Questions tagged [permissions]

Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

Filter by
Sorted by
Tagged with
2 votes
1 answer
292 views

In Postgres, can an isolation level be set as mandatory?

At https://wiki.postgresql.org/wiki/Serializable#PostgreSQL_Implementation, it says Any transaction which is run at a transaction isolation level other than SERIALIZABLE will not be affected by SSI. ...
Andrew's user avatar
  • 123
1 vote
1 answer
73 views

Module signing on a trigger which accesses system views. Base table is on a custom schema

Some background: Question is follow up of this question: Is there a way in SQL Server to make a table only able to insert by trigger? I'm trying to achieve what the answer to the original question ...
Stackoverflowuser's user avatar
0 votes
2 answers
45 views

SQL Account cannot access file system

I have an issue with a service account that is used to import several files on its D: drive. In the past SA was used for this process, but of course it needed to be replaced by a service account. So I'...
El_Macho84's user avatar
0 votes
1 answer
21 views

How to COPY table privileges dba_sys_privs into different table in Oracle

i want to copy table privileges dba_sys_privs in table A to new table B. i have create table B. What left now was it's table privileges'. Kindly advice. Thanks
Ahmad Hasanul Ishraf Shuib's user avatar
0 votes
1 answer
19 views

MS SQL - Minimum Permissions to View Sensitivity Classifications

I'd like to provide some user groups access to view Sensitivity Classifications. Currently it returns blank results in the reports tool, or directly querying sys.sensitivity_classifications table. ...
mcswiggen's user avatar
0 votes
0 answers
85 views

Cause of Cannot execute as the server principal because the principal "MyUser" does not exist'

I have two databases on the same server, lets call them DB1 and DB2. There is a login on the server called MyUser, and both databases have a user setup from that login, also called MyUser [edit: and ...
monty's user avatar
  • 101
2 votes
1 answer
48 views

Problems getting SQL Server linked server to work in web-based admin utility on Windows Server 2022

I have an ASP classic web application based on an SQL Server database, with an admin component. The database has a linked server with Microsoft.ACE.OLEDB.12.0 provider to allow bulk import of records ...
user1207313's user avatar
0 votes
0 answers
13 views

SQL Agent job step update permissions

I have a non-sysadmin user whose ID (Windows login) is set as owner on a set of SQL Agent jobs. The user also has the SQLAgentReader role in MSDB. The user can see the Agent node in SSMS, can view ...
AardvDbDev's user avatar
0 votes
1 answer
61 views

Can't revoke permissions on Redshift

I'm having a issue revoking privileges that is stopping me from droping users select usename, acl.* from pg_default_acl as acl join pg_user on usesysid = defacluser where usename = 'user1'; gives me: ...
Alejandro's user avatar
  • 113
1 vote
0 answers
29 views

Why can't grant privileges to a role?

I created a role and set privileges to tables, then created a user and grant the role to it by postgres user. After the user login database, it can't select any tables at all. CREATE ROLE readonly; ...
Alpin Cleopatra's user avatar
1 vote
0 answers
35 views

Error 1216, not 1451, despite reference privilege on MySQL 8

MySQL 8.0.34 Limited-privilege users see less verbose errors (1216/1217) per the design intent. I've granted reference privileges, as suggested here, in an attempt to show more verbose errors (1451/...
Chris Broz's user avatar
1 vote
1 answer
31 views

Why does a user use owner privileges when executing a trigger?

I came across a strange situation that gave me a big headache and after solving it I would also like to understand WHY. Basically, a user had all the privileges he needed to execute a "trigger&...
Sotis's user avatar
  • 296
1 vote
0 answers
55 views

Which user executes Postgres RLS policies (CURRENT_USER vs VIEW owner)?

Postgres seems to have some weird semantics around which user is actually invoking check functions defined in RLS policies. Specifically, if the check function is SECURITY INVOKER, it appears that the ...
colophonemes's user avatar
1 vote
0 answers
40 views

Balancing Legacy CRM Needs and Security in Multiple Databases

I have a set of databases on a server. Database_alpha Database_beta Database_gamma Database_delta Database_alpha houses a legacy CRM system which has an inbuilt dependency on the sa account to ...
betelgeuce's user avatar
1 vote
1 answer
145 views

postgresql: why owner of table is unable to select from it?

In postgresql documentation on GRANT option it is written: There is no need to grant privileges to the owner of an object (usually the user that created it), as the owner has all privileges by ...
pva's user avatar
  • 113
0 votes
1 answer
61 views

How to prevent an existing role being given permissions on a new database?

I'm fairly new to postgres permissions. I'm working with a postgres server to add/remove databases to it as part of a workflow. Each database needs to have a role associated with it that can do ...
adrianbanks's user avatar
-1 votes
2 answers
73 views

readonly user on PostgreSQL 14 let me create new tables, why?

