delete everything in a certain database owned by a certain role. I've tried to do and nothing has been deleted. sudo -u postgres psql postgres=# \l List ...
0
votes
0answers
26 views

Remote Login Failure for User - Error No 18456

I setup a test user in a SQL Instance. I tested logging in from within the Windows Server and it worked fine. So password is fine and permissions are fine. From my PC I attempted to connect to SQL ...
1
vote
1answer
38 views

PostgreSQL 11 - Can I turn a schema into the wild west?

I have been given a task to set up a development database where all users able to access a given project schema (each project would have its own schema) would be able to do anything to any table, ...
0
votes
1answer
59 views

How to restrict Users to see only their databases where has access? [duplicate]

I need to restrict the list of database for our users in a SQL Instance In order to move forward this I revoked the view any database permission to the user desired. But I figured out that only ...
2
votes
3answers
109 views

how to script out database users and permissions in all user databases in the instance [closed]

Can anyone help, please? I would like to use Steve Kusen's script at Script DB Level Permissions v4.3 to loop through all the user databases automatically, using Aaron Bertrand's sp_ineachdb. Has ...
0
votes
0answers
57 views

Create multi-user database schema with roles, permissions, and services

I am in the process of designing a user administration database and I am stuck in the creation of the tables and their relationships, in order to explain myself below I expose the requirements of the ...
1
vote
0answers
83 views

Change database owner of Azure SQL Database

I want to change the database owner of an Azure SQL Database. I can do this via the server administration user. However I want to do it using a different user. Why? Because I have a process which ...
0
votes
1answer
26 views

PSQL asks for password for a specific database

I am hosting two different databases (manage_invite and manage_invite_v49) on the same server. As you can see, when I try to connect them using the CLI, it demands the password for the second ...
5
votes
1answer
328 views

How do I create an insert-only user for a Postgres table with an index?

Here's my proposed schema: CREATE TABLE Surveys ( id serial primary key, user_email citext, survey_data jsonb, created_at timestamp default current_timestamp ); CREATE INDEX ...
0
votes
1answer
17 views

Creating specific permisions for DB user

I need to give access to CREATE QUEUE and DROP QUEUE queries. Can`t find that information over the internet, only found that db_ddladmin or db_owner fixed database roles, or the sysadmin have that ...
0
votes
0answers
21 views

The user privileges I have assigned don't work when someone imports my .sql database file on mySQL

I'm new to SQLs and mySQL, I and my colleagues who are also new to SQLs are working on a database project and I have successfully queried its structures and inserted data into them. I then created ...
1
vote
2answers
70 views

Unable to delete server_principal due to granted permissions

I want to delete a server principal from my server because the member is not working at our company anymore. Unfortunately this principal is owner of objects / grantor of permissions because he ...
0
votes
0answers
33 views

The function fn_my_permissions is not showing ALTER permission even when appears assigned to the user

I have a DB user in SQL Server (2012) that I have granted ALTER permission for the DB (via the UI: DB name > Secuity > Users > affected user > Properties > Securables wherein I can see ...
0
votes
0answers
74 views

How can I DENY a SQL Server Database User from seeing tables in a specific schema? VIEW DEFINITION doesn't seem to work

This is somewhat of an X/Y Problem: my original problem is that I want to use SSDT to maintain my database design, with the catch that my database design uses two schemas: The dbo schema that ...
0
votes
3answers
48 views

why is granting ALL permissions and privileges to a new role/user for a new database difficult with postgresql?

With mysql and am sure countless other database softwares, it is pretty easy to create a new database, create a new user and grant that user to own and be able to do everything on that database this ...
-1
votes
2answers
37 views

Extremely safe Postgres table permissions

Let's say that I have four tables in my Postgres database, two of which are private and contain highly sensitive information (private1 and private2), and two that contain information I want to allow ...
0
votes
0answers
29 views

Privileges to select any table in Oracle

I'm using a Oracle database client application that connects to 1521 port to do "select" commands over every table in a Oracle db 12.1. I told dba to create this role with these commands: ...
0
votes
0answers
27 views

SQL Server permissions to create arbitrary custom-types and stored procedures with them

What are the most restrictive permissions to allow for creation of arbitrary custom types and stored procedures with use the types in SQL Server? For instance: create type dbo.MyType as table (dt: ...
1
vote
1answer
36 views

Can sys.database_permissions contain REVOKE?

