Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Allowing users to access only the data they are authorized to access.

0
votes
0answers
43 views

How to get environmental properties during a row security policies?

I am developing a REST AOI backed by PostgreSQL. Users of the API must pass a session token in the Authorization header. For example: Authorization: Bearer fcda6eca-71c4-456c-a4df-4e398b11fa00 This ...
0
votes
1answer
25 views

Implement row-level security as a user table or millions of roles? [closed]

PostgresSQL 10.4 is our backend database for a consumer-facing app with millions of users. When implementing row-level security so each user can only access their own data, is it best practice to use ...
0
votes
1answer
29 views

Advanced threat detection vs IP restriction

If we configured IP restriction to allow only internal network, then why we need threat detection? IP restriction already blocks connections from other resources. Moreover, advanced threat detection ...
0
votes
0answers
10 views

MySQL SNMP Audit

i was looking for a way to make MySQL Enterprise Edition to send SNMP trap with audit log information. I've enabled the audit_log module and I've added some rules (for example i've decided to log ...
4
votes
1answer
150 views

Purpose of SQL Server Application Roles

I've been reading up on application roles in Microsoft SQL server. It seems an application role is like any other role in that permissions on securables can be granted to an application role, however, ...
0
votes
0answers
17 views

Problem setting up client-side encryption to SQL Server “selectively”

We are in the process of selectively encrypting connections to our SQL server using TLS1.2. We have few applications which are not configured for encryption yet (and are in the process)and hence will ...
2
votes
1answer
38 views

Does a user who has permissions to select from a view also need select granted to the children entities of that view?

If view 1 uses tables A and B, and a user has SELECT granted on view 1 is that sufficient for the user to select from view 1 or does he also need SELECT granted on tables A and B. Specific details on ...
2
votes
3answers
63 views

Cleaning up specific domain logins on about 50 servers and therefore the users

There is a specific need to clean up logins from the SQL Servers after migration from one domain say abc to new domain foo. After migration as we still have those old logins and users under naming of ...
0
votes
1answer
35 views

Connection Manager in SSIS 2017 Package NOT Saving the Password

We're using Visual Studio 15.7.2 and using SSIS on SQL 2017 (14.0.3029.16). We built a connection manager to a 3rd-party, vendor managed SQL Server 2008 R2 (10.50.6529.0). Our only allowed ...
5
votes
2answers
83 views

How secure is an Azure database within Microsoft?

I am considering moving most of my Databases to Azure SQL server Database, but I am concerned that Microsoft will be able to snoop and look at the data inside the database, which is absolutely not ...
0
votes
1answer
68 views

Oracle data access restriction

I am working on some data access restriction feature in Oracle 11g and have been struggling since then. What I want to achieve is, that I want to allow a specific group only to access a particular ...
0
votes
0answers
22 views

How to write complex expressions while creating a row-level security policy in Postgresql

I've got a table structure where A has records with an owner ID, B links to A, and C links to B. I want to restrict access to rows in C by the ownerId, which is set as a setting on the session in the ...
0
votes
0answers
48 views

Make the linked server ask for password

Till today i am using the linked server with the user of sql having same username and password in both the servers. For now on i can not keep the 2 servers password same for some reason and i still ...
-1
votes
1answer
53 views

SQL Server Intellectual Property (Protecting DB Structure and Relations)

I would like to know is there any update about protecting DB Structure? We deliver a licensed app that uses SQL as its main DBMS and we would like to lock the database structure (schema). I know I ...
2
votes
1answer
63 views

Hide databases from SQL Server with AG

I have 10 databases on a server. Each database is part of a different AG. Each database has its own listener. Can I hide all databases and show only the one database belonging to a listener? I also do ...
0
votes
0answers
34 views

What does the WQL Select * from SQLService return 0 rows in WBEMTest mean?

