Questions tagged [permissions]

Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.

184 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
2answers
20k views

The INSERT/UPDATE/DELETE permission was denied on the object 'TheTable', database 'TheDb', schema 'dbo'

I have two SQL Server user accounts on a database that behave differently on INSERT / UPDATE / DELETE. SQL Server version is 2008 R2 (10.50.4042, 64 bits). UserA can do these commands (on any table). ...
4
votes
2answers
58 views

Snooping-safe Vote tables

I have a table with both user_id and vote. They are stored together so each user can only give one vote. However it's also problematic because admins can simply read who voted what. Is there a way to ...
4
votes
0answers
3k views

Once more about SQL Server virtual accounts

Let me reboot my question on SQL Server virtual accounts permissions The (same) MSDN article on the same version 2012 of SQL Server "Configure Windows Service Accounts and Permissions" states in "...
3
votes
1answer
58 views

Ownership of SQL Server Files, Register Entries & Executables

I'm working on a database server hardening project for a client of mine. I'm getting into ownership issues when it comes to the following: .mdf & .ldf executables HKEY--> tree from ...
3
votes
0answers
241 views

How to set minimal permissions to change SQL Azure Firewall rules

I have a desktop app that connects to SQL Azure database. Some users have dynamic IP addresses, and it is not possible to get them to use fixed addresses. I've written an ASP.NET page hosted on the ...
3
votes
0answers
4k views

view server state permission was denied

The strangest thing is happening on my SQL Server Management Studio. When I right-click any table, I get a "VIEW SERVER STATE permission was denied on object 'server', database 'master'. (.Net ...
3
votes
0answers
702 views

User can create in SSRS, but can't manage objects

We have a user who can create, but is unable to manage objects in SSRS, even though he has content manager permissions and another user who has same permissions who is able to. It is SSRS 2008 R2, ...
2
votes
2answers
44 views

Permission hierarchy vs. WITH GRANT OPTION

I have an Azure SQL database with this security setup: SchemaUpdater user with db_ddladmin, db_datawriter, and db_datareader roles. The user is used to execute database change scripts during ...
2
votes
0answers
41 views

Error in ALTER DEFAULT PRIVILEGES

I'm trying to create a new user in AWS Aurora Postgres DB. Create user worked fine and I can login to the DB using that account. granting permissions to it isn't. First: GRANT ALL on ALL tables in ...
2
votes
0answers
77 views

BulkAdmin Role Doesn't Work

There is a query that our BI team use. They can not execute the query because of the error below. Ad hoc access to ole db provider 'MSDASQL' has been denied. You must access this provider ...
2
votes
0answers
56 views

How to reassign all privileges to another role in PostgreSQL?

​On an existing PostgreSQL server let say that I have two users "Alice" & "Bob" and I want to clean up my policy because they actually have the same job and should have exactly the same privileges ...
2
votes
1answer
107 views

SQL statement to hide all system databases in Server from a server login

I want to create a Windows authentication server login and make it cannot see any system databases e.g.master, model. I know that we can control view definition in database level e.g. database user, ...
2
votes
0answers
147 views

Just one Active Directory group will not sync to SQL Server

Modifying the Active Directory group membership for a particular user propagates to our SQL Server instances as expected — except when one specific group is added. What is causing this issue, ...
2
votes
0answers
2k views

ORA-01031: insufficient privileges solution oracle

Create or replace procedure myprocedure is stmt varchar2(1000); stmt2 varchar2(1000); begin stmt := 'create global temporary table temp(id number(10))'; execute immediate stmt; ...
2
votes
0answers
592 views

PostgreSQL: why altering default privileges in specific schema to revoke all privileges on types from PUBLIC does nothing?

The question can pretty much translate into: why the following PostgreSQL command does nothing? ALTER DEFAULT PRIVILEGES FOR ROLE ownerrole IN SCHEMA myschema REVOKE ALL PRIVILEGES ON ...
2
votes
0answers
2k views

Ran “Grant all privileges” but still getting “permission denied for relation”

I'm using PostGres 9.5. I'm confused about how to grant all privileges to a user for a particular database. I thought this would do the trick postgres=# GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA ...
2
votes
1answer
742 views

Permissions for SSIS/SQL Server agent jobs for multiple user groups

What permissions should I use for Active Directory groups to be able to deploy and then run/schedule their own jobs only? For example, I have 3 folders in the Integration Services catalog. Dept_A, ...
2
votes
1answer
154 views

