Questions tagged [permissions]

Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

212 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6
votes
1answer
219 views

Select permission denied when using linked server in a function unless inlining is off

We are encountering an unusual error in our beta environment after upgrading to SQL Server 2019. This occurs when selecting from a scalar-valued function. This error does not occur in our production ...
5
votes
2answers
25k views

The INSERT/UPDATE/DELETE permission was denied on the object 'TheTable', database 'TheDb', schema 'dbo'

I have two SQL Server user accounts on a database that behave differently on INSERT / UPDATE / DELETE. SQL Server version is 2008 R2 (10.50.4042, 64 bits). UserA can do these commands (on any table). ...
4
votes
0answers
66 views

how to remove all permissions in a database?

every time I need to either restore a database or reinitialize a replication publication I first (on the restored to be or subscription database) I script all the permissions, triggers, indexes, ...
4
votes
2answers
58 views

Snooping-safe Vote tables

I have a table with both user_id and vote. They are stored together so each user can only give one vote. However it's also problematic because admins can simply read who voted what. Is there a way to ...
4
votes
0answers
714 views

User can create in SSRS, but can't manage objects

We have a user who can create, but is unable to manage objects in SSRS, even though he has content manager permissions and another user who has same permissions who is able to. It is SSRS 2008 R2, ...
4
votes
0answers
3k views

Once more about SQL Server virtual accounts

Let me reboot my question on SQL Server virtual accounts permissions The (same) MSDN article on the same version 2012 of SQL Server "Configure Windows Service Accounts and Permissions" ...
3
votes
1answer
59 views

Ownership of SQL Server Files, Register Entries & Executables

I'm working on a database server hardening project for a client of mine. I'm getting into ownership issues when it comes to the following: .mdf & .ldf executables HKEY--> tree from ...
3
votes
0answers
272 views

How to set minimal permissions to change SQL Azure Firewall rules

I have a desktop app that connects to SQL Azure database. Some users have dynamic IP addresses, and it is not possible to get them to use fixed addresses. I've written an ASP.NET page hosted on the ...
3
votes
0answers
4k views

view server state permission was denied

The strangest thing is happening on my SQL Server Management Studio. When I right-click any table, I get a "VIEW SERVER STATE permission was denied on object 'server', database 'master'. (.Net ...
2
votes
2answers
54 views

Permission hierarchy vs. WITH GRANT OPTION

I have an Azure SQL database with this security setup: SchemaUpdater user with db_ddladmin, db_datawriter, and db_datareader roles. The user is used to execute database change scripts during ...
2
votes
0answers
77 views

Error in ALTER DEFAULT PRIVILEGES

I'm trying to create a new user in AWS Aurora Postgres DB. Create user worked fine and I can login to the DB using that account. granting permissions to it isn't. First: GRANT ALL on ALL tables in ...
2
votes
0answers
93 views

BulkAdmin Role Doesn't Work

There is a query that our BI team use. They can not execute the query because of the error below. Ad hoc access to ole db provider 'MSDASQL' has been denied. You must access this provider ...
2
votes
0answers
68 views

How to reassign all privileges to another role in PostgreSQL?

​On an existing PostgreSQL server let say that I have two users "Alice" & "Bob" and I want to clean up my policy because they actually have the same job and should have exactly the same privileges ...
2
votes
0answers
263 views

Grant Privileges on Production Database Throws “Error: tuple concurrently updated”

I would like to grant read access to all tables in my schema GRANT SELECT ON ALL TABLES IN SCHEMA public TO XXX; While it works on our alpha environment, it fails with our production database: [...
2
votes
1answer
155 views

SQL statement to hide all system databases in Server from a server login

I want to create a Windows authentication server login and make it cannot see any system databases e.g.master, model. I know that we can control view definition in database level e.g. database user, ...
2
votes
0answers
173 views

Just one Active Directory group will not sync to SQL Server

Modifying the Active Directory group membership for a particular user propagates to our SQL Server instances as expected — except when one specific group is added. What is causing this issue, ...
2
votes
0answers
2k views

ORA-01031: insufficient privileges solution oracle

Create or replace procedure myprocedure is stmt varchar2(1000); stmt2 varchar2(1000); begin stmt := 'create global temporary table temp(id number(10))'; execute immediate stmt; ...
2
votes
0answers
685 views

PostgreSQL: why altering default privileges in specific schema to revoke all privileges on types from PUBLIC does nothing?

