Questions tagged [security]

Allowing users to access only the data they are authorized to access. It also encompasses protection of data during movement on the network and storage on disks and backups.

Filter by
Sorted by
Tagged with
0
votes
1answer
12 views

How to change user privileges from 'Y' to 'N' in MySQL Server?

I want to change a privilege to my glpiuser from 'N' to 'Y'. In MySQL server, what is the command to do this task? Here's the image that display my users. I'm using Ubuntu 20.04.1
0
votes
1answer
32 views

is it safe to grant permission to all users in Microsoft sql server

I have a global production server and database, as I all users should have access to it by remote desktop. Is it possible to grant NTFS permission on all database files (mdf+ldf files) to all users? ...
0
votes
1answer
14 views

Contained User on View - Select permission denied on object 'table1', database 'Database1', schema 'test'

As an example, I have a database called 'Database1' on Azure SQL Server 12.0.2000.8 I needed to setup an account that could only access a view in the database (eg. View1). This was achieved by the ...
1
vote
2answers
62 views

Prevent timing attacks in postgres?

I'm looking into accepting an API token from a user, and I would like to prevent timing attacks. The conventional wisdom seems to be that one should hash the token server-side in order to make the ...
0
votes
1answer
30 views

How do I judge whether a given sql statement has sql injection risk or not [closed]

Analysis the sql comes from sql log only, trying to find out which sql statement has risk of sql injection. it is different from the perspective of application side check.
2
votes
1answer
43 views

Should I use a Domain User account to manage SQL Server (or other services)

As the SQL Server administrator for a server running inside a Windows Domain, I followed some rules: SQL service runs under a Domain User account (least privilege) "sa" has been disabled ...
0
votes
1answer
74 views

Should I provide db_owner principal role to the user of the Azure SQL of my Azure Web App?

I have an Azure Web App connected to an Azure SQL database. Let's call the app ACME. The application has it's own Role and User called ACME, and I gave that User db_owner principal roles. The ...
0
votes
1answer
35 views

Data Factory keeps getting “untrusted connection” error when logging into on prem SQL Server via IR on VM

We have: A local SQL Server database A VM with the Integration Runtime installed on it A Data Factory sharing this IR, working (according to the ADF interface) Logins stored in Key Vault for SQL ...
1
vote
1answer
46 views

How do I copy SQL Server Data Discovery and Classification rules and suppressed recommendations to another database?

We have hundreds of SQL Server databases, all of which share a common schema. We are implementing Data Discovery and Classification policies. We wish to create one rule set and copy it to all like ...
2
votes
5answers
70 views

CREATE Windows User in database for not existing domain

Is it possible to create a Windows User in the database when the domain is not accessible? I am preparing database at my dev environment outside of the targeted domain. Created user is not expected to ...
9
votes
2answers
823 views

Should I drop dbo from the database role db_owner?

I did a Vulnerability Assessment for my database today. I found VA2108 and it suggests me to ALTER ROLE [db_owner] DROP MEMBER [dbo] But it's the default setting of any SQL instance. Should I go for ...
-1
votes
1answer
96 views

Create user for all databases in MongoDB

How can I create a user and grant it read-only access for all databases available in MongoDB (2.2/2.4/2.6) instance? I am new to MongoDB, please provide the detailed, step-by-step process.
0
votes
0answers
28 views

Does PostgreSQL have some ability to “compare” a backup with the live database automatically and neatly?

I make full backups of my PG databases each day. I store these pg_dumped archives/blobs in a dir on the same computer, as well as on offline disks, up to a year before they are culled. I'm constantly ...
0
votes
0answers
6 views

Rotating MongoDB Replica Set Internal Auth Certificate Authority

I noticed that for replica set internal authentication all MongoDB instances must have certificates signed by the same CA. (Source) Rotating individual certificates is sensible, but if I wanted to ...
-1
votes
3answers
200 views

CVE-2021-1636 security update for SQL Server

Microsoft just released this security update CVE-2021-1636 for a Security Vulnerability. Not much information is available at the moment. Any input on the following points will be highly appreciated ...
0
votes
0answers
38 views

Which DBs hide rows INSERT order (header metadata related)?