Cross database reference select access with disabled login for DB user

We have two databases (DB1, DB2) with the following view structure. DB1: T1, T2, T3, ..... Tn (Tables) V1 (View consuming {T1, T2, T3 ..... Tn }) Inside DB2 we have to create a view V2 which will ...
2
votes
0answers
370 views

AD User does not inherit the permission from AD Group - for a LOGIN

I am having a very tough time figuring out the permissions in my database. My users gain access to the database through reports on SharePoint (via Impersonated authentication configured through ...
2
votes
1answer
138 views

Maria/MySQL Possible to allow user to GRANT drop though not use DROP?

I'm setting up an SQL user (setup process for new websites) which will need to GRANT the DROP command to another user (admin user (for authenticated admins), not the public-facing user) though is ...
2
votes
1answer
68 views

How to copy part of a database with inconsistent privileges?

I have a Postgres database and I would like to copy certain tables from a single schema into a new empty database. So far I have copied a schema-only dump from from the old DB and applied it to a ...
2
votes
0answers
173 views

SQL Agent AD account gets permission denied for ODBC connections in SSIS packages

We have an AD account specifically created for the agent service and when running SSIS packages that connect to databases we get permission denied even though we have granted that account access to ...
2
votes
1answer
141 views

Difference of write authorization on file system with mySQL

On my local mySQL (on CentOS 6 VM) database I wanted to export some data from the DB to a file like this: SELECT html FROM mytable WHERE lang = 'en' and id='KEY01' INTO OUTFILE 'key01_en.html' By ...
2
votes
0answers
4k views

'oracle.jdbc.driver.OracleSQLException': ORA-01031: insufficient privileges. (SYS.DBMS_XMLSAVE)

I have this function (written here by someone), placed in the package ENVER.ENCODING_VERIFIER: FUNCTION loadxml_table (p_owner IN VARCHAR2, p_tablename IN VARCHAR2, p_format IN VARCHAR2, p_tmpClob IN ...
2
votes
0answers
189 views

How to give permissions to 90+ SQL Servers without tweaking in each of them?

There are over 90+ MS SQL Servers (SQL Server 2005, 2008 and 2012). All in the same Windows domain (but physically all over the world). How to give a domain user (administrative, or other) access/...
2
votes
0answers
728 views

Allow developers to run database maintenance

We use the database solution by Ola Hallengren. We're trying to give our developers a way to run the maintenance stored procedures after they do an ETL. Our developers have locked down permissions. We'...
1
vote
0answers
39 views

If a Login is not granted the db_ddladmin role on a database, but is individually granted CREATE VIEW on it, will they still be denied?

Since SQL Server permissions work as "deny first", I was wondering if that applies downward to individual permissions that are granted, if the parent permission isn't granted e.g. db_ddladmin is not ...
1
vote
2answers
84 views

SSMS login by external developers

This is my first question so please bear with me ! We have an external company whose developers need to login into an instance on our on-premise SQL Server 2016. They have AD logins, and these are ...
1
vote
2answers
24 views

GRANT permission ON database TO user not working on AWS

I'm having trouble granting a user permission on AWS. mysql> GRANT CREATE ON *.* TO 'hmrex_db'@'%'; Query OK, 0 rows affected (0.01 sec) mysql> SHOW GRANTS FOR 'hmrex_db'@'%'; +----------------...
1
vote
0answers
130 views

Grant Privileges on Production Database Throws “Error: tuple concurrently updated”

I would like to grant read access to all tables in my schema GRANT SELECT ON ALL TABLES IN SCHEMA public TO XXX; While it works on our alpha environment, it fails with our production database: [...
1
vote
0answers
122 views

MongoDB Fails due to permission error even though its setup

Attempting to start my MongoDB server using service mongod start fails for the reason: exception in initAndListen: IllegalOperation: Attempted to create a lock file on a read-only directory: /var/lib/...
1
vote
2answers
43 views

postgresql 9.* - user cannot SELECT from VIEW inside a SCHEMA as DEFAULT PRIVILEGE

hope you can help me. I have 3 users First is me, the db admin. I run the GRANT queries, I can do anything. (name doesn't matter now) Second is the data manager user. = manager_u Third is the data ...
1
vote
0answers
68 views

How to change permissions of Oracle generated logs?

