Questions tagged [permissions]

Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

Filter by
Sorted by
Tagged with
0
votes
2answers
48 views

Same query, different result (depending on user's permissions)

A question about SQL in general: If two users execute the same sql statement, is it possible that user1 gets different results than user2? Imagine user1 has more permissions than user2. With other ...
1
vote
1answer
25 views

migrate users from mariadb10.1 to mysql5.7

My company is moving our databases from self-hosted mariadb 10.1 to Google CloudSQL (which is essentially MySQL 5.7). Dumping / restoring our application schemas looks straightforward. However I'm ...
1
vote
1answer
28 views

User is in multiple Active Directory groups with multiple roles in database

I have a user that is a member of multiple Active Directory (AD) groups. Within SQL Server 2012, these AD groups have been assigned to different database roles. This user is not getting the correct ...
0
votes
0answers
9 views

How to grant a group to another group in Redshift

I am trying to build a matrix of roles to dynamically change priorities for our users. In other database I would be doing something like: create role role1; create role role2; grant role role1 to ...
0
votes
0answers
35 views

What are all the privileges granted to the ddl_admin role? [closed]

If I wanted to GRANT permissions that mimic the ddl_admin role, which permissions would I need to GRANT?
4
votes
1answer
140 views

Can SET IDENTITY_INSERT be allowed with less privileges than db_ddladmin?

I've inherited a system where the application is running under sysadmin account. I limited this account to db_datareader + db_datawriter + EXECUTE on all database and set extended events session to ...
2
votes
0answers
39 views

Error in ALTER DEFAULT PRIVILEGES

I'm trying to create a new user in AWS Aurora Postgres DB. Create user worked fine and I can login to the DB using that account. granting permissions to it isn't. First: GRANT ALL on ALL tables in ...
0
votes
1answer
13 views

How do you detect whether you have permission to query sys.dm_os_performance_counters?

According to the sys.dm_os_performance_counters documentation: On SQL Server, requires VIEW SERVER STATE permission. On SQL Database Premium Tiers, requires the VIEW DATABASE STATE permission ...
0
votes
0answers
26 views

Linked Server using Impersonation fails SSMS GUI Connection test but sp_testlinkedserver succeeds

I have a linked server (Server B) set up on Server A with permissions set as follows: This means that there are five Windows Logins (of which my windows account is one) who can access the linked ...
0
votes
1answer
32 views

MySQL least privileges to get database/tables size

I'm using centreon_plugins to monitor some mysql databases. As a best practice I create a dedicated user for monitoring and I give it the least possible privileges. For simple monitoring I usually ...
1
vote
0answers
34 views

If a Login is not granted the db_ddladmin role on a database, but is individually granted CREATE VIEW on it, will they still be denied?

Since SQL Server permissions work as "deny first", I was wondering if that applies downward to individual permissions that are granted, if the parent permission isn't granted e.g. db_ddladmin is not ...
2
votes
1answer
73 views

Why can't I create a new schema with the owner set to dbo?

I created a test account for checking permissions against. It currently has the db_datareader, db_datawriter, and db_ddladmin roles for the Northwind database. But when it tries to create a new schema ...
0
votes
1answer
30 views

Why is MongoDB user with the only privilege as “find” able to insert and update collection?

I want my user to have only find action privilege on a specific collection. However, when I create the user with the privilege, restart the mongod server and run the mongo shell again with -u -p and --...
1
vote
2answers
65 views

SSMS login by external developers

This is my first question so please bear with me ! We have an external company whose developers need to login into an instance on our on-premise SQL Server 2016. They have AD logins, and these are ...
0
votes
1answer
42 views

Create a user on database A with a procedure from database B (with EXECUTE AS)

I have 2 logins : LoginA: role dbcreator + CONNECT ANY DATABASE LoginB: role sysadmin I have 2 databases : dbA: everyone has all rights on it dbB: only LoginB has rights on it, LoginA is only the ...
0
votes
0answers
24 views

Grant `UPDATE` right on MySQL non-system schema?

