Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
The results are in! See what nearly 90,000 developers picked as their most loved, dreaded, and desired coding languages and more in the 2019 Developer Survey.

Questions tagged [security]

Allowing users to access only the data they are authorized to access. It also encompasses protection of data during movement on the network and storage on disks and backups.

0
votes
0answers
7 views

Windows Application MySQL Error Log Activity

I have a MySQL DB that has a publicly exposed port w/ limited IPs. I started getting errors in my Windows Application Error Log with Source=MySql and EventId=100. They are all some form of IP ...
1
vote
1answer
45 views

Dangerous MySQL functions

It is well-known that the SQL function SLEEP() can be used to attack web applications, e.g. as described here. The sleep function cannot be disabled since it is compiled into the MySQL code and does ...
0
votes
0answers
18 views

What are PostgreSQL Security Labels?

What are PostgreSQL Security Labels and how/where to use them compared to GRANT?
2
votes
1answer
66 views

Intermittent Login Issues with Windows Authentication

I have a strange one. I've been experiencing occasional login errors via windows authentication for the past couple weeks and the network team and I have yet to find a solution. I am running SQL 2016 ...
0
votes
0answers
12 views

Restrict EDIT and DELETE actions on local database [on hold]

in my current project the user setups an application locally on his machine and interacts without any internet connection. All his actions in the application are stored in a database. The problem with ...
0
votes
1answer
16 views

enable the data access for the current server - is this operation logged somewhere?

I have a similar question related to the same subject: security concerns over enabling data access for the current server BEGIN TRY PRINT @@SERVERNAME PRINT DB_NAME() PRINT 'enable the ...
0
votes
1answer
45 views

What is the minimum input length required for sql injection?

Perhaps this belongs on the 'golf code' stack or elsewhere, if so, apologies and I'll remove it. I have been working on a older application and re-writing SQL statements as postgres functions to help ...
0
votes
1answer
65 views

Login failed for user NT AUTHORITY\IUSR

I have some developer colleagues in my office that are having a problem similar to this one: db connection uses an anonymous logon instead of the domain user the connection string (he is working on ...
0
votes
0answers
55 views

Column level security in SQL server

Is it possible to assign column level security in SQL Server directly on a table, without using a view? For example, for table 'tbl', if I want column 1 to be restricted for user 1, is it possible ...
1
vote
1answer
55 views

File permissions for database backups and certificate backups

I have backed up a database and backed up the database master key to the very same folder. Everyone has full access to this folder, however, only the database backup inherits the permissions of the ...
2
votes
0answers
41 views

Questions and advice for complying with Federal tax information (FTI) Security Guidelines for Federal, State and Local Agencies per Publication 1075

I've been able to find writings on compliance topics (e.g. HIPAA, SARBANES-OXLEY, PCI DSS) but I haven't found much on FTI (Federal tax information) and Publication 1075 outside of the IRS website ...
0
votes
1answer
61 views

How do I add a directory, or bulk, of users to Microsoft SQL Server permissions

I have a front end program in Visual Basic that is using SQL Server as a "back end". The only way I can get permission for login to use the SQL server is by adding each name or computer individually ...
0
votes
1answer
41 views

Security user audit

This has probably been asked a million times already and for this i apologise, but is there a way or any T-SQL I can run that will tell me, the server, the database, users login name, what permissions ...
0
votes
1answer
18 views

MySQL - The DBMS must maintain a separate execution domain for each executing process

I'm trying to get a government system hardened and during that process I have to answer certain criteria. One of them is the below:  Rule Title: The DBMS must maintain a separate execution domain ...
0
votes
1answer
43 views

how to get complementary information from sp_readerrorlog

when auditing what are the failing logins in one of my server, using the sp_readerrorlog procedure I get the following result, when running the following query: EXEC sp_readerrorlog 0, 1, 'Login ...
0
votes
1answer
24 views

How to encrypt/secure single columns ins SQL Server?

I would like to secure some columns in my data warehouse. People who are generally allowed to query the database should get returned the columns but encoded. For example: SELECT PERSON_ID FROM PERSON ...
1
vote
0answers
30 views

sql server connectivity broke down to server after its IP address has moved to a subnet. How to restore its connectivity?

I a server called Vermont on a different domain, with a trust relationship. I can ping the server there. But when I try to connect to it, from my SSMS I get the following error: I used to connect ...
0
votes
0answers
25 views

Allowing a user to grant SELECT and VIEW DEFINITION permissions only on objects they create

How do I give access to a user so that they can grant SELECT and VIEW DEFINITION on any objects they create in a database. For example, I have a user MyUser in the roles db_datareader db_datawriter ...
2
votes
1answer
32 views

SSIS best practice to allow easily swappable/ secure/ accessible Database Connections?

I come from Pentaho PDI. There, I learned to have scripts load data to a [VariableDB]. That way, I can either initiate that VariableDB at runtime to "ProdDB" or even set the variable to different ...
3
votes
2answers
229 views

CREATE ASSEMBLY System.DirectoryServices.AccountManagement.dll without enabling TRUSTWORTHY

First, this is for SQL Server 2016. If I was on 2017+, I would be using sp_add_trusted_assembly. Just wanted to clarify that before asking the question. How do you register the assembly System....
1
vote
1answer
37 views

SQL Server TDE - Database backups and post restore behaviour

Below is my SQL Server details: SQL Server 2014 Enterprise SP2 GDR with Availability Group configured. List item NOTE: The Databases are FileStream Enabled. Below are the series of actions I did ...
0
votes
1answer
131 views

How to grant Unmask permission to a user at table level and column level in sql server?

