Questions tagged [permissions]
Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
1,573
questions
0
votes
0
answers
28
views
Balancing Legacy CRM Needs and Security in Multiple Databases
I have a set of databases on a server.
Database_alpha
Database_beta
Database_gamma
Database_delta
Database_alpha houses a legacy CRM system which has an inbuilt dependency on the sa account to ...
- 101
1
vote
1
answer
35
views
postgresql: why owner of table is unable to select from it?
In postgresql documentation on GRANT option it is written:
There is no need to grant privileges to the owner of an object
(usually the user that created it), as the owner has all privileges by
...
- 113
0
votes
1
answer
51
views
How to prevent an existing role being given permissions on a new database?
I'm fairly new to postgres permissions. I'm working with a postgres server to add/remove databases to it as part of a workflow. Each database needs to have a role associated with it that can do ...
- 101
-1
votes
0
answers
22
views
have a table with an 'after delete' trigger in one database. I want to insert a record into a table in another database when a record is deleted
Your scenario is as follows: you have a table with an "after delete" trigger, and you want to insert a record into another database's table if someone deletes a record. The problem is that ...
-1
votes
2
answers
48
views
readonly user on PostgreSQL 14 let me create new tables, why?
I try to apply any of these to create read_only_user:
https://docs.snaplet.dev/guides/postgresql
https://www.commandprompt.com/education/how-to-create-a-read-only-user-in-postgresql/#:~:text=...
- 101
0
votes
0
answers
22
views
SSIS - "Access to the path '\\XXX\data2\TXX\zz\Tracker - xx.xlsx' is denied."
SSIS error:
Recently the following error "Access to the path '\XXX\data2\TXX\zz\Tracker - xx.xlsx' is denied.". i occurring.
The SSIS package is executed through SQL Agent using a Domain ...
- 1
0
votes
0
answers
12
views
How to securely limit columns in postgres logical replication?
The docs currently have this to say about publications with specified column lists:
The choice of columns can be based on behavioral or performance reasons. However, do not rely on this feature for ...
- 283
0
votes
0
answers
6
views
Launch RDBMS Client GUIs from Delinea
I am using the delinea permission access management tool that I pointed to the application file of SSMS and it could launch my desired server instance with the secret server credentials configured on ...
0
votes
1
answer
239
views
Grant VIEW DATABASE STATE on master DB
I am asked to provide access to VIEW DATABASE STATE in the master DB of an Azure SQL Server instance (Premium P6) to an external user (vendor) in order some investigation to be done.
When run "...
- 1
0
votes
1
answer
23
views
SAGE ODBC driver - minimum required folder permisions
I have a website which I want to connect to SAGE ACCDATA folder (which resides on a different server but same network to the intranet server) using their proprietary ODBC driver.
For security purposes ...
- 143
0
votes
1
answer
55
views
How is SQL server engine account able to access disk drive folder without permission?
I have recently changed the SQL engine account to mydomain\sqlengine.
This evening I setup SQL audit into F:\audits. I'm surprised to see the SQL server is able to create a file in this folder without ...
- 3,430
0
votes
0
answers
10
views
Schedule group disable write - with custom error
I'm looking for a good solution to what seems to be a simple problem.
I need to disable a user group from writing to any number of tables on a schedule - let say Saturday between 0600 and 1200. I'd ...
- 101
1
vote
1
answer
26
views
SHOW TRIGGERS privilege without also being able to DROP TRIGGER?
Is it possible to give a user privilege to view Triggers, i.e. execute the SHOW TRIGGERS command, without also giving them permission to DROP TRIGGER?
Background is, I want to give certain users the ...
1
vote
2
answers
182
views
Unable to drop user due to assigned privileges?
How do you drop a user with read-only permission to PostgreSQL?
I created a user, with read-only access to all tables, on an RDS Postgres database with:
CREATE ROLE myuser WITH LOGIN PASSWORD '...
- 1,314
1
vote
0
answers
36
views
Altering the column without sysadmin or db_owner roles in published tables
I am using replication between two MS SQL Servers (2017 14.0.3421.10).
Unfortunately, when replication publishing is switched on, my user for database schema changes is not able to ALTER any columns. (...
- 111
0
votes
0
answers
21
views
Alter ownership of a table in a schema does not work
create role schema_owner;
create role table_owner;
Current signed in role is postgres
create schema test;
grant schema_owner to postgres;
grant table_owner to postgres;
alter schema test owner to ...
- 1
0
votes
0
answers
40
views
Linked server view Select query doesn't execute on production server
I've build one view. I can run sys.databases from the linked server. However, when I tried to execute the following view. It is not retrieving any data from the linked server.