I discovered that PostgreSQL has a "t_xmin" row header metadata field that is used to store the transaction ID of an INSERT command. So, as I understand, even if I use a random INT primary ...
1
vote
2answers
62 views

Schemas permission in SQL DB

I am a fresh admin in SQL DB and I need to learn how to establish the security settings in SQL DB. I have encountered an issue that is somehow unclear or even weird for me. I know that if one user has ...
2
votes
3answers
352 views

Is it possible to edit data inside an unencrypted SQL Server backup file (*.bak) without SSMS?

I have found out that there is a difference error (Remaining Qty <> (Purchase - Sales)) in one of the items in my database. There are more than 5000 items and more than 100,000 transactions has ...
0
votes
2answers
27 views

Oracle - How do I grant a user permission to create and change passwords for other users (like a security admin)

I have a user that is a security admin in the I.t. dept. I need to grant his Oracle user account privileges to be able to create new users, change passwords and change membership in other groups we ...
0
votes
1answer
38 views

Oracle Database Vault: Changing DV Owner and DV Account-Manager passwords hangs PX Deq: Execute Reply/row cache lock

When changing the password of the users mentioned above the sessions hangs. And it seems to be a deadlock. When changing the password it seems that two sessions are spawned: Blocking session C##...
-1
votes
1answer
52 views

Is there some kind of “undo” or “rewind” feature in PostgreSQL?

Although it has not actually happened in quite a long time, every day, I fear that I will make a mistake such as accidentally deleting the wrong table, or deleting too many records, or doing some kind ...
0
votes
1answer
62 views

Do I have to worry that root user can login into MariaDB 10.5 without password

I remember when installing MySQL Server 8.0, or in some database setups, there are warnings about no password login. Should I worry about this? I think if someone gets access to root user on my debian ...
0
votes
1answer
27 views

Checking vulnerabilities for Oracle Data Integrator version 12.2.1.3.0

I understand October 2020 Oracle patches included security updates for Oracle Data Integrator (ODI) version 12.2.1.3.0. The application admin who is managing ODI for us is really new and used to be ...
-1
votes
1answer
43 views

Azure SQL ports - expect on 1433 - but finding more

Our security department has questioned why we have multiple ports open to our Azure SQL instance. Ports highlighted as LISTENING are 443, 3006, 5002, 5432, 7443 and a few in the 16000 to 16018 area. ...
0
votes
1answer
26 views

SID for SA account

I want to change the SA password for the always on availability group servers. Since i wanted to keep the same password on all the replicas when I tried to transfer the login through Microsoft Stored ...
1
vote
1answer
109 views

SQL Server EXECUTE AS impersonation as RBAC method

I wrote a web application that is using AD authentication (Windows) and has it's own authorization module (like RBAC). Backend is SQL Server. A DBA in my team is not happy with us using a service ...
0
votes
1answer
18 views

Web server accessing the database server in Always on availability group

We have a web server that is on the DMZ but that will need to query a database that resides inside the network. Now the network team wont allow port 1433 from the web server to the Database server. ...
0
votes
0answers
96 views

Login to SQL Server cross domain AD Group user

Our MS SQL Server is on another trusted domain (Trusted Domain C). We created a Universal Group within Domain A with users from different forest domains and added the AD group onto the SQL Server. ...
0
votes
1answer
41 views

What are the security implications of the privileges needed by the Bluemedora Postgres account?

Blue Medora is a service for forwarding monitoring metrics from Postgres to Google Cloud Monitoring. As part of their setup instructions they offer a SQL script to configure a least privilege user to ...
0
votes
1answer
25 views

How to see the original text of the the function that has been wrapped by “DBMS_DDL.WRAP”

As I'm new to Oracle PL-SQL,I'm trying to be familiar with DBMS_DDL package and I used it to hide my source code,below you can see the example I'm working on: Declare v_string varchar2(32676); begin ...
0
votes
1answer
256 views

How is the “Adjust memory quotas for a process” user right assignment used in SQL Server 2019?

I am looking at the Configure Windows Service Accounts and Permissions doc (https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/configure-windows-service-accounts-and-permissions?...
1
vote
1answer
122 views

Deploying dacpac through sqlpackage.exe with NETWORK SERVICE user

I have a database release pipeline in Azure DevOps Server which deploys our dacpac files through Powershell commands that run the sqlpackage.exe commands to publish the database. I am using the ...
0
votes
1answer
81 views

SQl server 2008R2 Performance issue after SP3 update

We have recently applied SP3 KB2979597 and Security Update Patch KB4057113 on Sql server 2008R2 but after that our couple stored procedures runs slow, it's taking almost 4 to 5 hours, but normally it ...
0
votes
1answer
18 views

Risk of dropping users in postgres

Is there any risk in DROPPING users in postgres? We have bunch of users in our database that no longer work at the company. I was wondering what (if any) risk there was in dropping those users?
0
votes
1answer
33 views

Can I hide my password for data at rest encryption key?