The question can pretty much translate into: why the following PostgreSQL command does nothing? ALTER DEFAULT PRIVILEGES FOR ROLE ownerrole IN SCHEMA myschema REVOKE ALL PRIVILEGES ON ...
2
votes
0answers
2k views

How can I grant permissions on tables created in the future to members of a particular role?

I would like to create a role which will be granted to several individual users. This role should have full permissions on all tables, sequences, functions, etc. in a specified schema. When new tables,...
2
votes
0answers
2k views

Ran “Grant all privileges” but still getting “permission denied for relation”

I'm using PostGres 9.5. I'm confused about how to grant all privileges to a user for a particular database. I thought this would do the trick postgres=# GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA ...
2
votes
0answers
387 views

AD User does not inherit the permission from AD Group - for a LOGIN

I am having a very tough time figuring out the permissions in my database. My users gain access to the database through reports on SharePoint (via Impersonated authentication configured through ...
2
votes
1answer
69 views

How to copy part of a database with inconsistent privileges?

I have a Postgres database and I would like to copy certain tables from a single schema into a new empty database. So far I have copied a schema-only dump from from the old DB and applied it to a ...
2
votes
0answers
181 views

SQL Agent AD account gets permission denied for ODBC connections in SSIS packages

We have an AD account specifically created for the agent service and when running SSIS packages that connect to databases we get permission denied even though we have granted that account access to ...
2
votes
1answer
148 views

Difference of write authorization on file system with mySQL

On my local mySQL (on CentOS 6 VM) database I wanted to export some data from the DB to a file like this: SELECT html FROM mytable WHERE lang = 'en' and id='KEY01' INTO OUTFILE 'key01_en.html' By ...
2
votes
0answers
4k views

'oracle.jdbc.driver.OracleSQLException': ORA-01031: insufficient privileges. (SYS.DBMS_XMLSAVE)

I have this function (written here by someone), placed in the package ENVER.ENCODING_VERIFIER: FUNCTION loadxml_table (p_owner IN VARCHAR2, p_tablename IN VARCHAR2, p_format IN VARCHAR2, p_tmpClob IN ...
2
votes
0answers
190 views

How to give permissions to 90+ SQL Servers without tweaking in each of them?

There are over 90+ MS SQL Servers (SQL Server 2005, 2008 and 2012). All in the same Windows domain (but physically all over the world). How to give a domain user (administrative, or other) access/...
2
votes
0answers
742 views

Allow developers to run database maintenance

We use the database solution by Ola Hallengren. We're trying to give our developers a way to run the maintenance stored procedures after they do an ETL. Our developers have locked down permissions. We'...
1
vote
1answer
19 views

Grant privileges to all users on a single table

Is it possible to grant privileges (such as SELECT, INSERT, UPDATE, etc) to all the users for a specific table at the same time? Here is what I tried but it didn't work out... GRANT SELECT ON ...
1
vote
1answer
46 views

Database model with Users, Resources, Permissions

I am fairly new to the DB design. I need to handle what a user can do on a specific resource. One of the main queries I need to drive is: Get all the cars a user has write permission to. I think ...
1
vote
1answer
157 views

Changing the login name for user dbo

I have a database where the owner is Login1 but the username dbo is assigned to Login - login2. I understand in order to change the login name for the username dbo to sa I will have to use the below ...
1
vote
0answers
44 views

If a Login is not granted the db_ddladmin role on a database, but is individually granted CREATE VIEW on it, will they still be denied?

Since SQL Server permissions work as "deny first", I was wondering if that applies downward to individual permissions that are granted, if the parent permission isn't granted e.g. db_ddladmin is not ...
1
vote
2answers
33 views

GRANT permission ON database TO user not working on AWS

I'm having trouble granting a user permission on AWS. mysql> GRANT CREATE ON *.* TO 'hmrex_db'@'%'; Query OK, 0 rows affected (0.01 sec) mysql> SHOW GRANTS FOR 'hmrex_db'@'%'; +----------------...
1
vote
0answers
606 views

mongodb keyfile permission denied

I configured in /etc/mongod.conf to enforce keyfile access control, in security option enabled, keyFile is /root/dbtest.key (the absolute path of keyfile). I already gave the ownership to mongodb user ...
1
vote
0answers
237 views

MongoDB Fails due to permission error even though its setup

Attempting to start my MongoDB server using service mongod start fails for the reason: exception in initAndListen: IllegalOperation: Attempted to create a lock file on a read-only directory: /var/lib/...
1
vote
2answers
147 views

postgresql 9.* - user cannot SELECT from VIEW inside a SCHEMA as DEFAULT PRIVILEGE

hope you can help me. I have 3 users First is me, the db admin. I run the GRANT queries, I can do anything. (name doesn't matter now) Second is the data manager user. = manager_u Third is the data ...
1
vote
0answers
78 views

How to change permissions of Oracle generated logs?

