Questions tagged [security]

Allowing users to access only the data they are authorized to access. It also encompasses protection of data during movement on the network and storage on disks and backups.

Filter by
Sorted by
Tagged with
1
vote
1answer
73 views

Unable to restrict user from built in SQL Server Functions

We have a SQL Server (Standard) database with a user whom we are attempting to restrict permissions to only CRUD Operations to certain tables (CREATE, SELECT, UPDATE, DELETE) and only allow connect ...
0
votes
2answers
29 views

How to make a restricted view in oracle?

I had to provide data for an application schema, but there is a requirement that the applications connecting using that schema user cannot query more than five rows at a time, the application queries ...
0
votes
1answer
17 views

ALTER permission on database allows creation of security principals

It appears the ALTER permission granted at the database level allows the principal to which it is granted, to create security principals in the database. Consider the below example: /* setup database *...
0
votes
1answer
24 views

Achieving best practice schema and permissions management on PostgreSQL

I have a PostgreSQL database (12, moving to 13 imminently) with a single (Rails) application running on it, and no other users or systems connecting. The application uses the postgres user to connect ...
0
votes
2answers
29 views

Operation level authorization in PostgreSQL

I'm developing an analytics application that provides multiple levels of visualization of a data warehouse in a Postgres DB. One of its requirements is that different users should have different ...
0
votes
1answer
39 views

SQL Server User permissions-Hide all tables and give/show access to some views

I am using SQL Server 2019. I have gone through some questions here and not found an answer. I am trying to not to show some tables (with a certain Schema e.g. Structure) for a SPECIFIC user in the ...
1
vote
1answer
30 views

Should the remote user value be configured to map users defined in Local login or map users not defined in Login login?

Link: https://docs.microsoft.com/en-us/sql/relational-databases/linked-servers/create-linked-servers-sql-server-database-engine?view=sql-server-ver15#to-create-a-linked-server-to-another-instance-of-...
0
votes
1answer
16 views

Postgres RLS: how to error instead of ignoring rows not matched by the policy? [duplicate]

When creating a policy (CREATE POLICY) in postgres it's possible to specify expression to filter out some rows when issuing a SELECT query: CREATE POLICY ... USING ( using_expression ) ... It's also ...
0
votes
0answers
13 views

Are There Any Viable Alternatives to Master User Usage in RDS for SQL Server?

I've inherited an RDS instance, and I'm trying to figure out a way to create a server role as similar to that of SA as I can, so that I can give it to a couple of additional employees, without having ...
0
votes
1answer
17 views

How to query the effective permission of sql login (windows and/or sql user)?

How to query the SQL server to fetch the effective permission of the following SQL logins under the Security/Logins: SQL user Windows user Windows group
1
vote
1answer
24 views

What is effective permission if windows user is added as login as well as via group membership; with only public permission given via the user login?

Link: https://docs.microsoft.com/en-us/sql/relational-databases/security/authentication-access/determining-effective-database-engine-permissions?view=sql-server-ver15#principals Remember that a ...
1
vote
1answer
30 views

How to remove user from login (user is already part of group) and keep the jobs?

I have a sql login for windows group. One of the members of ths group was also added as a sql login. This user has 1 job in which he is registered as the owner. I want to remove this user login ...
0
votes
1answer
19 views

Does deleting the login retain the permissions given via group membership?

I have a windows group account added as login in sql server. The group contains around 100 members. The above windows group login is given specific database level permissions like db_datareader, ...
0
votes
1answer
22 views

Explicitly revoke privileges from a user who is a member of a role that is granted those privileges in PostgreSQL

Let's say I have a user on my PostgreSQL instance called "myuser", and I add it to a new group called "update_all" like this: CREATE ROLE update_all WITH NOLOGIN ROLE myuser; I ...
1
vote
0answers
25 views

Service Broker's SEND statement causes security context switch

We have triggers in multiple tables that will send messages to a Service Broker service upon INSERT, UPDATE and DELETE operations. These operations may be nested as parts of bigger, transactional ...
0
votes
0answers
8 views

How to make the Azure MySQL log events for Security Compliance

We currently in the process of the Implementing below Standards required. https://www.cyber.gov.au/acsc/view-all-content/guidance/event-logging-and-auditing Does anyone has any idea on how we can ...
0
votes
0answers
11 views

How to configure a Azure MySQL DBMS software configure according to vendor guidance?

