Questions tagged [security]

Allowing users to access only the data they are authorized to access. It also encompasses protection of data during movement on the network and storage on disks and backups.

Filter by
Sorted by
Tagged with
0 votes
0 answers
16 views

Restrict access to a new schema to a specific role despite users having db_datareader?

I'm working in a SQL Server 2016 database that is not of my design nor can I fundamentally change the security structure. I know it is likely trash/worst practice but I have to play the hand I am ...
user avatar
15 votes
5 answers
3k views

Can ransomware embed itself in to a SQL backup file?

One of the best protections against ransomware is to back up all of your database files to a completely separate system. Which we have done. But one thought is the backup of the database could ...
user avatar
1 vote
0 answers
16 views

How to set administrative user in Mysql 5.7

I am trying to run a scan from Nessus against Mysql 5.7 database I am getting the following error: Ensure Only Administrative Users Have Full Database Access 'mysql.user' Perform the following actions ...
user avatar
0 votes
0 answers
30 views

Is it secure to store connection password on Pentaho Spoon?

I'm gonna use Spoon to transfer data from Postgres to MSSQL. I see that when we create connection its data is stored and we don't need to type password anymore. But I can't find where it stores this ...
user avatar
  • 1,413
1 vote
1 answer
33 views

Password storage best practices

We have a system (.NET application + sql server) where in addition to regular user passwords we need to store passwords that are used by the application processes to access various other subsystems or ...
user avatar
  • 11
0 votes
2 answers
19 views

Column data masking security problem

In Db2 v11.5.7 on Linux I have simple table: create table admin.patient_data ( patientid int not null primary key, patient_name varchar(10), illness varchar(15), doctor_name varchar(10) ); insert ...
user avatar
  • 57
0 votes
1 answer
13 views

Increase security of mongodb-based flask/react applications?

this is the first time I use mongodb seriously, and I have a question about best practices when it comes to access. Say you have a typical mongodb/flask application. The users use the browser (via ...
user avatar
0 votes
1 answer
28 views

db2 - how to get list of all of the Db2 instances on computer

I have several Linux servers and on them may be one or more Db2 instances. Db2 instances can be from different Db2 versions. For security audit I need to write some simple bash script to check for ...
user avatar
  • 57
0 votes
0 answers
37 views

IIS web application access SQL DB as service account

I've setup a new Python site on iis using FastCGI handler. The site has windows authentication enabled in iis and the app checks that the AD user belongs to an active directory group when they access ...
user avatar
  • 101
0 votes
0 answers
35 views

Is there a readymade script that I can use to automate sync of server level logins, roles and securable permissions between 2 SQL servers?

I have configured log shipping from SQL1 to SQL2. Database level users, roles and securable permissions are getting transferred. However suppose the user doesn't exist on the server level login, then ...
user avatar
  • 2,070
1 vote
1 answer
33 views

MySQL server accessible from the internet nmap scan result

I have a MySQL database on a server which is accessible from the internet and I'm doing some security checks. A nmap script scan shows the information below. I'm curious if an attacker can derive ...
user avatar
2 votes
0 answers
42 views

How to create logins in sql server based on the Azure Active Directory?

In my Azure environment I have many resources, and I have a virtual machine that contains my sql server database This is my virtual machine: What I would like to achieve is to create logins inside my ...
user avatar
1 vote
3 answers
68 views

Is there a way to add database encryption on certain columns without changing code base?

I've experienced a few companies that have various different codebases ranging from 20 year old code without the source anymore to 1 to 10 year old code with the source but thousands of database calls....
user avatar
0 votes
2 answers
38 views

What can malicious postgres db user do to a linux server?

Suppose I created a db user with create role myuser login password 'xyz'; and allowed typical read and write db permissions. If a malicious user finds these login credentials (and has access to db), ...
user avatar
  • 103
0 votes
0 answers
23 views

MySQL impossible suspicious connections

I have a MySQL Community service bound locally to bind-address=127.0.0.1. The bind supposedly does not expose it to the internet. I can't connect externally. However, I'm constantly receiving in the ...
user avatar
0 votes
1 answer
27 views

Best practise making users in Maria db database

Iam creating a basic banking database to practise MariaDB, so I wanted to know what the general guidance on what kind of users you should be making and what type of privileges? Currently I have a read ...
user avatar
5 votes
2 answers
286 views

Is the data exchange on connection from client to server sent as plain text over the wire?

