Skip to main content

Questions tagged [permissions]

Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

Filter by
Sorted by
Tagged with
0 votes
1 answer
13 views

Same global user works local but fails on live server for information_schema database UPDATE query

I have two database servers, local and live. The local server is running MariaDB 10.11.6, the live server is running 10.11.8. I have the exact same global user, example@localhost on both the local and ...
John's user avatar
  • 725
-1 votes
1 answer
30 views

SQL Server Management Studio "Key cannot be null" error when giving a specific user permissions on Stored Procedures

I'm attempting to give a specific user execute permissions on a Stored Procedure. When I attempt to do so, I get an error: Key cannot be null. Parameter name: key (System)" When I attempt to ...
LYNITS's user avatar
  • 1
0 votes
0 answers
18 views

MS sqlserver user grant access

I have a huge problem with rights of new users of my SQL Server database. The new user can access all tables irrespective of grant access code to create login and user USE [master] GO CREATE LOGIN [...
Maaz's user avatar
  • 1
-2 votes
0 answers
11 views

no COPY permission with CSV

i read all post with denied permission problem. But I need a COPY in script (python psycopg2), I can't use psql \copy I'm on MX-LINUX, postgresql 15. My role is superuser, i'm DBA of my database, I ...
pasqal's user avatar
  • 97
1 vote
2 answers
104 views

error when re-applying the permissions script into the original database - sql server

when I run the following script: -- ——— SCRIPT GRANTS for Object Privileges————— IF OBJECT_ID('[sys].[sysrowsets]') IS NOT NULL GRANT CONTROL on [sys].[sysrowsets] to [db_myrole_BA] I get this ...
Marcello Miorelli's user avatar
-1 votes
0 answers
10 views

why pgAdmin4 Tablespace Security privileges does not count for pg_default if no tablespace is selected when creating new database? how to solve this?

why pgAdmin4 Tablespace Security privileges does not count for pg_default if no tablespace is selected when creating new database? how to solve this issue? Hy all -I have a server dedicated to ...
Ervin's user avatar
  • 1
0 votes
2 answers
50 views

How do I prevent a DB user to change table contents in SQL Server?

How do I specify that a DB user cannot edit the AspNetUserRoles table in SQL Server? Currently, the user has Membership->db_owner permission, and it can do everything. I would like to control ...
abenci's user avatar
  • 123
0 votes
1 answer
30 views

How can I allow a user to alter tables they do not own in Postgres?

I need to be able to assign a role to users to allow them to do anything they want to tables in a schema. I need to do this without assigning superuser priv in Postgres. I already figured out how to ...
Dave's user avatar
  • 103
0 votes
0 answers
56 views

Permission denied to ALTER DEFAULT PRIVILEGES

I'm trying to alter the default privileges of a role (roleB) that I am a member of, to allow it to modify objects created by another role (roleA) that I am also a member of. I have the inherit ...
gpat's user avatar
  • 1
1 vote
1 answer
27 views

PostgreSQL crosstab query not using view owner permission when queried from other users

I'd like some help with regards to creating a view in PostgreSQL using the crosstab function. I've been trying to create a view as follows: create or replace view csv_data as with answers as( select * ...
lsimonetii's user avatar
0 votes
1 answer
27 views

PostgreSQL: permission denied to COPY to or from an external program, even after Grant pg_execute_server_program

Running Copy test(id, name) From Program 'zcat /tmp/test.csv.gz' CSV Header; fails with: SQL Error [42501]: ERROR: permission denied to COPY to or from an external program Detail: Only roles with ...
Chema's user avatar
  • 131
0 votes
1 answer
72 views

Checking REFERENCES permission is granted or not?

I am trying to execute the following minimalized example on SQL Server (14.0.3465.1): --drop TABLE [dbo].[testtable] --drop TABLE [dbo].[referencetable] create table [dbo].[referencetable]( [...
cly's user avatar
  • 101
0 votes
0 answers
8 views

CREATE TABLE permissions required to append Pyspark dataframe to SSMS table

I am using AWS glue to extract some data from RDS, parse it into some other format and push it back to RDS. The RDS user I use has SELECT and INSERT permissions on tic.Example. However, when I try to ...
Eloy Fernandez's user avatar
0 votes
0 answers
64 views

How to prevent user from connecting via SSMS but allow query via .net application connectionstring?

I have been given task to create a SQL login that can be used to query the db via a .net application connection string. But the user shouldn't be able to connect to SQL via SSMS. I have created the ...
variable's user avatar
  • 3,468
1 vote
0 answers
14 views

How to stop losing control of a user I just created due to SYSTEM_USER privilege in MySQL

We have recently been plagued by users getting created with the SYSTEM_USER privilege by users who don't have that privilege. What do we need to do from a systematic perspective to stop this from ...
juacala's user avatar
  • 125
4 votes
1 answer
244 views

Granting SELECT...INTO permissions

I've created a new schema, archive, and am able to create, read, update and delete tables within it. I have an EXTERNAL_USER who I'm trying to give permissions to so that they can carry out select.....
philipnye's user avatar
  • 163
0 votes
1 answer
51 views

SQL Job Roles: How to grant a group permission to access SQL Jobs with unique mapping?