We currently in the process of the Implementing below Standards required. https://www.cyber.gov.au/acsc/view-all-content/guidance/database-management-system-software ISM - 1246 - Hardening and ...
0
votes
0answers
32 views

SQL server encryption

i am using SQL server enterprise edition V.2019 i need to encrypt some columns i liked IBM Guardium for File and Database Encryption but the cost is too high . so i found some other solutions 1- SQL ...
1
vote
0answers
23 views

Azure SQL custom backup role

We are currently running an Elastic Pool within azure to host all our databases. We need to back up these to on-premise as well in case of an emergency, and for it we are trying to use sqlpackage. Now ...
0
votes
0answers
39 views

AWS-RDS database catalog is restricted

I use PostgreSQL 13.2 in AWS-RDS. The database is up and working properly; I can connect with the user provided by Amazon. We need to alter the catalog to enable the implicit cast of integer to ...
0
votes
1answer
91 views

Linked server only works if I am on the machine itself. I can't use it from my local computer. what is missing?

I have a few queries that I use to monitor log shipping. Sometimes I want to run those queries on a different server. I usually do that through a linked server. I have a server called SQLDEV4-TS that ...
0
votes
2answers
872 views

for mongo, not able to create users other than admin with error command createUser requires authentication :

This is the script I am using to create user accounts in MongoDB: mongo <<EOF use admin; db.createUser({user:ram", pwd: "ram123!", roles:['root']}); db.createUser({user:"sam&...
0
votes
2answers
53 views

Lockdown database access on certain tables

I have a dev team who have a number of SQL databases used as a back end for mostly excel front end. This originally came from an excel spreadsheet until it got made into SQL databases. At first, they ...
-1
votes
2answers
38 views

Extremely safe Postgres table permissions

Let's say that I have four tables in my Postgres database, two of which are private and contain highly sensitive information (private1 and private2), and two that contain information I want to allow ...
1
vote
1answer
465 views

Security best practices for SSIS package execution via SQL Agent job

We're trying to rein in the number of sysadmins on our servers, and one of the issues we're running into pertains to SQL Agent security -- especially with regard to SSIS jobs and our ETL team. I ...
1
vote
0answers
24 views

Azure SQL DB and SQL MI Security Concerns

I have 7 different SQL Managed Instances, which were newly migrated over from SQL VM. I also have 7 different Azure SQL Databases, which were also newly created. I want to make sure that I completely ...
0
votes
1answer
76 views

SQL Server, how to log client PID of failed login attempts?

I'm trying to figure out which process is trying to connect to my SQL Server instance with a wrong password. The log file only contains the IP address from where the connection is initiated. Example: ...
0
votes
1answer
17 views

How to setup Mysql master-slave replication with the slave meant for testing where divergence is OK

Problem: I have a staging DB server on which functionality is tested before pushing it to the production environment. Now, we want to start doing VA/PT (Vulnerability Analysis and Penetration Testing) ...
0
votes
1answer
16 views

How to change user privileges from 'Y' to 'N' in MySQL Server?

I want to change a privilege to my glpiuser from 'N' to 'Y'. In MySQL server, what is the command to do this task? Here's the image that display my users. I'm using Ubuntu 20.04.1
0
votes
1answer
44 views

is it safe to grant permission to all users in Microsoft sql server

I have a global production server and database, as I all users should have access to it by remote desktop. Is it possible to grant NTFS permission on all database files (mdf+ldf files) to all users? ...
0
votes
1answer
24 views

Contained User on View - Select permission denied on object 'table1', database 'Database1', schema 'test'

As an example, I have a database called 'Database1' on Azure SQL Server 12.0.2000.8 I needed to setup an account that could only access a view in the database (eg. View1). This was achieved by the ...
1
vote
2answers
209 views

Prevent timing attacks in postgres?

I'm looking into accepting an API token from a user, and I would like to prevent timing attacks. The conventional wisdom seems to be that one should hash the token server-side in order to make the ...
0
votes
1answer
31 views

How do I judge whether a given sql statement has sql injection risk or not [closed]

Analysis the sql comes from sql log only, trying to find out which sql statement has risk of sql injection. it is different from the perspective of application side check.
2
votes
1answer
58 views

Should I use a Domain User account to manage SQL Server (or other services)

As the SQL Server administrator for a server running inside a Windows Domain, I followed some rules: SQL service runs under a Domain User account (least privilege) "sa" has been disabled ...
0
votes
1answer
208 views

Should I provide db_owner principal role to the user of the Azure SQL of my Azure Web App?