After doing some tests and despite not seeing any warning in MySQL documentation, it seems that a user who has UPDATE right on all databases can do updates in the mysql.user table, and so, this user ...
1
vote
1answer
46 views

Integrity checks permissions issue

I am running Hallengren's IntegrityChecks job which fails with the following error: CREATE FILE encountered operating system error 5(Access is denied.) while attempting to open or create the ...
0
votes
1answer
21 views

Revoke User Access to all System Information Functions on Postgresql

Is there a way to remove access to all system information functions for a given user (which is already limited to read only access) in Postgres? For example, a user could normally run ...
1
vote
2answers
38 views

How can I create a user who could only create tables and can't delete/drop them

There's my problem. I'm using PostgreSQL and tried so many things to create a user who can create tables but can't drop them, it's like create a table but assign it to another user. I've tried one ...
3
votes
1answer
114 views

How do I grant a SELECT permission to an individual user who's part of a large group that is explicitly denied?

I have a table SuperSecretData which is currently setup to deny SELECT to everyone in the company by the standard Active Directory account "Domain Users". But a couple of specific individual users do ...
3
votes
1answer
52 views

User Mapping on a DB that's part of an AG. DB is READ only? [duplicate]

I'm a sys admin being tossed in to a DBA role. I currently have two SQL Server boxes, 2016 Enterprise, in an AG. The DB has synchronized without any issues. A third party vendor needs to have an ...
0
votes
0answers
30 views

Why can every PostgreSQL user see all databases and their tables? [duplicate]

I'm running a PostgreSQL database server, version 10 on Linux, for multiple users. Today I found out by surprise that any user can see all other users' databases and their tables, columns and other ...
0
votes
1answer
236 views

How to modify authentication plugin in mariadb starting with 10.4.1 to get mysql access for root user without password when migrating mysql to Mariadb

At https://kofler.info/root-login-problem-mit-mariadb/ a method is described for modifying the plugin being used for authenticating a user update mysql.user set plugin='' where user='root'; leading ...
0
votes
2answers
47 views

Can't create database even with all privileges

[mariaDB on RedHat 7.7] I just want to create a new database, but found "access denied": create database lamp_k; ERROR 1044 (42000): Access denied for user 'lamp'@'localhost' to database 'lamp_k' ...
1
vote
2answers
82 views

sp_updatestats doesn't seem to work for non-sysadmin logins

Microsoft SQL Server 2017 (RTM-CU16) When trying to update statistics under a user which is a member of db_owner database role via EXEC sp_updatestats; SQL Server throws an error: Msg 15247, ...
0
votes
1answer
67 views

Can't Grant Users Update permission

There are several Active Directory user groups in my SQL Server database environment. I changed the users' permissions on all databases on the server. Several users wanted me to give them the update ...
0
votes
1answer
59 views

Access denied for user 'me'@'localhost' (using password: NO)

I am am trying to learn mysql 101. Doing so, I broke my ability to login as root. At first I could simply connect to mysql by running sudo mysql In an attempt to alleviate a problem, I ...
0
votes
1answer
51 views

Set up read-only privileges on the dbo schema, but allow creation of entities in another schema?

Is it possible to create a custom schema in a database such that users that have read-only access in that database for the dbo schema can be set up with the ability to create and modify entities for ...
1
vote
1answer
85 views

Create a read-write user and a read-only user

I'm trying to do what I think is a common setup for a PostgreSQL database on a RDS instance. I want to have: Either on public schema, or on a custom schema I don't especially care A read-write user A ...
0
votes
1answer
24 views

Cascading REVOKE not working in MYSQL

I've read about an SQL option of cascading permissions when issuing a REVOKE statement. I've googled for how this option is implemented in MySQL, but haven't found it at all. This is the docs page ...
1
vote
2answers
18 views

GRANT permission ON database TO user not working on AWS

I'm having trouble granting a user permission on AWS. mysql> GRANT CREATE ON *.* TO 'hmrex_db'@'%'; Query OK, 0 rows affected (0.01 sec) mysql> SHOW GRANTS FOR 'hmrex_db'@'%'; +----------------...
3
votes
2answers
41 views

How can I determine which permissions needs to be assigned to the newly created login?

