Questions tagged [role]
A set of permissions.
295 questions
0
votes
1
answer
47
views
How to give admin on a role to another user/role in PostgreSQL
PostgreSQL - Version 16.4
I am trying to change the password of a user (xyz). I have logged in as abc. abc has ADMIN and CREATEROLE privileges. I am getting an error -
ERROR: permission denied to ...
- 1,029
0
votes
2
answers
48
views
Schema to model user authorization in hierarchical data
I'm trying to add the ability for a user to be authorized with a given role on a contract/site/experiment.
More specifically, I want the ability for a user to have role A on a contract but at the ...
- 111
1
vote
1
answer
68
views
Azure DB Server-Roles and Microsoft Entra Groups
I am facing an strange issue dealing with Server Roles in my Azure DB environment when using a login derived from AAD Group (Microsoft Entra) for low-privileged admin/deployment activities (such as ...
- 11
0
votes
2
answers
56
views
Revoking DBA Role From a User while it has also another having dba role in Oracle Database?
I have a very old user named "ADMINX" that has control in almost all tablespaces in an Oracle 19c database. It has been given "DBA" role and also a custom role named "...
- 127
0
votes
0
answers
175
views
How to grant SYSTEM_VARIABLES_ADMIN permission to master MySQL user or rds_superuser_role from MySQL Workbench hosted on RDS?
Using MySQL 8.0.39 on an AWS RDS insteance, for troubleshooting purposes we want to be able to Enable/Disable the global general_log setting , being able to turn it on and off easily and quickly from ...
- 9
0
votes
2
answers
71
views
How do I prevent a DB user to change table contents in SQL Server?
How do I specify that a DB user cannot edit the AspNetUserRoles table in SQL Server? Currently, the user has Membership->db_owner permission, and it can do everything.
I would like to control ...
- 123
0
votes
1
answer
275
views
How can I allow a user to alter tables they do not own in Postgres?
I need to be able to assign a role to users to allow them to do anything they want to tables in a schema. I need to do this without assigning superuser priv in Postgres.
I already figured out how to ...
- 103
0
votes
0
answers
54
views
Role management in SQL Server
What is the best way to manage roles in sql server in Azure VMs (multiple). We want separate logins for each users but it should be same on all Azure SQL VMs. We are currently using windows ...
0
votes
1
answer
46
views
How to get list of permissions for a role in Postgres?
I'm trying to do what is described here.
That is, execute the following:
BEGIN;
DROP ROLE role_name;
ROLLBACK;
and get the:
list of permissions it can find that are granted to the role.
I can't ...
- 1
1
vote
1
answer
55
views
Logical replication security risk with run_as_owner = false
The docs say
If the subscription has been configured with run_as_owner = true, then no user switching will occur. Instead, all operations will be performed with the permissions of the subscription ...
- 305
0
votes
1
answer
50
views
Change MariaDB "ADMIN_OPTION" of a ROLE after deleting the user who created it
I have a problem in the prod :
I have a user named dba who has all privileges with grant option, i used it to create a role named test, i granted some rights to the role test and granted the role test ...
0
votes
1
answer
295
views
ALTER ROLE DROP MEMBER succeeds but doesn't drop member
So this one has me stumped. We're doing some permissions cleanup and we have some AD groups we'd like to remove from a database role.
We run ALTER ROLE MyRole DROP MEMBER [domain\group] and get ...
- 105
1
vote
3
answers
292
views
Need a Role that can CREATE USER but not allowed to GRANT Predefined Roles in PostgreSQL <16
We are administrating DB in kubernetes to our customers.
For each new cluster, we create a new user with CREATE ROLE and CREATE DB roles given to them, so that they can create their own databases and ...
- 111
0
votes
1
answer
69
views
Postgresql - Create role to connect to database and revoke all other permissions
I have an application which is configured with the multitenancy strategy of "single database multi schema".
Now I want to create a role which can have only specific permission that is to :
...
- 101
0
votes
0
answers
132
views
Set role for database connection in java (spring boot with multitenancy)
For every http request there is tenant identifier based on which the schema is switched (datasource switching).
connection.setSchema(tenantIdentifier);
Now to secure the data access I am introducing ...
- 101
1
vote
0
answers
28
views
Can I actively renounce roles given to me?
I am a database developer. Over the many years working in the same company I have been granted many database roles. Many more than I should actually have.
I know I could make a list of the roles I don'...
- 193
2
votes
1
answer
3k
views
How do I see which roles have `admin option` on them?