Issue Developers on the same team are members of a Windows_Group. These developers create jobs which they each own. Only the owner can edit the job so they cannot work together on same job. Because of ...
Bad_sa_18456's user avatar
0 votes
1 answer
97 views

Import roles from <16 into >=16

I've got a backup from PostgreSQL 15 that I'm trying to get imported into PostgreSQL 16. One of the breaking changes between the versions is to "Restrict the privileges of CREATEROLE and its ...
GammaGames's user avatar
0 votes
1 answer
40 views

How to get list of permissions for a role in Postgres?

I'm trying to do what is described here. That is, execute the following: BEGIN; DROP ROLE role_name; ROLLBACK; and get the: list of permissions it can find that are granted to the role. I can't ...
rob.loh's user avatar
0 votes
0 answers
22 views

Why does removing `skip-grant-tables` cause resource conflict error for mysqld?

After hours of searching, I have managed to narrow a mysqld issue down to a point, which I cannot find reason for. I am attempting to launch multiple instances of mysqld on my Ubuntu server. When ...
user10709800's user avatar
1 vote
2 answers
78 views

My user does not exist or dosent have any permision to alter or update tables

I have this query alter table NashvilleHousing add FixedSaleDate Date; update NashvilleHousing set FixedSaleDate = CONVERT(Date, SaleDate) got this error: Msg 4902, Level 16, State 1, Line 11 ...
Jose Mujica's user avatar
0 votes
1 answer
22 views

granting privileges to user in postgresql

I'm trying to setup a new project with a Postgresql 15.5 database. I have a running instance. If I create a new database psql --command "create database \"tagger-db\"" create a ...
marcosh's user avatar
  • 245
1 vote
1 answer
28 views

Logical replication security risk with run_as_owner = false

The docs say If the subscription has been configured with run_as_owner = true, then no user switching will occur. Instead, all operations will be performed with the permissions of the subscription ...
Felipe's user avatar
  • 305
0 votes
0 answers
53 views

Grant permission for a user to create objects in a PostgreSQL schema is not working

I have recently upgraded to PostgreSQL 15 and observed that a db user say X (not a owner of schema) is no longer able to create a table in public schema. From the below release notes looks like it is ...
John Wilkinson's user avatar
2 votes
2 answers
350 views

In Postgres, can an isolation level be set as mandatory?

At https://wiki.postgresql.org/wiki/Serializable#PostgreSQL_Implementation, it says Any transaction which is run at a transaction isolation level other than SERIALIZABLE will not be affected by SSI. ...
Andrew's user avatar
  • 121
1 vote
1 answer
218 views

Module signing on a trigger which accesses system views. Base table is on a custom schema

Some background: Question is follow up of this question: Is there a way in SQL Server to make a table only able to insert by trigger? I'm trying to achieve what the answer to the original question ...
Stackoverflowuser's user avatar
0 votes
2 answers
143 views

SQL Account cannot access file system

I have an issue with a service account that is used to import several files on its D: drive. In the past SA was used for this process, but of course it needed to be replaced by a service account. So I'...
El_Macho84's user avatar
0 votes
1 answer
46 views

How to COPY table privileges dba_sys_privs into different table in Oracle

i want to copy table privileges dba_sys_privs in table A to new table B. i have create table B. What left now was it's table privileges'. Kindly advice. Thanks
Ahmad Hasanul Ishraf Shuib's user avatar
0 votes
1 answer
33 views

MS SQL - Minimum Permissions to View Sensitivity Classifications

I'd like to provide some user groups access to view Sensitivity Classifications. Currently it returns blank results in the reports tool, or directly querying sys.sensitivity_classifications table. ...
mcswiggen's user avatar
0 votes
0 answers
141 views

Cause of Cannot execute as the server principal because the principal "MyUser" does not exist'

I have two databases on the same server, lets call them DB1 and DB2. There is a login on the server called MyUser, and both databases have a user setup from that login, also called MyUser [edit: and ...
monty's user avatar
  • 101
2 votes
1 answer
96 views

Problems getting SQL Server linked server to work in web-based admin utility on Windows Server 2022

I have an ASP classic web application based on an SQL Server database, with an admin component. The database has a linked server with Microsoft.ACE.OLEDB.12.0 provider to allow bulk import of records ...
user1207313's user avatar
0 votes
0 answers
29 views

SQL Agent job step update permissions

I have a non-sysadmin user whose ID (Windows login) is set as owner on a set of SQL Agent jobs. The user also has the SQLAgentReader role in MSDB. The user can see the Agent node in SSMS, can view ...
AardvDbDev's user avatar
0 votes
1 answer
236 views

Can't revoke permissions on Redshift

I'm having a issue revoking privileges that is stopping me from droping users select usename, acl.* from pg_default_acl as acl join pg_user on usesysid = defacluser where usename = 'user1'; gives me: ...
Alejandro's user avatar
  • 113
1 vote
0 answers
44 views

Why can't grant privileges to a role?