USE [SSISDB]
GO
/****** ...
- 1
0
votes
1
answer
209
views
The SELECT permission was denied on the object '__EFMigrationsHistory', database 'master', schema 'dbo'
I'm trying to create asp.net core web api. (https://youtu.be/EmV_IBYIlyo?si=GcPVN7BuautDy6-j&t=1351) At the point where he executes Add-Migration InitialCreate and Update-database my console ...
0
votes
1
answer
186
views
Postgresql: Even when I grant the owner role, I can't alter tables
I have a Postgres database with a schema named foo owned by a user also named foo, which also owns all of the tables in it.
While logged in as foo, I created a user bar and granted it everything foo:
...
- 113
0
votes
0
answers
12
views
Possible to revoke default ability for all future users to connect to *any* database?
I have a lab with a database that I would like to use as a "multi-tenant" database, in that I would like to create a database for each of the applications that I'm running and segregate ...
- 101
0
votes
2
answers
54
views
How can I view permissions granted to Public
I have a schema called Lookups within a SQL Azure database.
The Public database role has SELECT permissions granted on that Schema.
But how can I see this via a query? I've spent the last couple of ...
- 115
1
vote
1
answer
78
views
Sql Server access user to database after restore
I've written this script to restore a database backup (from another server instance) and assign to a specific user an access to it. This script has run in powershell console
I've already got a valid ...
- 672
2
votes
1
answer
105
views
Can a user with db_ddladmin elevate their privileges to db_owner
I have a question about DB-level roles in SQL Server, can a user with db_ddladmin elevate their privileges to db_owner or any other role?
Thank you.
- 21
0
votes
1
answer
214
views
Postgres 15.3 fails to create new tablespace (could not set permissions)
I am unable to create new tablespaces on a fresh Postgres 15.3 installation on Ubuntu 22.04. I tried the following so far:
re-install Postgres
fully loosen file system permission
disabled SELinux
...
- 622
0
votes
2
answers
68
views
What are the Minimum Permissions to Create an MSSQL Database and Take Ownership of it?
I would like a less privileged user (KINGDOM\joker) to be able to create, manage, and drop databases on an MSSQL 2017 server [14.0.2027.2 (X64)]. KINGDOM\joker should only be able to affect the ...
1
vote
1
answer
824
views
What permissions are needed to truncate a table in PostgreSQL?
I’ve just started with a web host which supports PostgreSQL.
When setting up a database user, I have the choice of the following privileges:
■ ALTER ■ CREATE ■ DELETE
■ EXECUTE ■ DROP ■ EVENT
■ INDEX ■...
- 2,759
0
votes
1
answer
86
views
postgres - granting SELECT inside SCHEMA
I have created a database, role and schema with this script:
-- -----------------------------------------------------------------------------
-- set variables ------------------------------------------...
- 175
0
votes
1
answer
112
views
Execute Permission Denied on Stored Procedure using Microsoft JDBC Driver and Windows Authentication
I have a Microsoft SQL Server database that I use Stored Procedures to read/write data to through a Integration Engine in this case InterSystem IRIS.
Originally I was using a local server user to do ...
- 1
0
votes
1
answer
113
views
Why is the SYS user granted both the DBA role and the SYSDBA privilege?
If the SYSDBA privilege gives the grantee ultimate authority, then why does the SYS user also have the DBA role in addition to the SYSDBA privilege?
- 131
9
votes
1
answer
398
views
WITH EXECUTE AS SELF returning an error when running sys.fn_dump_dblog
I'm attempting to configure a stored procedure to EXECUTE AS a user with sysadmin privileges to allow a non-privileged user to obtain results from the undocumented TVF sys.fn_dump_dblog.
I'm creating ...
- 69.7k
0
votes
2
answers
133
views
which privileges should I grant to run the query below in a postgresql instance
I faced a task: find out minimal user permissions that I should grant to run a query:
select grantee, routine_name from information_schema.routine_privileges where routine_name in ('pg_read_file', '...
- 5
0
votes
1
answer
149
views
What is the difference between a securable and permission in SQL Server?
In Microsoft SQL Server you have the possibility to set permissions at server and database level. You are also able to select a server login or database user and then set securables. I am wondering ...
0
votes
2
answers
1k
views
Truncate tables in other schema
I have logged into a dev02 schema with a user and password and another schema dev08 with a different user/password in the Oracle database. Now from dev02, I run the command: truncate table dev08....