I've seen plenty of questions about someone trying to grant a role_specification to some other_role, but getting the GRANT error
ERROR: must have admin option on rolerole_specification
and the ...
- 355
0
votes
1
answer
481
views
Error in Login securables - SQL Server
I am using SQL Server 2017 and the latest SSMS version. When I click securables of login in SSMS, I see this error:
Object reference not set to an instance of an object. (SqlMgmt)
Program Location:
...
0
votes
1
answer
2k
views
Postgresql: Even when I grant the owner role, I can't alter tables
I have a Postgres database with a schema named foo owned by a user also named foo, which also owns all of the tables in it.
While logged in as foo, I created a user bar and granted it everything foo:
...
- 113
2
votes
1
answer
203
views
Can a user with db_ddladmin elevate their privileges to db_owner
I have a question about DB-level roles in SQL Server, can a user with db_ddladmin elevate their privileges to db_owner or any other role?
Thank you.
- 21
2
votes
1
answer
2k
views
In Postgres, is an unprivileged role able to execute a function with elevated privileges?
For context, I am using:
postgREST: a thin REST client on top of Postgres (which does all the heavy lifting)
Azure AD: which handles identity and access of the organization
Since users, roles, ...
- 143
1
vote
0
answers
116
views
PostgreSQL roles with cyclic membership
I have a PostgreSQL database that I would like to manage "like a MS SQL Server" database but only for authorized people. There are a few "business tables" to which they should have ...
0
votes
0
answers
196
views
"postgres" user/role does not exit upon installation of Postgres via Homebrew
I am new to Postgres and I have been following instructions from this site (https://www.codementor.io/@engineerapart/getting-started-with-postgresql-on-mac-osx-are8jcopb) in order to create a local ...
0
votes
0
answers
54
views
Application Role - Reset Password using hash or Encryption form
I need to automate reset password of database application role. Password must be encrypted or hash form due to security reason.
I tried to convert password in hash form using 'Hashbytes' as mentioned ...
0
votes
1
answer
448
views
Confirm server role of logged in user
I am adding a DB Admins LDAP group to multiple servers with sysadmin access. In this group is my domain account. I use this domain account to log in to a server via SSMS. My understanding is that a ...
- 37
0
votes
1
answer
164
views
MariaDB event privileges/grants
I'm having multiple databases in MariaDB and I'm trying to set up an automation task, that would take data from one database/scheme and insert them with some transformation to another one.
For this ...
- 111
0
votes
2
answers
279
views
Cannot alter created role
I am fairly new to SQL. I use microsoft sql server management studio. I used Master database. Created a server role. But when I try to add members to the role or grant it permissions it says it doesn'...
0
votes
0
answers
10k
views
"no schema has been selected to create in" even after opening up postgres permissions
diesel migration list
Failed with: no schema has been selected to create in
This is the error I'm trying to solve. I recently made some changes to roles and permissions in Postgres, and now my diesel ...
- 385
0
votes
1
answer
262
views
Restrict access to certain tables for users who have DBA roles?
I have an Oracle Database which includes many users and some of them have DBA roles. The thing is, DBA's shouldn't delete any records from SYS.AUD$ table. Is there a way that i can achieve this?
- 127
0
votes
1
answer
135
views
Make all users within group role inherit permissions
I have a group role that consists of around 1,000 users. Those users do not inherit group role permissions, and I would like to make them all inherit them instead.
What would be the way to do it ...
- 101
0
votes
1
answer
697
views
Azure SQL Vulnerability assessment error
In our SQL Managed Instance database, we created a user-defined database role and added 20 users to it. Now, during scanning by Microsoft Defender for Cloud, we are getting the following error/warning:...
- 311
1
vote
1
answer
106
views
Flattened view for multi-role permission system
I'm currently working on a multi-role permission system for one of my projects, my database (postgres) tables are setup like this:
user
id
username
email
…
user_role
id
user_id
role_id
role
id
...
- 13
0
votes
0
answers
352
views
RBAC Data Model Design
I'm trying to implement roles and permissions for an application I'm working on, from my understanding its an RBAC system.
There are Users, Sites, and for each site a user can have different ...
0
votes
2
answers
576
views
Grouping user into Role to access FDW table
Recently I setup Forward Data Wrapper. Here is what I do:
CREATE SERVER foreign_server FOREIGN DATA WRAPPER postgres_fdw OPTIONS (host '192.168.125.1', port '5432', dbname 'template1 ');
IMPORT ...
