Questions tagged [permissions]
Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
1,610 questions
0
votes
1
answer
24
views
SQL Server Permissions to synonym and underlying objects
I have DatabaseX_2024 and DatabaseY on same SQL Server. My app works with DatabaseY but need some data from DatabaseX_2024. Because name of DatabaseX_2024 is changing (will be DatabaseX_2025 next year)...
Condottiero
3
votes
3
answers
1k
views
Permission hierarchy vs. WITH GRANT OPTION
I have an Azure SQL database with this security setup:
SchemaUpdater user with db_ddladmin, db_datawriter, and db_datareader roles. The user is used to execute database change scripts during ...
CommunityBot
- 1
16
votes
1
answer
34k
views
Postgresql enabling extensions without super-user
I have a PostgreSQL 9.5 server on which I have scripts that create roles and databases for users automatically. Within these databases it would be helpful to enable specific extensions (e.g. pgcrypto),...
- 101
1
vote
1
answer
343
views
Allow user to drop only tables / views created by that user in MySQL
Is it possible to allow a user to only drop tables and views that he/she created in MySQL? How is this achieved?
CommunityBot
- 1
1
vote
1
answer
31
views
how do I restrict users to execute SET QUERY_GOVERNOR_COST_LIMIT 0 in SQL Server
We had set up a server configuration of QUERY_GOVERNOR_COST_LIMIT to restrict expensive queries, but as it turns out some clients started using the statement :-
SET QUERY_GOVERNOR_COST_LIMIT 0
to ...
1
vote
1
answer
2k
views
MariaDB Read-Only user can't see database, why?
I have 2 users, one with ALL grants, another with SELECT only.
User 1 can see the database, not user 2, why?
Read-only user:
MariaDB [(none)]> SHOW GRANTS FOR 'readonly'@'%';
+----------------------...
CommunityBot
- 1
0
votes
1
answer
832
views
How to do point in time recovery of binary log files into .sql file
I have written a shell script to do an incremental backup of MySQL database.
For point in time recovery I'm using the binary logs generated in /var/lib/mysql directory.
For point-in-time recovery, Im ...
CommunityBot
- 1
3
votes
1
answer
2k
views
mongodb keyfile permission denied
I configured in /etc/mongod.conf to enforce keyfile access control, in security option enabled, keyFile is /root/dbtest.key (the absolute path of keyfile). I already gave the ownership to mongodb user ...
CommunityBot
- 1
0
votes
1
answer
18
views
Postgres permissions on table create not propagated
we are working with a postgres database V13. We're facing a problem that previously permissions were just inherited/created when a new table was created. It is not working anymore, when I create a new ...
- 56.4k
1
vote
1
answer
2k
views
Postgres SQL on AWS RDS how to grant permission for schema, select on tables to user
I have logged in as superuser and created a readonly user.
When I run grant command, it says that schema does not exists
I am logging in as root:
sql -h myhost_name -U root -d postgres -W
grant ...
CommunityBot
- 1
1
vote
1
answer
27
views
Grant execute only in localhost
I have a user that can be accessed from any host (we are currently in development). But I want to limit the execution of stored procedures only for localhost. The problem is that the localhost user is ...
- 16k
4
votes
1
answer
11k
views
Permission for sequence in another schema
Postgres 9.3
Debian 7.0
I created a specific schema for a specific user and created a view in this schema for this user, so it's the only table he knows that exists. The problem is that this same ...
- 182k
2
votes
1
answer
2k
views
MySQL privileges for roles aren't applying to users?
I've done what I consider to be sufficient research with no answers to justify posting this question here. I am attempting to grant users permission to execute certain stored procedures. And because ...
CommunityBot
- 1
1
vote
2
answers
93
views
How to work around "row is too big" for role definitions without recreating the database?
I am running into the row is too big (ERROR: 54000: row is too big: size 9976, maximum size 8160) error in Postgres related to role permissions on a couple of my instances. I understand that after ...
- 11
0
votes
1
answer
352
views
Inherit permissions in postgres
I currently have a group role. This group role is called team. Team currently has the permission to create databases.
I have one user that is a member of team. But that user is unable to create a ...
CommunityBot
- 1
0
votes
2
answers
345
views
SQL Account cannot access file system
I have an issue with a service account that is used to import several files on its D: drive. In the past SA was used for this process, but of course it needed to be replaced by a service account.
So I'...
CommunityBot
- 1
0
votes
2
answers
1k
views
Access Denied error when running job in SQL Server Agent
Problem:
While trying to execute an exe (kept in network path) through Sql Job (type: Operatingsystem(CmdExec)) below error occurred:
Executed as user: NT Service\SQLAgent$SQL2017STD. The process ...
- 193
2
votes
1
answer
1k
views
Database model with Users, Resources, Permissions
I am fairly new to the DB design. I need to handle what a user can do on a specific resource.