I have a new SQL Server 2019 on-premises instance. Assuming the client is the SQL Server Management Studio or any other application: When the client connects to the server using SQL Server ...
user avatar
  • 2,070
0 votes
1 answer
137 views

SQL Agent Job error

It may be really simple question, but at the moment I have a kind of mental loop and need your help to break it. SQL server 2016 is installed using a domain account. I didn't create an explicit login, ...
user avatar
5 votes
3 answers
857 views

Does GDPR require deleted backups to be rendered unrecoverable?

Although GDPR has been in place for some time, my organisation has had a dispensation to essentially ignore it up until now. The dispensation was because the contract from the government we were on ...
user avatar
  • 201
0 votes
1 answer
37 views

MS Sql Server link a database level role to a server level role

I have created a server/instance level role called ReadOnly and assigned a user (windows based login) to it. Now i'm trying to add a database level role with the same name where i can grant ...
user avatar
  • 101
0 votes
3 answers
118 views

Unable to grant membership to public role

I'm trying to refresh my dev db with a snapshot from prod. I've restored the production db from the prod server to my dev server just named as development. I'm trying to grant access to the dev db to ...
user avatar
  • 111
0 votes
0 answers
53 views

How costly is Postgres' `discard all`? Is it good idea to run it when switching tenant on a shared connection?

My app uses a single connection pool to serve all users, that belong to different tenants. In the DB each tenant has his/her own schema and role and I do set role <tenant>; set schema <tenant&...
user avatar
1 vote
1 answer
39 views

If I backup my Certificates, why do I need to backup the DMK?

If I have a server where I use TDE, configured as follows: USE [master] CREATE DATABASE MyTDE CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'My57r0ngp455'; CREATE CERTIFICATE MyTDECert WITH SUBJECT = '...
user avatar
  • 1,450
0 votes
2 answers
43 views

SQL Server administrator needs to be able to assign new users to roles on SQL Server

we have following requirement for SQL Server: SQL Server administrator needs to be able to assign new users to roles on SQL Server. Create an account that allows this security function and only this ...
user avatar
0 votes
0 answers
21 views

Maria DB not letting me creating more then 1 user at once

I am trying to make a read only and a full privledge admin user to my database with the following code: DROP USER IF EXISTS 'readonly'@'localhost'; CREATE USER 'readonly'@'localhost' IDENTIFIED BY '...
user avatar
1 vote
1 answer
79 views

Do existing connections immediately honor a change to the TRUSTWORTHY setting?

When you change the TRUSTWORTHY setting, will existing connections immediately honor this change? I had an experience that seems to suggest existing connections don't immediately honor the change but ...
user avatar
  • 439
0 votes
0 answers
18 views

TLS Encryption Logging/Auditing in Oracle

I use Oracle only occasionally, but have heard that it is pretty easy to verify if your Oracle encryption is working (e.g. this post Verify if the client is connecting to the Oracle database using ...
user avatar
-1 votes
1 answer
56 views

What is the benefit of application roles instead of SQL Server authentication in SQL Server?

I have a database that is used by an application. This application implements all the business logic and control what a user can do according at its privileges. I want to avoid users can access to ...
user avatar
1 vote
1 answer
103 views

Unable to restrict user from built in SQL Server Functions

We have a SQL Server (Standard) database with a user whom we are attempting to restrict permissions to only CRUD Operations to certain tables (CREATE, SELECT, UPDATE, DELETE) and only allow connect ...
user avatar
  • 111
0 votes
2 answers
39 views

How to make a restricted view in oracle?

I had to provide data for an application schema, but there is a requirement that the applications connecting using that schema user cannot query more than five rows at a time, the application queries ...
user avatar
  • 99
0 votes
1 answer
20 views

ALTER permission on database allows creation of security principals

It appears the ALTER permission granted at the database level allows the principal to which it is granted, to create security principals in the database. Consider the below example: /* setup database *...
user avatar
  • 1,450
0 votes
1 answer
224 views

Achieving best practice schema and permissions management on PostgreSQL

I have a PostgreSQL database (12, moving to 13 imminently) with a single (Rails) application running on it, and no other users or systems connecting. The application uses the postgres user to connect ...
user avatar
0 votes
2 answers
29 views

Operation level authorization in PostgreSQL

I'm developing an analytics application that provides multiple levels of visualization of a data warehouse in a Postgres DB. One of its requirements is that different users should have different ...
user avatar
0 votes
1 answer
127 views

SQL Server User permissions-Hide all tables and give/show access to some views

I am using SQL Server 2019. I have gone through some questions here and not found an answer. I am trying to not to show some tables (with a certain Schema e.g. Structure) for a SPECIFIC user in the ...
user avatar
1 vote
1 answer
34 views

Should the remote user value be configured to map users defined in Local login or map users not defined in Login login?