The Microsoft documentation for sys.database_permissions mentions that the valid values for state are "D", "R", "G", "W". The corresponding values for ...
0
votes
1answer
104 views

Can't create schema for a db with PostgreSQL

Use psql -U postgres to login. postgres=> CREATE DATABASE mydb; postgres=> \c mydb; You are now connected to database "mydb" as user "postgres". When create schema, got ...
1
vote
2answers
67 views

Create a view in a user database that can access selected system database tables

Using the principle of least privilege, what access should I give to a Role "Checklist_role" that has read permission to a view "MaintenanceJobs_view" in a user database "...
0
votes
1answer
123 views

Postgres 13 - Grant to Active Directory Groups?

Is it possible to grant an AD group in PG 13 without sorting to creating the group in the database? Similar to how AD groups can be granted directly in SQL Server. The PG server is on a Windows server ...
0
votes
0answers
28 views

Create non-sysdba user that can grant tablespace to other users

I am creating an Oracle role with Admin option Grants so that user with this role assigned, will not be a full sysdba but will be able to create other users and grant them permissions. What I ...
0
votes
1answer
35 views

Disabled SA user is listed as logged in

I was looking for the last time users have been logged into the system and saw SA as being used. Strange is that SA is disabled by default and not used on our systems. How is that possible, what am I ...
0
votes
0answers
62 views

How can I manage newly created tables permissions in the PostgreSQL? [duplicate]

I want to create default permissions on the schema and automatically assign these permissions to newly created tables. For this purpose, I've created a role and assign a user. Afterward, I've created ...
1
vote
1answer
39 views

Significant performance differences executing alter and grant statements between users with same permissions

I am experiencing significant performances differences between users with the same permissions when executing alter and grant statements. I have an automated build system that runs a series of SQL ...
0
votes
1answer
49 views

Is GRANT DELETE TABLE t TO PUBLIC and the revoke the right to DELETE TABLE t FROM user1 possible?

I have a production database that has GRANTs TO PUBLIC for INSERT, UPDATE, DELETE on specific tables of the production schema, table t1 being one of these tables. Say I want to create a user user1 ...
0
votes
1answer
28 views

Create Temporary Access to production support

We're thinking of creating a web site where a manager can provide temporary access to a person for a limited set of data in our production SQL azure database for production support. Auditing is ...
0
votes
1answer
47 views

Can I GRANT SELECT on all schemas in a database?

I need to create role users of which can only read (select) data. I can do it for a particular schema. But I need it to work with all existing and future schemas (existing at least). How can I do it? ...
1
vote
1answer
186 views

Can not give NT SERVICE\MSSQLSERVER permissions on network drive

I have an SSIS package that I would like to run as a job. The flat file source sits on Server A while the package and job sit on Server B. When I run the job that executes the SSIS package I get an ...
1
vote
3answers
278 views

Are there any things to consider before granting VIEW SERVER STATE and VIEW DEFINITION to Developers?

I would like to grant below to permissions to Developers group, on Production SQL Server: VIEW SERVER STATE VIEW DEFINITION (server level) This is done to make them able to query some of dynamic ...
1
vote
0answers
126 views

Cannot use the special principal 'dbo' when addressing SQLMI risk VA2108

We've just set up a new SQL Managed Instance on Azure, and have restored a database to it for testing. After running an initial Azure Vulnerability Assessment, the results include this: VA2108 - ...
0
votes
1answer
22 views

Postgres view role permissions

I am trying to work out how database roles work. Here is my user case... create role user1 login password 'user1'; create schema authorization user1; CREATE ROLE DEV_ROLE; grant connect, temporary ...
0
votes
1answer
41 views

How to test user permissions

I have two server users, lets say admin and notadmin. I need to test notadmin's permissions. I need set and test VIEW SERVER STATE permission on notadmin, but usually I have access only to database ...
0
votes
1answer
256 views

Powershell script executed by SQL Server doesn't take effect

I'm doing some testing and I want to execute a PowerShell script through xp_cmdshell. Below is the PowerShell script (c:\temp\sqltotext.ps1). echo "haha" | Out-File "c:\temp\haha.txt&...
0
votes
0answers
54 views

The SQL Scripter library is running a SELECT COUNT(*), how do I stop it?

I'm using the Microsoft.SqlServer.Management.Smo.Scripter library from within a PowerShell script to pull SQL object creation scripts from a DB as part of an automated process. The user account used ...

1
2 3 4 5
29