I created a role and set privileges to tables, then created a user and grant the role to it by postgres user. After the user login database, it can't select any tables at all. CREATE ROLE readonly; ...
Alpin Cleopatra's user avatar
1 vote
0 answers
55 views

Error 1216, not 1451, despite reference privilege on MySQL 8

MySQL 8.0.34 Limited-privilege users see less verbose errors (1216/1217) per the design intent. I've granted reference privileges, as suggested here, in an attempt to show more verbose errors (1451/...
Chris Broz's user avatar
1 vote
1 answer
39 views

Why does a user use owner privileges when executing a trigger?

I came across a strange situation that gave me a big headache and after solving it I would also like to understand WHY. Basically, a user had all the privileges he needed to execute a "trigger&...
Sotis's user avatar
  • 306
1 vote
0 answers
95 views

Which user executes Postgres RLS policies (CURRENT_USER vs VIEW owner)?

Postgres seems to have some weird semantics around which user is actually invoking check functions defined in RLS policies. Specifically, if the check function is SECURITY INVOKER, it appears that the ...
colophonemes's user avatar
1 vote
0 answers
40 views

Balancing Legacy CRM Needs and Security in Multiple Databases

I have a set of databases on a server. Database_alpha Database_beta Database_gamma Database_delta Database_alpha houses a legacy CRM system which has an inbuilt dependency on the sa account to ...
betelgeuce's user avatar
1 vote
1 answer
667 views

postgresql: why owner of table is unable to select from it?

In postgresql documentation on GRANT option it is written: There is no need to grant privileges to the owner of an object (usually the user that created it), as the owner has all privileges by ...
pva's user avatar
  • 113
0 votes
1 answer
71 views

How to prevent an existing role being given permissions on a new database?

I'm fairly new to postgres permissions. I'm working with a postgres server to add/remove databases to it as part of a workflow. Each database needs to have a role associated with it that can do ...
adrianbanks's user avatar
-1 votes
2 answers
124 views

readonly user on PostgreSQL 14 let me create new tables, why?

I try to apply any of these to create read_only_user: https://docs.snaplet.dev/guides/postgresql https://www.commandprompt.com/education/how-to-create-a-read-only-user-in-postgresql/#:~:text=...
Eric Ouellet's user avatar
0 votes
0 answers
37 views

SSIS - "Access to the path '\\XXX\data2\TXX\zz\Tracker - xx.xlsx' is denied."

SSIS error: Recently the following error "Access to the path '\XXX\data2\TXX\zz\Tracker - xx.xlsx' is denied.". i occurring. The SSIS package is executed through SQL Agent using a Domain ...
mah's user avatar
  • 1
1 vote
0 answers
25 views

How to securely limit columns in postgres logical replication?

The docs currently have this to say about publications with specified column lists: The choice of columns can be based on behavioral or performance reasons. However, do not rely on this feature for ...
Felipe's user avatar
  • 305
0 votes
0 answers
23 views

Launch RDBMS Client GUIs from Delinea

I am using the delinea permission access management tool that I pointed to the application file of SSMS and it could launch my desired server instance with the secret server credentials configured on ...
franklwambo19's user avatar
0 votes
1 answer
2k views

Grant VIEW DATABASE STATE on master DB

I am asked to provide access to VIEW DATABASE STATE in the master DB of an Azure SQL Server instance (Premium P6) to an external user (vendor) in order some investigation to be done. When run "...
Pavel's user avatar
  • 1
1 vote
1 answer
47 views

SAGE ODBC driver - minimum required folder permisions

I have a website which I want to connect to SAGE ACCDATA folder (which resides on a different server but same network to the intranet server) using their proprietary ODBC driver. For security purposes ...
BLoB's user avatar
  • 163
0 votes
1 answer
112 views

How is SQL server engine account able to access disk drive folder without permission?

I have recently changed the SQL engine account to mydomain\sqlengine. This evening I setup SQL audit into F:\audits. I'm surprised to see the SQL server is able to create a file in this folder without ...
variable's user avatar
  • 3,468
0 votes
0 answers
10 views

Schedule group disable write - with custom error

I'm looking for a good solution to what seems to be a simple problem. I need to disable a user group from writing to any number of tables on a schedule - let say Saturday between 0600 and 1200. I'd ...
SmittyBoy's user avatar
  • 101
1 vote
1 answer
83 views

SHOW TRIGGERS privilege without also being able to DROP TRIGGER?

Is it possible to give a user privilege to view Triggers, i.e. execute the SHOW TRIGGERS command, without also giving them permission to DROP TRIGGER? Background is, I want to give certain users the ...
BrokenPhysics's user avatar
2 votes
2 answers
2k views

Unable to drop user due to assigned privileges?

How do you drop a user with read-only permission to PostgreSQL? I created a user, with read-only access to all tables, on an RDS Postgres database with: CREATE ROLE myuser WITH LOGIN PASSWORD '...
Cerin's user avatar
  • 1,375

1
2 3 4 5
33