The oracle generated logs (ie. alert and listener logs) are being created with 600 permissions. These files are of course created automatically by the oracle user. How would I change the permissions ...
1
vote
0answers
56 views

Dumping Postgres schema from Google cloud SQL

Now this may look trivial but it is a managed service so I don't have the superuser rights. And various schema/tables/sequences have different roles/users as their owners so I can't just use pg_dump ...
1
vote
0answers
27 views

PostgreSQL permissions

I'm trying to achieve a simple architecture: An organization has many users A user belongs to many organizations A user can connect A user can join and leave an organization A user can read-only ...
1
vote
1answer
66 views

Giving access to only one SQL Agent Job

I need to allow a user only to execute a specific Agent job, rather than be able to execute the other jobs that are there . Please advise how to accomplish this. This user will only run a copy only ...
1
vote
0answers
642 views

Grant permissions over linked server

I need to grant select permissions to a sensitive table over the linked server. This table should only grant access to members of an AD group. I currently have other linked servers set up with remote ...
1
vote
0answers
22 views

virtual MySql server with mounted RAID array

I have a Ubuntu 16.04 server with an 18TB RAID array. I am running virtual servers on the server using Wok/Kimchi and am wondering if it is reasonable to run a MySQL virtual server and set the data ...
1
vote
0answers
106 views

Granting access control on specific columns in PostgreSQL

The following screenshot is from an online learning platform I am using to learn SQL (more specifically PostgreSQL). I am concerned that I'm not understanding the following paragraph correctly. It ...
1
vote
0answers
52 views

Create a postgres user role that can't access a specific table

I have a postgres 9.6 database with many tables. I need to create a role that doesn't have access to one of these tables. I think I need to do a Grant Permissions, but I haven't been able to find ...
1
vote
2answers
4k views

The EXECUTE permission was denied on the object 'SPROC', database 'DATABASE', schema 'dbo'

I have a few users that are unexpectedly receiving this error message today when they attempt to refresh a stored procedure via Excel: The EXECUTE permission was denied on the object 'SPROC', ...
1
vote
1answer
556 views

Mysql preventing truncate and drop table statements for a specific table

I have a MySQL table that serves as an immutable event store. I added triggers to prevent rows from being updated or deleted; CREATE TABLE t2 ( str VARCHAR(32), ts TIMESTAMP(6) DEFAULT ...
1
vote
1answer
30 views

DB user restricted permissions vs Docker?

As far as I know, it's usually considered a good practice when developing websites to store in website config DB credentials of the user without ALTER/DROP permissions (so user may only select, insert,...
1
vote
1answer
18 views

Permission errors on insert after schema drop/create (Pg 9.0.23)

We have a web application that allows users to modify data through an API. In order to allow people to run tests, we provide a sandbox area called 'daily'. This sandbox gets refreshed every day from ...
1
vote
0answers
47 views

Pros and cons of setting super admin in users table

I'm structuring a RBAC in a Web system. My database tables looks like: actions id name resources id name permissions id action_id resource_id roles id name permission_role permission_id ...
1
vote
0answers
25 views

Is it possible to `REVOKE` all privileges from all members from previous `GRANT`s?

Let's say I grant a privilege to "user_a", "user_b", "user_c". Is it possible to REVOKE from all users in previous grants, but without specifying them explicitly? Something like this: REVOKE ALL ...
1
vote
1answer
4k views

How to assign privileges on a postgresql schema to a user?

pg_hba.conf contains: ... host 10.10.10.10 service_db admin md5 ... Logged in as root, executed the following commands: ###CREATE DB ADMIN sudo -u postgres psql -p 5432 -d postgres -c "CREATE USER '...
1
vote
1answer
61 views

How add user with same privileges?

There is a database owner, I need to add another user with the same privileges. With rights to update/delete/alter, etc. How can I do it?
1
vote
1answer
586 views

Postgres SQL on AWS RDS how to grant permission for schema, select on tables to user

I have logged in as superuser and created a readonly user. When I run grant command, it says that schema does not exists I am logging in as root: sql -h myhost_name -U root -d postgres -W grant ...
1
vote
1answer
833 views

grant permission to SHOW FIELDS

I create a user to make a dump twice a week but when I try to execute mysqldump I have this error mysqldump: Couldn't execute 'SHOW FIELDS FROM `contabilidad_amortizaciones_completas_por_id_vista`': ...