- 327
1
vote
2
answers
2k
views
setting search_path to role doesn't seem to work in postgres
I've created a backend api that connects to postgres and performs various queries.
I've created a specific user (role + can login privilege) for that backend api:
backend_api_user
I've also dropped ...
- 131
1
vote
0
answers
1k
views
pg_dump permission denied for relation error for owner user
I am attempting to dump out a PostgreSQL database with pg_dump:
/usr/bin/pg_dump -f /home/crmpicco/rfc_754622.sql -F c -x -E UTF8 -b --disable-triggers -U root -h tillman.ff1lvb.us-west-2.rds....
- 165
0
votes
1
answer
2k
views
How to give Read_write users access to foreign tables imported through foreign data wrapper?
I had a question regarding the extension postgres_fdw. I am trying to use postgres_fdw to import foreign tables from DB A to DB B. These databases are on the same host.
In Database B, I have a set of ...
- 11
0
votes
1
answer
679
views
Do Postgres Roles carry over from Databases if Databases are in the same server?
If I am creating a new Database on the same hostname/server, Will the roles/users carry over?
Or will I have to create them again with new names and passwords?
I see roles/users listed as server ...
- 11
1
vote
1
answer
4k
views
How to grant read-write access to a user within the whole database cluster?
I got a database cluster with 1300 databases. I created a role and a user and granted access using the command GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO myuser, so myuser ...
- 11
2
votes
1
answer
906
views
Error trying to add a login to Azure SQL Special Role 'dbmanager'
Upon running these commands on an Azure SQL instance:
CREATE LOGIN test WITH PASSWORD=N'Passw0rd'
GO
ALTER ROLE dbmanager ADD MEMBER test
GO
... I'm getting an error:
Cannot add the server principal ...
- 559
1
vote
1
answer
660
views
Is rdstopmgr an AWS RDS user?
I am running postgres on AWS RDS. RDS creates some users on its own, such as rdsadmin and rdsrepladmin. I am familiar with these
However, I also see rdstopmgr, when I query postgres for roles. Google ...
2
votes
0
answers
83
views
Default roles ticked when creating new login through SSMS GUI
When creating a new login via the GUI:
In the User Mapping section, certain databases will have some roles pre-ticked in the Database Role Membership section.
What controls this behavior? It's ...
- 21
2
votes
2
answers
2k
views
unable to drop user in PostgreSQL 12.4
I am unable to drop user as I am getting default privileges error.
postgres=# drop user xyz;
ERROR: role "xyz" cannot be dropped because some objects depend on it
DETAIL: owner of default ...
- 143
4
votes
1
answer
2k
views
How to revoke SA permissions that seem to be "stuck" to a login?
Apologies in advance if I don't use some terminology correctly here. I'm not a DBA but I've been temporarily forced into the role.
I've inherited an application that runs on SQL Server 2016 ...
- 43
1
vote
1
answer
2k
views
Proper roles for a backup-only user on PostgreSQL
I am working on new processes and policies for my PostgreSQL databases when they are first created, and I am trying to define what role attributes are necessary for a role specifically used for ...
- 47
0
votes
1
answer
4k
views
Create readonly user in postgresql
Using pg 13.4, created a readonly user reader for database abc, via:
CREATE ROLE reader WITH LOGIN PASSWORD 'psssswwwd'
NOSUPERUSER INHERIT NOCREATEDB NOCREATEROLE NOREPLICATION VALID UNTIL 'infinity'...
- 253
-1
votes
1
answer
351
views
What is the benefit of application roles instead of SQL Server authentication in SQL Server?
I have a database that is used by an application. This application implements all the business logic and control what a user can do according at its privileges.
I want to avoid users can access to ...
- 107
0
votes
2
answers
1k
views
ALTER permission on database allows creation of security principals
It appears the ALTER permission granted at the database level allows the principal to which it is granted, to create security principals in the database.
Consider the below example:
/* setup database *...
- 2,083
0
votes
1
answer
1k
views
SQL Server User permissions-Hide all tables and give/show access to some views
I am using SQL Server 2019. I have gone through some questions here and not found an answer. I am trying to not to show some tables (with a certain Schema e.g. Structure) for a SPECIFIC user in the ...
- 476
0
votes
0
answers
53
views
Creating sql server custom database role that only allows reading some columns and nothing else
I want to create an sql server Custom Database Role which only allows reading some columns of some tables, and nothing else. this is my attempt.
CREATE ROLE CustomDatabaseRole01
GO
GRANT ...
- 1