So, I've been trying to solve the blue icon question mark on my sql server in SQL Server Management Studio by following the answer in the following link: Blue icon with question mark - what does it ...
0
votes
1answer
29 views

How to configure/setup data at rest encryption in Couchbase 5.1 [closed]

I am evaluating best database solution for a sizeable application. My basic requirements include: Data should be encrypted at disk level Mobile support Scalable Enterprise support I realized ...
2
votes
1answer
29 views

Difference between encrypted backup of an encrypted DB and an unencrypted backup of an encrypted DB

Let's say we have a fully encrypted database (the type of encryption is not considered in this scenario), and we produce two backups for that database. If I encrypt only one of the backups, would ...
1
vote
1answer
39 views

Roles and Schduled jobs

I have some instances were some of the BI teams can create their own schduled jobs in the sql agent. However i also have a couple house keeping jobs i don't want them to interfere with. Can I create ...
7
votes
1answer
539 views

How to GRANT permission to execute stored procedure?

I have an AD group that is setup as a Windows Authenticated SQL Login on my SQL Server. On DatabaseA it has the db_datareader and public roles. So the users of this AD group only have read access to ...
1
vote
1answer
67 views

Is there a way to check which computer or IP used a particular script?

As the Title suggest, is there a way to check what IP used a particular SQL Script? The scenario is, there is a recreation script in a email and we hypothesize that somehow, that recreation script ...
2
votes
1answer
32 views

How to ensure security with SQL Server Restore

I'm building a shared hosting SQL Server tool for linux, where users only receive access to their own database, with a SQL Login and SQL Database User that has db_datareader, db_datawriter and ...
1
vote
1answer
42 views

Read Only Access Except Stored Procedures in Specific Schema

I'm building an application that is attached to a legacy application database. The application has it's own database that is on the same server as the legacy database. My application is ASP.NET and ...
1
vote
1answer
71 views

MariaDB doesn't set authentication_string during installation

I'm setting up a new server using MariaDB (current stable version of 10.3) and I notice that all of my users - mainly root and debian-sys-maint - do not have an authentication_string after the ...
2
votes
3answers
65 views

Why shouldn't user-defined database roles be members of fixed roles?

I'm redesigning security setup in our database. I was in process of defining certain user-defined roles and - as I find it handy - on the other monitor I was browsing documentation to make sure I don'...
0
votes
0answers
18 views

How are the options used for mysql_secure_installation?

The MariaDB knowledge base article for the command mysql_secure_installation states that mysql_secure_installation accepts some options: basedir defaults-extra-file defaults-file no-defaults No ...
3
votes
3answers
75 views

How do you manage service account passwords?

The security folks want all AD passwords to expire every three months. I'm really not excited about this, since I definitely won't remember, and I'll likely be on my boat, drunk, when they expire. ...
2
votes
1answer
37 views

how to encrypt one column of a table without using always encrypted?

I have been working on a solution to synchronise logins (using T-SQL) between 2 servers, or between AlwaysOn nodes, inspired by sqlsoldier. It requires a linked Server. When run, this procedure ...
0
votes
0answers
22 views

linked server issue while synchronising logins between servers using T-SQL

I have been working on a solution to synchronise logins (using T-SQL) between 2 servers, or between AlwaysOn nodes, inspired by sqlsoldier. It requires a linked Server. this is a partial view of the ...
1
vote
1answer
42 views

Object Level Security

I have a database that will be shared across multiple related types of applications for different users. I want to be able to restrict each database user to essentially have full control over their ...
0
votes
1answer
36 views

How to enable failed login profle on MySQL

We are trying to implement failed_login profile for account lock on MySQL. didn't find it on documentation. Our version is 5.7.12.
2
votes
1answer
129 views

Flask mongodb assertion 13 not authorized for query on flask_session.sessions

Need help resetting mongodb back to its original state. We have a flask app running with mongodb with authentication turned off. Running on Ubuntu with std Flask. We tried ALL sorts of combinations ...
3
votes
1answer
38 views

Auditing Failed Logins in SQL Server

Are there ways to understand which password entered when connecting to my server ?
0
votes
1answer
121 views

Restore SQL Server DB encrypted by EKM - where's the asymmetric key?