I have an Azure Web App connected to an Azure SQL database. Let's call the app ACME. The application has it's own Role and User called ACME, and I gave that User db_owner principal roles. The ...
0
votes
1answer
53 views

Data Factory keeps getting "untrusted connection" error when logging into on prem SQL Server via IR on VM

We have: A local SQL Server database A VM with the Integration Runtime installed on it A Data Factory sharing this IR, working (according to the ADF interface) Logins stored in Key Vault for SQL ...
1
vote
1answer
82 views

How do I copy SQL Server Data Discovery and Classification rules and suppressed recommendations to another database?

We have hundreds of SQL Server databases, all of which share a common schema. We are implementing Data Discovery and Classification policies. We wish to create one rule set and copy it to all like ...
2
votes
5answers
302 views

CREATE Windows User in database for not existing domain

Is it possible to create a Windows User in the database when the domain is not accessible? I am preparing database at my dev environment outside of the targeted domain. Created user is not expected to ...
13
votes
2answers
2k views

Should I drop dbo from the database role db_owner?

I did a Vulnerability Assessment for my database today. I found VA2108 and it suggests me to ALTER ROLE [db_owner] DROP MEMBER [dbo] But it's the default setting of any SQL instance. Should I go for ...
-1
votes
2answers
829 views

Create user for all databases in MongoDB

How can I create a user and grant it read-only access for all databases available in MongoDB (2.2/2.4/2.6) instance? I am new to MongoDB, please provide the detailed, step-by-step process.
0
votes
0answers
40 views

Does PostgreSQL have some ability to "compare" a backup with the live database automatically and neatly?

I make full backups of my PG databases each day. I store these pg_dumped archives/blobs in a dir on the same computer, as well as on offline disks, up to a year before they are culled. I'm constantly ...
0
votes
0answers
13 views

Rotating MongoDB Replica Set Internal Auth Certificate Authority

I noticed that for replica set internal authentication all MongoDB instances must have certificates signed by the same CA. (Source) Rotating individual certificates is sensible, but if I wanted to ...
-1
votes
3answers
358 views

CVE-2021-1636 security update for SQL Server

Microsoft just released this security update CVE-2021-1636 for a Security Vulnerability. Not much information is available at the moment. Any input on the following points will be highly appreciated ...
0
votes
0answers
39 views

Which DBs hide rows INSERT order (header metadata related)?

I discovered that PostgreSQL has a "t_xmin" row header metadata field that is used to store the transaction ID of an INSERT command. So, as I understand, even if I use a random INT primary ...
1
vote
2answers
63 views

Schemas permission in SQL DB

I am a fresh admin in SQL DB and I need to learn how to establish the security settings in SQL DB. I have encountered an issue that is somehow unclear or even weird for me. I know that if one user has ...
2
votes
3answers
445 views

Is it possible to edit data inside an unencrypted SQL Server backup file (*.bak) without SSMS?

I have found out that there is a difference error (Remaining Qty <> (Purchase - Sales)) in one of the items in my database. There are more than 5000 items and more than 100,000 transactions has ...
0
votes
2answers
116 views

Oracle - How do I grant a user permission to create and change passwords for other users (like a security admin)

I have a user that is a security admin in the I.t. dept. I need to grant his Oracle user account privileges to be able to create new users, change passwords and change membership in other groups we ...
0
votes
1answer
101 views

Oracle Database Vault: Changing DV Owner and DV Account-Manager passwords hangs PX Deq: Execute Reply/row cache lock

When changing the password of the users mentioned above the sessions hangs. And it seems to be a deadlock. When changing the password it seems that two sessions are spawned: Blocking session C##...
-1
votes
1answer
97 views

Is there some kind of "undo" or "rewind" feature in PostgreSQL?

Although it has not actually happened in quite a long time, every day, I fear that I will make a mistake such as accidentally deleting the wrong table, or deleting too many records, or doing some kind ...
0
votes
1answer
210 views

Do I have to worry that root user can login into MariaDB 10.5 without password

I remember when installing MySQL Server 8.0, or in some database setups, there are warnings about no password login. Should I worry about this? I think if someone gets access to root user on my debian ...

1
2 3 4 5
21