I try to apply any of these to create read_only_user: https://docs.snaplet.dev/guides/postgresql https://www.commandprompt.com/education/how-to-create-a-read-only-user-in-postgresql/#:~:text=...
Eric Ouellet's user avatar
0 votes
0 answers
30 views

SSIS - "Access to the path '\\XXX\data2\TXX\zz\Tracker - xx.xlsx' is denied."

SSIS error: Recently the following error "Access to the path '\XXX\data2\TXX\zz\Tracker - xx.xlsx' is denied.". i occurring. The SSIS package is executed through SQL Agent using a Domain ...
mah's user avatar
  • 1
1 vote
0 answers
18 views

How to securely limit columns in postgres logical replication?

The docs currently have this to say about publications with specified column lists: The choice of columns can be based on behavioral or performance reasons. However, do not rely on this feature for ...
Felipe's user avatar
  • 293
0 votes
0 answers
12 views

Launch RDBMS Client GUIs from Delinea

I am using the delinea permission access management tool that I pointed to the application file of SSMS and it could launch my desired server instance with the secret server credentials configured on ...
franklwambo19's user avatar
0 votes
1 answer
814 views

Grant VIEW DATABASE STATE on master DB

I am asked to provide access to VIEW DATABASE STATE in the master DB of an Azure SQL Server instance (Premium P6) to an external user (vendor) in order some investigation to be done. When run "...
Pavel's user avatar
  • 1
1 vote
1 answer
36 views

SAGE ODBC driver - minimum required folder permisions

I have a website which I want to connect to SAGE ACCDATA folder (which resides on a different server but same network to the intranet server) using their proprietary ODBC driver. For security purposes ...
BLoB's user avatar
  • 153
0 votes
1 answer
74 views

How is SQL server engine account able to access disk drive folder without permission?

I have recently changed the SQL engine account to mydomain\sqlengine. This evening I setup SQL audit into F:\audits. I'm surprised to see the SQL server is able to create a file in this folder without ...
variable's user avatar
  • 3,541
0 votes
0 answers
10 views

Schedule group disable write - with custom error

I'm looking for a good solution to what seems to be a simple problem. I need to disable a user group from writing to any number of tables on a schedule - let say Saturday between 0600 and 1200. I'd ...
SmittyBoy's user avatar
  • 101
1 vote
1 answer
35 views

SHOW TRIGGERS privilege without also being able to DROP TRIGGER?

Is it possible to give a user privilege to view Triggers, i.e. execute the SHOW TRIGGERS command, without also giving them permission to DROP TRIGGER? Background is, I want to give certain users the ...
BrokenPhysics's user avatar
2 votes
2 answers
449 views

Unable to drop user due to assigned privileges?

How do you drop a user with read-only permission to PostgreSQL? I created a user, with read-only access to all tables, on an RDS Postgres database with: CREATE ROLE myuser WITH LOGIN PASSWORD '...
Cerin's user avatar
  • 1,345
1 vote
0 answers
60 views

Altering the column without sysadmin or db_owner roles in published tables

I am using replication between two MS SQL Servers (2017 14.0.3421.10). Unfortunately, when replication publishing is switched on, my user for database schema changes is not able to ALTER any columns. (...
Dex's user avatar
  • 111
0 votes
0 answers
39 views

Alter ownership of a table in a schema does not work

create role schema_owner; create role table_owner; Current signed in role is postgres create schema test; grant schema_owner to postgres; grant table_owner to postgres; alter schema test owner to ...
armchair's user avatar
0 votes
0 answers
43 views

Linked server view Select query doesn't execute on production server

I've build one view. I can run sys.databases from the linked server. However, when I tried to execute the following view. It is not retrieving any data from the linked server. USE [SSISDB] GO /****** ...
James's user avatar
  • 1
0 votes
1 answer
522 views

The SELECT permission was denied on the object '__EFMigrationsHistory', database 'master', schema 'dbo'

I'm trying to create asp.net core web api. (https://youtu.be/EmV_IBYIlyo?si=GcPVN7BuautDy6-j&t=1351) At the point where he executes Add-Migration InitialCreate and Update-database my console ...
Lukas Čaplikas's user avatar
0 votes
1 answer
767 views

Postgresql: Even when I grant the owner role, I can't alter tables

I have a Postgres database with a schema named foo owned by a user also named foo, which also owns all of the tables in it. While logged in as foo, I created a user bar and granted it everything foo: ...
Isaac Moses's user avatar
0 votes
0 answers
21 views

Possible to revoke default ability for all future users to connect to *any* database?