One of the main queries I need to drive is:
Get all the cars a user has write permission to.
I think ...
CommunityBot
- 1
2
votes
1
answer
909
views
MySQL - Grant user permission to create table as long is it has a prefix in the name
I'd like to grant a user permission to create tables in a database so long as the table has a particular prefix, let's say example_.
I've tried the following:
$ mysql -u root -p
mysql> CREATE ...
CommunityBot
- 1
2
votes
2
answers
117
views
Azure MS SQL: grant sys.* and msdb.dbo.* select permissions for Grafana monitoring
I'm trying to monitor Azure MS SQL databases using this Grafana dasboard. It executes several queries to tables whose names start with sys and msdb.dbo.
I've created a dedicated grafana user for this ...
- 141
0
votes
2
answers
328
views
which privileges should I grant to run the query below in a postgresql instance
I faced a task: find out minimal user permissions that I should grant to run a query:
select grantee, routine_name from information_schema.routine_privileges where routine_name in ('pg_read_file', '...
CommunityBot
- 1
1
vote
2
answers
2k
views
postgresql 9.* - user cannot SELECT from VIEW inside a SCHEMA as DEFAULT PRIVILEGE
hope you can help me.
I have 3 users
First is me, the db admin. I run the GRANT queries, I can do anything. (name doesn't matter now)
Second is the data manager user. = manager_u
Third is the data ...
CommunityBot
- 1
7
votes
1
answer
9k
views
Using AD groups vs roles in SQL Server
What is best practice for SQL Server security?
Using AD Groups that are given rights on schema objects
or should I add the AD Groups to a database role, which is given rights on schema objects?
If the ...
- 1,554
2
votes
1
answer
2k
views
In Postgres, is an unprivileged role able to execute a function with elevated privileges?
For context, I am using:
postgREST: a thin REST client on top of Postgres (which does all the heavy lifting)
Azure AD: which handles identity and access of the organization
Since users, roles, ...
CommunityBot
- 1
0
votes
1
answer
1k
views
AWS RDS : Setting Create and other grants only for single Database is not working
We are using AWS RDS Mysql, and we are trying to give SELECT access to all databases i.e RO only, but for a single database, we want to give all permissions i.e CRUD. It's not working out ...
CommunityBot
- 1
0
votes
1
answer
50
views
SQL Server read-only SystemAdmin account
Is there a way to create a sysadmin like account with only read privilege's.
I know that you can give a lot of grants to an account like view server state, view any definition, view any database etc, ...
- 511
2
votes
1
answer
3k
views
grant permission to SHOW FIELDS
I create a user to make a dump twice a week but when I try to execute mysqldump I have this error
mysqldump: Couldn't execute 'SHOW FIELDS FROM `contabilidad_amortizaciones_completas_por_id_vista`': ...
CommunityBot
- 1
0
votes
1
answer
71
views
Sysadmin Privileges Disappear When using database
I have an AD login added to a SQL Server group.
The SQL Server group has the sysadmin role.
When the user logs in they connect correctly
account name type privilege mapped login name ...
- 5,926
0
votes
1
answer
89
views
Why can't I restore a database backup from a shared folder in Microsoft SQL Server Management Studio?
I'm working with Microsoft SQL Server Management Studio, version v18.12.
I have shared a directory, in order for my colleagues to give me information, like database backups.
When I try to access a ...
- 377
0
votes
1
answer
391
views
mysql 8 ndbcluster distributed privileges
I've setup a mysql 8 ndbcluster but cannot get the distributed privileges working.
following how to setup distributed privileges using NDB_STORED_USER (https://dev.mysql.com/doc/refman/8.0/en/mysql-...
CommunityBot
- 1
1
vote
2
answers
4k
views
MySQL do not accepts wildcard for tables name level grant
Trying to grant a user select privilege on multiple tables using wildcards as following:
GRANT SELECT ON 'DBname'.'foo_%' TO 'username'@'%' IDENTIFIED BY 'password';
But keep giving the following ...
CommunityBot
- 1
0
votes
1
answer
532
views
How to reset object permissions to default?
I've just been added to a project using Postgresql 11.4 where database security has been an afterthought. As part of tightening things up, I've used ALTER DEFAULT PERMISSIONS to set sane ACLs on any ...
CommunityBot
- 1
0
votes
1
answer
3k
views
MySQL: Privileges to view Views/Stored Procedure for user Regardless of Host
I've created stored procedures on a (remote hosted - DreamHost) MySQL Database using the HeidiSQL client.
One problem i seem to have is that viewing/editing the content of stored procedures is only ...
CommunityBot
- 1
1
vote
2
answers
4k
views
how to list the SSRS permissions in each folder in the reporting services server?
I have the following powershell script that downloads all the RDL from a reporting services server.