The oracle generated logs (ie. alert and listener logs) are being created with 600 permissions. These files are of course created automatically by the oracle user. How would I change the permissions ...
1
vote
0answers
85 views

Dumping Postgres schema from Google cloud SQL

Now this may look trivial but it is a managed service so I don't have the superuser rights. And various schema/tables/sequences have different roles/users as their owners so I can't just use pg_dump ...
1
vote
0answers
27 views

PostgreSQL permissions

I'm trying to achieve a simple architecture: An organization has many users A user belongs to many organizations A user can connect A user can join and leave an organization A user can read-only ...
1
vote
1answer
69 views

Giving access to only one SQL Agent Job

I need to allow a user only to execute a specific Agent job, rather than be able to execute the other jobs that are there . Please advise how to accomplish this. This user will only run a copy only ...
1
vote
0answers
848 views

Grant permissions over linked server

I need to grant select permissions to a sensitive table over the linked server. This table should only grant access to members of an AD group. I currently have other linked servers set up with remote ...
1
vote
0answers
28 views

virtual MySql server with mounted RAID array

I have a Ubuntu 16.04 server with an 18TB RAID array. I am running virtual servers on the server using Wok/Kimchi and am wondering if it is reasonable to run a MySQL virtual server and set the data ...
1
vote
0answers
219 views

Granting access control on specific columns in PostgreSQL

The following screenshot is from an online learning platform I am using to learn SQL (more specifically PostgreSQL). I am concerned that I'm not understanding the following paragraph correctly. It ...
1
vote
0answers
52 views

Create a postgres user role that can't access a specific table

I have a postgres 9.6 database with many tables. I need to create a role that doesn't have access to one of these tables. I think I need to do a Grant Permissions, but I haven't been able to find ...
1
vote
2answers
5k views

The EXECUTE permission was denied on the object 'SPROC', database 'DATABASE', schema 'dbo'

I have a few users that are unexpectedly receiving this error message today when they attempt to refresh a stored procedure via Excel: The EXECUTE permission was denied on the object 'SPROC', ...
1
vote
1answer
710 views

Mysql preventing truncate and drop table statements for a specific table

I have a MySQL table that serves as an immutable event store. I added triggers to prevent rows from being updated or deleted; CREATE TABLE t2 ( str VARCHAR(32), ts TIMESTAMP(6) DEFAULT ...
1
vote
1answer
32 views

DB user restricted permissions vs Docker?

As far as I know, it's usually considered a good practice when developing websites to store in website config DB credentials of the user without ALTER/DROP permissions (so user may only select, insert,...
1
vote
1answer
18 views

Permission errors on insert after schema drop/create (Pg 9.0.23)

We have a web application that allows users to modify data through an API. In order to allow people to run tests, we provide a sandbox area called 'daily'. This sandbox gets refreshed every day from ...
1
vote
0answers
54 views

Pros and cons of setting super admin in users table

I'm structuring a RBAC in a Web system. My database tables looks like: actions id name resources id name permissions id action_id resource_id roles id name permission_role permission_id ...
1
vote
0answers
26 views

Is it possible to `REVOKE` all privileges from all members from previous `GRANT`s?

Let's say I grant a privilege to "user_a", "user_b", "user_c". Is it possible to REVOKE from all users in previous grants, but without specifying them explicitly? Something like this: REVOKE ALL ...
1
vote
1answer
6k views

How to assign privileges on a postgresql schema to a user?

pg_hba.conf contains: ... host 10.10.10.10 service_db admin md5 ... Logged in as root, executed the following commands: ###CREATE DB ADMIN sudo -u postgres psql -p 5432 -d postgres -c "CREATE USER '...

1
2 3 4 5