For MariaDB encryption at-rest, my setting is [mysqld] # at-rest encryption plugin_load_add = file_key_management file_key_management_filename = /etc/mysql/rest/keyfile.enc ...
0
votes
1answer
48 views

What is the point of encryption at rest?

I am wondering what is the point of encryption at rest? It is said that a hacker cannot steal the database and look through it. I'm afraid that it does not protect the database while the key is stored ...
0
votes
0answers
36 views

Oracle(12+) + Kerberos = Protocol Violation

we have an various oracle database installations and a few Kerberos KDC servers application uses JDBC driver latest 8 version and it works perfect with 11.2 version but when I try to connect to a bit ...
4
votes
1answer
55 views

Active Directory Name Change

Our Active directory will change the accounts name for example John Doe Jdoe@abcd.com to John.Doe@abcd.com. My question is do I need to change all the SQL Logins individually or the person can login ...
1
vote
1answer
21 views

Extended event to track the logins from a specific login, but that login is filtering on a an active directory group

I'm wondering if there is a way to do this in sql server. I have an extended event set up to track all user logins from a database with a filter. The way our security is setup, we have active directly ...
4
votes
0answers
73 views

Mongodb 4.2 Brute Force Defense

Is there any tool or configurations for mongodb server to protect against brute force attacks on the user credentials? I found only authFailedDelayMs param witch Available in MongoDB Enterprise only (...
2
votes
1answer
50 views

Raise application error in a stored procedure when inputs contain keywords like 'delete' , 'insert','update'

I have a Stored Procedure which gets 6 input queries and the inputs are the same as where clause of a query. For instance where x=1 and z=5 and e=4. The Application makes these input strings and pass ...
0
votes
1answer
63 views

How to prevent a highly dynamic PL-SQL query from injection using bind variables

I have a procedure as you can see below: create or replace procedure Injection_test(qry1 varchar2, qry2 varchar2, ...
0
votes
1answer
28 views

Passively load a monitoring shared object into an Oracle process

I'm trying to load my own code, which should add some security features to my environment, into each oracle BEQ dedicated process. The reason I'm posting this on this platform, is that I hope there is ...
15
votes
7answers
2k views

How to deny writes in all SQL Server databases (including new ones & restored ones)

I want to create a login that is denied the ability to write to any databases - not just databases that exist today, but any newly created databases or databases that are restored from other servers. ...
0
votes
3answers
75 views

Oracle - Is a separate database more secure than using the same database and a separate schema

We have very few developers and the ask from management is insane (computer vision, AI, IoT, etc.). Management wants to split the production database which uses Oracle Apex because the Apex ...
0
votes
1answer
41 views

How often does SQL Server refresh group policy?

Does SQL Server check against the Windows GPO on the local server it is running on or with the domain controller? Does SQL Server update the GPO at its own interval or immediately when the server has ...
0
votes
1answer
32 views

Is there a way of securing ProxySQL's own SQLite3 database?

As I understand ProxySQL has support for SSL encryption for inbound and outbound traffic (front/backend) and supports password hashing. However back in 2017, one had direct database access: How to ...
1
vote
1answer
84 views

User has been denied select to table, but has access to table via synonym

User has been denied select to table T1 in DB1, but user can create synonym in DB2 and can select from DB1.TB1. I can not deny create synonyms to user. Is it possible to prevent user to select after ...
0
votes
0answers
73 views

SQL Login can access Linked Server w/ impersonation, but Windows Login cannot

In SQL Server 2017 I have a Linked Server defined to use a fixed remote SQL Login for all local users. EXEC master.dbo.sp_addlinkedserver @server = 'RemoteServer', @srvproduct='SQL Server'; EXEC ...
0
votes
1answer
189 views

How to add a new listener on a new port and restrict it to one instance only

I am running oracle 11.2.3 and we have a server with multiple instances running. All of them are registered to port 1521 with the default listener. Now we are required to make one instance available ...

1
2 3 4 5
21