MS is clear about restoring TDE backups: Certificate has to be restored on destination OR, in case of EKM, the asymmetric key " When moving a TDE protected database, you must also move the ...
0
votes
1answer
196 views

Create a SQL Server Login and User with limited permissions for CRUD application Access

I'm trying to create a SQL statement to create a login and user in SQL Server that will allow a web application to perform crud actions on a single database, and allowing full access to all tables and ...
1
vote
2answers
199 views

Oracle Database Security - Audit Trail for specific user and specific module application

I want to enable audit trail for specific user, but only for sessions when this user connect to database using one specific module applications. For ex. I want to enable audit trail for user test1 ...
3
votes
2answers
149 views

Postgresql - how to securely delete the storage freed when a table is dropped?

For a system with sensitive information stored in a PostgreSQL 9.5 database, in which data stored in a table that is deleted must be securely deleted (like shred does to files), and where the system ...
0
votes
2answers
315 views

SQL Server 2016 Force Encryption Option

We are using SQL Server 2016 and want to use the Force Encryption option. From what I read, is it just installing the certificate on the Server itself and then setting the ForceEncyption to "Yes"? ...
1
vote
0answers
45 views

xp_cmdshell - Enablement Consequences - Clarifications

Recently we have disabled a module which is dependent on xp_cmdshell. Though we are not directly using the xp_cmdshell (instead we are using the proxy), we would now like to disable the xp_cmdshell ...
0
votes
2answers
32 views

MySQL Allows ODBC With Any Username

I have a MySQL Community database on a remote server and I am trying to get Microsoft Access to read data from it. This data is sensitive. The problem is, MySQL doesn't care about the username that I ...
0
votes
1answer
24 views

Track MySQL Procedure Changes in MySQL

We want to keep track of changes being done to MySQL procedures only, actually recently our procedures seem to have overwritten to some previous versions and we were unable to track it that who did ...
0
votes
1answer
463 views

Why securityAdmin does not have enough permission?

I am a server securityAdmin. The securityAdmin role should be treated as equivalent to the sysadmin role, according to Microsoft, but I failed to do below 2 things make myself as sysAdmin grant ...
1
vote
1answer
36 views

MariaDB ran mysql_secure_installation, but seeing remote login attemps in logs

I installed MariaDB and ran mysql_secure_installation and answered yes to all questions to remove anonymous user, test DB, remote login, etc. However, I recently had MariaDB crash and in checking the ...
1
vote
1answer
56 views

denydatawriter does not work in SQL Server

I have a couple of admin roles in a SQL Server 2012. To prevent myself from changing data in one database, I added my login as a member of denydatawriter role to that database. It seems does not ...
0
votes
0answers
31 views

Minimum permissions in PostgreSQL for CRUD and create a table

What is the minimum permissions in PostgreSQL for SELECT/INSERT/UPDATE/DELETE and create a new table? Should the user be the owner of that database, too?
0
votes
1answer
33 views

What security vulnerabilities are there with IDENTITY_INSERT and DBCC CHECKIDENT

I'm writing some simple C# code through a website to take an excel file and update a table on a database. My system admin seems to not want to give me access to pretty much anything including the two ...
0
votes
0answers
359 views

Find Who Disabled Logins in SQL Server

Someone disabled lot of SQL Server logins on one of our SQL Server 2014 boxes yesterday, causing a major outage for some of our applications. I need to find out who disabled those logins. Is there a ...
1
vote
0answers
20 views

Do any databases other than SAP ASE support key custodians?

SAP Sybase ASE supports the notion of a key custodian. This allows for a setup where the trust can be split between two roles: the database administrator and a key custodian. The database ...
3
votes
1answer
635 views

What are SHOWPLAN permission security risks? (MS SQL Server)

I'm having some friction when it comes to showplan permission security. Say there are 5 databases on a server. And each one has a test/ production split (so 10 total). There is one sysadmin. There ...
1
vote
2answers
100 views

Is there an equivalent to Azure SQL Threat Detection for on-premise database servers?

Due to GDPR, we are seeking software to help identify malicious activity or data breaches from our production SQL Server. It seems if we were using Azure, this is a flick of a switch. What is ...