- 101
0
votes
1
answer
596
views
Access Denied error when running job in SQL Server Agent
Problem:
While trying to execute an exe (kept in network path) through Sql Job (type: Operatingsystem(CmdExec)) below error occurred:
Executed as user: NT Service\SQLAgent$SQL2017STD. The process ...
2
votes
1
answer
468
views
In Postgres, is an unprivileged role able to execute a function with elevated privileges?
For context, I am using:
postgREST: a thin REST client on top of Postgres (which does all the heavy lifting)
Azure AD: which handles identity and access of the organization
Since users, roles, ...
- 143
3
votes
0
answers
114
views
SQLPackage Revoking and Granting Permission on Database Roles
The Behavior
I am using Visual Studio SQL database projects to source control our azure SQL DB's. As part of the project definition, we have database roles which are managed.
When the project is ...
- 31
0
votes
1
answer
2k
views
Cannot find the object because it does not exist or you do not have permission
Trying to do a simple
GRANT EXECUTE ON OBJECT::dbo.sp_add_job TO [user]
GO
and I am getting
Msg 15151, Level 16, State 1, Line 1
Cannot find the object 'sp_add_job', because it does not exist or you ...
- 3
1
vote
1
answer
57
views
Revoke access to database from user with global permission?
Consider a user with global database access:
GRANT ALL PRIVILEGES ON *.* TO 'myuser'@'%' IDENTIFIED BY PASSWORD 'xxx' WITH GRANT OPTION
Due to legacy issues and number of databases involved, I'd like ...
- 195
0
votes
0
answers
107
views
Postgresql Large object permissions for two users
I would like two separate users of a postgresql database to have access to large objects created by the other user. I don't have control over the code being run by these users, and if it matters, that ...
- 101
0
votes
0
answers
11
views
How to restrict user from viewing certain schemas [duplicate]
I have a PostgreSQL database with one schema per user. Normally, users don't directly interact with the database, and instead, go through a web UI. However, I'd like to give one technical user ...
- 1,314
0
votes
1
answer
114
views
Inherit permissions in postgres
I currently have a group role. This group role is called team. Team currently has the permission to create databases.
I have one user that is a member of team. But that user is unable to create a ...
- 121
2
votes
1
answer
499
views
MySQL 8 Couldn't execute FLUSH TABLES Access denied
I have MySQL 8 database with a user to whom I grant ALL privileges as follows:
GRANT ALL ON test_db.* TO 'test_user'@'%';
When I login to mysql as this user and run the following command I get error ...
- 155
0
votes
1
answer
396
views
How to revoke all roles from a schema in Postgres?
How can I revoke all roles (or all roles except the creator of the schema) from a specific schema in Postgres 14?
I have an ETL process that periodically dynamically creates a Postgres schema and ...
- 151
1
vote
0
answers
63
views
PostgreSQL roles with cyclic membership
I have a PostgreSQL database that I would like to manage "like a MS SQL Server" database but only for authorized people. There are a few "business tables" to which they should have ...
0
votes
0
answers
312
views
How to check if the current user has the permission to create a database view in MySQL?
I want to check if CURRENT_USER() has the permission to create a VIEW on a certain MySQL database xyz.
To do so, I run
SHOW GRANTS FOR CURRENT_USER()
Depending on how the grants are set, the output ...
- 101
0
votes
3
answers
686
views
Is there a privilege in Oracle that lets a user view the objects in another schema?
Is there a privilege in Oracle that lets a user view or not view the list of objects in another schema?
I've got a user where I've given them select rights to a view in another user's schema. However, ...
- 164
0
votes
1
answer
605
views
MariaDB privileges for "SHOW DATABASES" vs "SELECT * FROM information_schema"
I have a user with an access to several databases.
In MariaDB 10.6.11 I cannot use the following command to list all accessible databases:
SHOW DATABASES;
/* SQL Error (1227): Access denied; you need (...
- 23
0
votes
0
answers
56
views
How to avoid new users to be able to access old and new databases in postgresql?
I am trying this query:
ALTER DEFAULT PRIVILEGES IN SCHEMA public;
REVOKE CONNECT ON DATABASE FROM PUBLIC;
but I am unable to make it work in PostgreSQL.
My goal is to avoid new users to be able to ...
- 1
2
votes
1
answer
40
views
SYSCTRL like role in PostgreSQL
I want to set up a workflow, where a third party (still within the org) grants accesses to our database by granting to a role that has the select or update access to the tables. I would also want this ...
- 21
2
votes
1
answer
71
views
Drop privileges for the current connection in MSSQL
Is it possible to actively remove some permissions only for the current connection to the database?
There is a database user with all permissions to its dababase, which sometimes is necessary (schema ...
- 121