We have 4 databases which contain different procedures and functions. Till now the actual application can access the database using only the sa account, now I would like to change the app to use ...
-1
votes
1answer
57 views

SQL server login get unwanted high privileges on a db when created

We have a demand to create a new user with the ability to SELECT only 4 specific tables. In order to do that we create the login and map it to the requiered db : USE [master] GO CREATE LOGIN [pos] ...
1
vote
1answer
73 views

PostgreSQL read only user

We have a PostgreSQL database 'db1', which is having around 500 schemas. I am trying to create a read-only user for this particular PostgreSQL database. I could find the following command for ...
0
votes
2answers
2k views

Failed to start of service MongoDB community4.2 using Homebrew in Mac OS Mojave 10.14

Error message while starting the mongoDB service. Error: Permission denied @ rb_sysopen - /Users/syedahmed/Library/LaunchAgents/homebrew.mxcl.mongodb-community.plist I installed/reinstall the ...
2
votes
0answers
64 views

BulkAdmin Role Doesn't Work

There is a query that our BI team use. They can not execute the query because of the error below. Ad hoc access to ole db provider 'MSDASQL' has been denied. You must access this provider ...
2
votes
1answer
28 views

Allow two users permission to execute single agent job

I am trying to allow two users to run a single agent job. With this in mind, I don't want to add the users to the SQLAgentOperatorRole role in msdb as that will give them excess priveleges. I tried ...
1
vote
1answer
54 views

Which rights to grant for controlling an SQL Server Availability Group?

We are having the following setting: For an ERP Test / Accept SQL Cluster we want to follow the least privilige principle to give the external engineers rights on the SQL server. We are running SQL ...
2
votes
0answers
47 views

How to reassign all privileges to another role in PostgreSQL?

​On an existing PostgreSQL server let say that I have two users "Alice" & "Bob" and I want to clean up my policy because they actually have the same job and should have exactly the same privileges ...
0
votes
1answer
41 views

SQL Server — see when user/ login was last modified? And other meta-data

I know you can see when tables or views were last modifed in sys.tables or sys.views in SQL Server. It does not appear there is a table like this for users or logins --- or is there? Basically, a ...
1
vote
0answers
67 views

Grant Privileges on Production Database Throws “Error: tuple concurrently updated”

I would like to grant read access to all tables in my schema GRANT SELECT ON ALL TABLES IN SCHEMA public TO XXX; While it works on our alpha environment, it fails with our production database: [...
0
votes
3answers
106 views

Create Synonym error for a user-SQL Server

I have a user who has permission to create synonym in my sql server 2016 database.That user also has data reader permission. When the user tried to create synonym as shown below. USE [DEMODB] GO ...
0
votes
2answers
146 views

Which SQL Server/Windows logins require the sysadmin role?

I'm setting up a new SQL Server instance. Which of these SQL Server/Windows logins should have the sysadmin role? NT AUTHORITY\SYSTEM NT SERVICE\SQLWriter NT SERVICE\Winmgmt NT SERVICE\MSSQLSERVER ...
0
votes
2answers
57 views

Not able to delete transaction log backup file

I have a big SQL Server database (~1.5 TB) and i didn't take log backup of that database for last two weeks for some reason. Today i found that the .ldf file of that database became huge around 1.5 TB....
0
votes
1answer
16 views

How to reset object permissions to default?

I've just been added to a project using Postgresql 11.4 where database security has been an afterthought. As part of tightening things up, I've used ALTER DEFAULT PERMISSIONS to set sane ACLs on any ...
2
votes
1answer
67 views

Msg 15404, Level 16, State 10, Procedure xp_logininfo - missing permissions [duplicate]

I have a server based in the USA, where I am not a domain admin, and my permissions are limited to sql server only - where I am sysadmin. after a migration of a few databases to a new server, I ...
0
votes
0answers
17 views

Reader rights by default in Postgres

My question is about database permissions and rights in Postgres. How can I create reader rights by default when objects are uploaded into PGadmin 4 schemata? I created the following schema in ...
0
votes
0answers
156 views

mongodb keyfile permission denied

I configured in /etc/mongod.conf to enforce keyfile access control, in security option enabled, keyFile is /root/dbtest.key (the absolute path of keyfile). I already gave the ownership to mongodb user ...
0
votes
1answer
37 views

List database CONNECT privileges on PostgreSQL

How can I view database-level privileges like CONNECT of users? I found 2 ways already, but neither of them is perfect: Use function has_database_privilege(). This works, but I have to run it ...
0
votes
3answers
46 views

MySQL: list users which have been granted EXECUTE permission on a given procedure

I would like to audit my database to check which users have been granted individual EXECUTE permission to which procedure. I would like to use this information to be able to save GRANTs when changing ...