I have a lab with a database that I would like to use as a "multi-tenant" database, in that I would like to create a database for each of the applications that I'm running and segregate ...
eriknelson's user avatar
0 votes
2 answers
89 views

How can I view permissions granted to Public

I have a schema called Lookups within a SQL Azure database. The Public database role has SELECT permissions granted on that Schema. But how can I see this via a query? I've spent the last couple of ...
Andrew Richards's user avatar
1 vote
1 answer
110 views

Sql Server access user to database after restore

I've written this script to restore a database backup (from another server instance) and assign to a specific user an access to it. This script has run in powershell console I've already got a valid ...
Joe Taras's user avatar
  • 672
2 votes
1 answer
129 views

Can a user with db_ddladmin elevate their privileges to db_owner

I have a question about DB-level roles in SQL Server, can a user with db_ddladmin elevate their privileges to db_owner or any other role? Thank you.
Layan's user avatar
  • 21
0 votes
1 answer
392 views

Postgres 15.3 fails to create new tablespace (could not set permissions)

I am unable to create new tablespaces on a fresh Postgres 15.3 installation on Ubuntu 22.04. I tried the following so far: re-install Postgres fully loosen file system permission disabled SELinux ...
Luís de Sousa's user avatar
0 votes
2 answers
103 views

What are the Minimum Permissions to Create an MSSQL Database and Take Ownership of it?

I would like a less privileged user (KINGDOM\joker) to be able to create, manage, and drop databases on an MSSQL 2017 server [14.0.2027.2 (X64)]. KINGDOM\joker should only be able to affect the ...
Anthony Ciani's user avatar
1 vote
1 answer
1k views

What permissions are needed to truncate a table in PostgreSQL?

I’ve just started with a web host which supports PostgreSQL. When setting up a database user, I have the choice of the following privileges: ■ ALTER ■ CREATE ■ DELETE ■ EXECUTE ■ DROP ■ EVENT ■ INDEX ■...
Manngo's user avatar
  • 2,809
0 votes
1 answer
130 views

postgres - granting SELECT inside SCHEMA

I have created a database, role and schema with this script: -- ----------------------------------------------------------------------------- -- set variables ------------------------------------------...
vrms's user avatar
  • 175
0 votes
1 answer
230 views

Execute Permission Denied on Stored Procedure using Microsoft JDBC Driver and Windows Authentication

I have a Microsoft SQL Server database that I use Stored Procedures to read/write data to through a Integration Engine in this case InterSystem IRIS. Originally I was using a local server user to do ...
sroth79's user avatar
0 votes
1 answer
180 views

Why is the SYS user granted both the DBA role and the SYSDBA privilege?

If the SYSDBA privilege gives the grantee ultimate authority, then why does the SYS user also have the DBA role in addition to the SYSDBA privilege?
Mehdi Charife's user avatar
9 votes
1 answer
465 views

WITH EXECUTE AS SELF returning an error when running sys.fn_dump_dblog

I'm attempting to configure a stored procedure to EXECUTE AS a user with sysadmin privileges to allow a non-privileged user to obtain results from the undocumented TVF sys.fn_dump_dblog. I'm creating ...
Hannah Vernon's user avatar
  • 70k
0 votes
2 answers
172 views

which privileges should I grant to run the query below in a postgresql instance

I faced a task: find out minimal user permissions that I should grant to run a query: select grantee, routine_name from information_schema.routine_privileges where routine_name in ('pg_read_file', '...
Gregor76's user avatar
1 vote
1 answer
214 views

What is the difference between a securable and permission in SQL Server?

In Microsoft SQL Server you have the possibility to set permissions at server and database level. You are also able to select a server login or database user and then set securables. I am wondering ...
Jacob Gomez Hansen's user avatar
0 votes
2 answers
2k views

Truncate tables in other schema

I have logged into a dev02 schema with a user and password and another schema dev08 with a different user/password in the Oracle database. Now from dev02, I run the command: truncate table dev08....
nicku's user avatar
  • 101
0 votes
1 answer
718 views

Access Denied error when running job in SQL Server Agent

Problem: While trying to execute an exe (kept in network path) through Sql Job (type: Operatingsystem(CmdExec)) below error occurred: Executed as user: NT Service\SQLAgent$SQL2017STD. The process ...
IT Researcher143's user avatar
2 votes
1 answer
775 views

In Postgres, is an unprivileged role able to execute a function with elevated privileges?

For context, I am using: postgREST: a thin REST client on top of Postgres (which does all the heavy lifting) Azure AD: which handles identity and access of the organization Since users, roles, ...
dnk8n's user avatar
  • 143
3 votes
0 answers
141 views

SQLPackage Revoking and Granting Permission on Database Roles

The Behavior I am using Visual Studio SQL database projects to source control our azure SQL DB's. As part of the project definition, we have database roles which are managed. When the project is ...
rustayscot's user avatar
0 votes
1 answer
3k views

Cannot find the object because it does not exist or you do not have permission

Trying to do a simple GRANT EXECUTE ON OBJECT::dbo.sp_add_job TO [user] GO and I am getting Msg 15151, Level 16, State 1, Line 1 Cannot find the object 'sp_add_job', because it does not exist or you ...
cj_kai's user avatar
  • 3
1 vote
1 answer
65 views

Revoke access to database from user with global permission?

Consider a user with global database access: GRANT ALL PRIVILEGES ON *.* TO 'myuser'@'%' IDENTIFIED BY PASSWORD 'xxx' WITH GRANT OPTION Due to legacy issues and number of databases involved, I'd like ...
chell's user avatar
  • 195

1
2 3 4 5
32