Link: https://docs.microsoft.com/en-us/sql/relational-databases/linked-servers/create-linked-servers-sql-server-database-engine?view=sql-server-ver15#to-create-a-linked-server-to-another-instance-of-...
user avatar
  • 2,070
0 votes
1 answer
41 views

Postgres RLS: how to error instead of ignoring rows not matched by the policy? [duplicate]

When creating a policy (CREATE POLICY) in postgres it's possible to specify expression to filter out some rows when issuing a SELECT query: CREATE POLICY ... USING ( using_expression ) ... It's also ...
user avatar
  • 103
0 votes
0 answers
30 views

Are There Any Viable Alternatives to Master User Usage in RDS for SQL Server?

I've inherited an RDS instance, and I'm trying to figure out a way to create a server role as similar to that of SA as I can, so that I can give it to a couple of additional employees, without having ...
user avatar
0 votes
1 answer
35 views

How to query the effective permission of sql login (windows and/or sql user)?

How to query the SQL server to fetch the effective permission of the following SQL logins under the Security/Logins: SQL user Windows user Windows group
user avatar
  • 2,070
1 vote
1 answer
28 views

What is effective permission if windows user is added as login as well as via group membership; with only public permission given via the user login?

Link: https://docs.microsoft.com/en-us/sql/relational-databases/security/authentication-access/determining-effective-database-engine-permissions?view=sql-server-ver15#principals Remember that a ...
user avatar
  • 2,070
1 vote
1 answer
34 views

How to remove user from login (user is already part of group) and keep the jobs?

I have a sql login for windows group. One of the members of ths group was also added as a sql login. This user has 1 job in which he is registered as the owner. I want to remove this user login ...
user avatar
  • 2,070
0 votes
1 answer
21 views

Does deleting the login retain the permissions given via group membership?

I have a windows group account added as login in sql server. The group contains around 100 members. The above windows group login is given specific database level permissions like db_datareader, ...
user avatar
  • 2,070
0 votes
1 answer
39 views

Explicitly revoke privileges from a user who is a member of a role that is granted those privileges in PostgreSQL

Let's say I have a user on my PostgreSQL instance called "myuser", and I add it to a new group called "update_all" like this: CREATE ROLE update_all WITH NOLOGIN ROLE myuser; I ...
user avatar
1 vote
0 answers
32 views

Service Broker's SEND statement causes security context switch

We have triggers in multiple tables that will send messages to a Service Broker service upon INSERT, UPDATE and DELETE operations. These operations may be nested as parts of bigger, transactional ...
user avatar
  • 111
0 votes
0 answers
10 views

How to make the Azure MySQL log events for Security Compliance

We currently in the process of the Implementing below Standards required. https://www.cyber.gov.au/acsc/view-all-content/guidance/event-logging-and-auditing Does anyone has any idea on how we can ...
user avatar
0 votes
0 answers
12 views

How to configure a Azure MySQL DBMS software configure according to vendor guidance?

We currently in the process of the Implementing below Standards required. https://www.cyber.gov.au/acsc/view-all-content/guidance/database-management-system-software ISM - 1246 - Hardening and ...
user avatar
0 votes
0 answers
35 views

SQL server encryption

i am using SQL server enterprise edition V.2019 i need to encrypt some columns i liked IBM Guardium for File and Database Encryption but the cost is too high . so i found some other solutions 1- SQL ...
user avatar
  • 31
1 vote
0 answers
24 views

Azure SQL custom backup role

We are currently running an Elastic Pool within azure to host all our databases. We need to back up these to on-premise as well in case of an emergency, and for it we are trying to use sqlpackage. Now ...
user avatar
0 votes
0 answers
71 views

AWS-RDS database catalog is restricted

I use PostgreSQL 13.2 in AWS-RDS. The database is up and working properly; I can connect with the user provided by Amazon. We need to alter the catalog to enable the implicit cast of integer to ...
user avatar
0 votes
1 answer
208 views

Linked server only works if I am on the machine itself. I can't use it from my local computer. what is missing?

I have a few queries that I use to monitor log shipping. Sometimes I want to run those queries on a different server. I usually do that through a linked server. I have a server called SQLDEV4-TS that ...
user avatar
0 votes
2 answers
2k views

for mongo, not able to create users other than admin with error command createUser requires authentication :

This is the script I am using to create user accounts in MongoDB: mongo <<EOF use admin; db.createUser({user:ram", pwd: "ram123!", roles:['root']}); db.createUser({user:"sam&...
user avatar

1
2 3 4 5
22