I am not the author to whom I am very thankful. It has been very useful for downloading the RDLs.
...
- 16.6k
6
votes
2
answers
2k
views
Is the PostgreSQL 'connection limit' shared across all users in a role?
I have created a role that many users can share:
> create role foo_read_only connection limit 5;
I have then assigned permissions to that role:
> grant select on table1 to foo_read_only;
...
- 654
0
votes
1
answer
2k
views
No permissions to the certificate file when trying to restore a DB from a third party
I am trying to restore a DB in SQL server 16. It is a developer version installed on windows 10 laptop. We have a backup file from a SaaS instance. We have moved to a new instance of the SaaS and this ...
CommunityBot
- 1
0
votes
1
answer
32
views
PostgreSQL: cross Schema Foreign Keys fails with permission denied for table
Adding a cross-schema foreign key:
ALTER TABLE "editedArticles"
ADD CONSTRAINT "editedArticles_articles_foreign"
FOREIGN KEY("originalArticleId") REFERENCES "...
- 121
3
votes
2
answers
4k
views
db2_install do not have write permission on the directory or file
This is the error I encountered (I ran the db2_install and everything else as root,):
DBI1288E The execution of the program /home/DB_SERVER/ibm/db2/v10.5 failed. This
program failed because ...
CommunityBot
- 1
0
votes
1
answer
304
views
MySQL Proxy on Current User
I'm trying to grant permissions to the current user logged in depending on their role, but it doesn't seem possible to have a select statement at the end of the GRANT PROXY # TO # command
The code I ...
CommunityBot
- 1
0
votes
1
answer
628
views
Explicitly revoke privileges from a user who is a member of a role that is granted those privileges in PostgreSQL
Let's say I have a user on my PostgreSQL instance called "myuser", and I add it to a new group called "update_all" like this:
CREATE ROLE update_all WITH NOLOGIN ROLE myuser;
I ...
CommunityBot
- 1
0
votes
1
answer
2k
views
How to give Read_write users access to foreign tables imported through foreign data wrapper?
I had a question regarding the extension postgres_fdw. I am trying to use postgres_fdw to import foreign tables from DB A to DB B. These databases are on the same host.
In Database B, I have a set of ...
CommunityBot
- 1
0
votes
1
answer
421
views
Does SSRS report user needs database level permission?
I have a separate reporting server and a separate database server. Now on the Reporting server site settings I could see there are some roles and users. Suppose a User BOB has ‘POWER USER’ role ...
CommunityBot
- 1
0
votes
1
answer
331
views
Query for: view users and permissions (roles) from root security folder (MS SQL)
On the Internet I found a lot of scripts how to display users and their permissions under a particular database (Security folder under table) - for example sp_helpuser.
Currently, however, I need to ...
CommunityBot
- 1
0
votes
1
answer
381
views
How do I restore a SQL Server backup to a different server that will synchronize the users correctly?
The issue I am having is I have 2 servers A and B. On A I have a dB, say it's called "MyDB"... On server B there are 2 dBs called "MyDB_Dev" and "MyDB_Test". These all ...
CommunityBot
- 1
0
votes
1
answer
473
views
Grant permissions to only specific tables in a Schema
I am having a schema where I wanted to grant permissions in the following manner. What is the right way of doing this? To keep this simple, I am putting an example.
SCHEMA - HR
TABLES:
GEO_EMPLOYEE
...
CommunityBot
- 1
6
votes
3
answers
43k
views
How to list permissions on a schema?
In SSMS, if you follow the path [Database] > Security > Schemas and view any schema properties, you have a tab "permissions" that list all the permissions that every user have on that ...
- 70.5k
0
votes
1
answer
1k
views
Mysql grant limited by IPv6 subnet
I want to permit access to a mysql server over IPv6 and limit access to the particular account to our ULA subnet we are using (fdd7:03d7:6247::/48).
The manual seems to suggest that wildcards are ...
CommunityBot
- 1
0
votes
1
answer
3k
views
GRANT ROLE TO USER in MySQL
I created one role QI_RO, granted all privileges on all schemas on the server and I was trying to grant role privilege to another user but throwing error.
GRANT QI_RO to test_user@'%';
Error Message:
...
CommunityBot
- 1
0
votes
1
answer
375
views
Execute Permission Denied on Stored Procedure using Microsoft JDBC Driver and Windows Authentication
I have a Microsoft SQL Server database that I use Stored Procedures to read/write data to through a Integration Engine in this case InterSystem IRIS.
Originally I was using a local server user to do ...
CommunityBot
- 1
0
votes
1
answer
32
views
Disabling Login of a User Who Have Scheduled Jobs to Run in Oracle
I have a custom oracle user(let's say monitor_user) which has lots of procedures and jobs that sends e-mail of query results. But for security reasons i want to disable its login to database from an ...
- 127