How to grant unmask permission to a user for one particular table and to one particular column within a table? For example, if in table1 if column1 and column2 is masked and in table2 if column3 and ...
1
vote
1answer
50 views

How to safe delete (shred) a MySQL database?

I want to store sensitive data in a MySQL database for a while, so I'd like to know a way to delete a MySQL database without having a chance of recovery. In Linux, we have a tool named shred which ...
12
votes
2answers
1k views

Does changing “sa” password require a SQL restart (in mixed mode)?

We discovered a SQL "sa" account being used in a way it should not have been, so we are changing sa passwords on all our SQL instances. (We have SQL 2005 through 2017 servers running in mixed ...
1
vote
0answers
16 views

MS SQL 2008 R2, security and auditing

I have an 2008R2 SQL Server. There are a few AD groups added to the logins. Each group must have some permissions (and only these permissions if possible). Can someone help me with a few questions: ...
0
votes
0answers
21 views

How does LBAC (Label Based Access Control) work?

I'm having a hard time to understand how an LBAC works? What is the difference between label security and security policy? An example is much appreciated.
0
votes
1answer
16 views

PostgreSQL's PGP_SYM_ENCRYPT log security

In one of our project, I tried to use PostgreSQL's security extension pgcrypto. I found that is function, PGP_SYM_ENCRYPT is quite handy. Using this function enable me to query encrypted data with ...
0
votes
0answers
29 views

Allowing login creations without giving Security Admin Role in SQL Server

Is there any way i can allow some user to create logins without giving Alter any Login Permission or Security Admin Role? I need to grant that access but prevent that person from giving himself ...
0
votes
1answer
194 views

What's the difference between aud$ and dba_audit_trail tables in Oracle database?

I'm studying about audit in Oracle database and when I configure the audit using audit_trail = db the Oracle stores in the two tables
1
vote
1answer
29 views

Linked Server Configuration using remote user logins

I'm trying to configure a Linked Server using remote logins reducing who has access to the linked server by taking advantage of the not be made option. For test purposes alone, I have used SA, ...
1
vote
0answers
31 views

How to switch session role securely?

I'd like to setup a service through which my users can submit SQL queries to a database wherein I store some data. Users are assigned to organizations, and I've setup views that provide read access ...
1
vote
0answers
55 views

Giving Access to only one SQL Agent Job

I will only need to allow a user to execute a specific sql agent job rather than be able to execute the other jobs that are there . Please advice how to accomplish this
1
vote
3answers
101 views

Change SQL Server service account without restarting SQL Server

For security reasons, we want to change the password that starts the SQL Server service everyday. Is it possible to do this without restarting the service? If it is possible will the changes be ...
0
votes
1answer
31 views

SQL Server Linked Server sa [closed]

Should a linked server be created using the sa account as the security context? Why / why not?
1
vote
0answers
89 views

Grant permissions over linked server

I need to grant select permissions to a sensitive table over the linked server. This table should only grant access to members of an AD group. I currently have other linked servers set up with remote ...
0
votes
1answer
111 views

How to trace security_error_ring_buffer_recorded errors in SQL Server 2014 Express

Just so everyone doesn't have a high expectation of my level of knowledge on this topic, I'm not a DBA; I'm a .NET developer who has to try and figure this out by virtue of being "the one most likely ...
1
vote
1answer
36 views

Alternative to MS Acess for in-house user database [closed]

I am a working student at a bank and my current task is to create an in-house database for customer-specific lookups which often rely on complex underlying data aggregation from different sources. I ...
0
votes
1answer
46 views

A AFTER INSERT trigger error for security context

A trigger has stopped working since we have changed our SQL Server to a new server. Trigger is now being corrected to point to the new location of the table on the new server. When updating fields on ...
1
vote
1answer
48 views

How to copy all firewall rules and apply them on a new server?

I often install new SQL Server Servers. Be them production, test or development. There is one thing I still have not automated and it is time consuming: the firewall settings. I know how to ...
1
vote
1answer
39 views

Is it possible to login to an Oracle schema using a certificate?

The question is based on having to deal with lots of automated processing (testing, mostly). As it stands, all the schemas used have the same well known password, which is stored in lots of ...
0
votes
1answer
48 views

Oracle SecureFiles LOBs Licencing

We argued in our DBA team on whether an Oracle Database with SecureFiles LOBs needs to be an Enterprise Edition. Can I use Oracle Secure File Lobs in a Standard Edition?
1
vote
1answer
43 views

Query of sys.login_token doesn't include particular windows group while connect within workgroup

I had two SQL Server Logins which correspond to two windows groups: MachineName\MyAppAmdin MachineName\MyAppUser And I use select principal_id, name, [type], usage from sys.login_token where ...
1
vote
0answers
41 views

SSL certificate for MS SQL Server

I'm trying to implement SSL certificate on a SQL Server and I already tried two methods. I tried with lets encrypt service and self certificate generated on Powershell. In the first scenario I can ...
1
vote
2answers
143 views

How to Disable Windows Authentication in SQL Server

I would like to say that as per my Organization requirement they want to Disable Windows Authentication in SQL Server. My Environment is as follows:- 1) Microsoft Azure 2) Windows Server 2016 3) ...
0
votes
1answer
28 views

Permanently delete SQL server database - anti recovery

I rent a server from a server provider. And one day I'm no longer rent it. I have some important database on the server need to wipe out so no one can see it. Is that safe to just right click on the ...
0
votes
1answer
41 views

`Encrypt Connection` causes an invalid certificate error even though server-side encryption is forced

I have a SQL Server set up to force encrypted connections from all client. It has a standard SSL certificate, using Let's Encrypt as the CA. Browsing to the server via a web browser verifies that the ...
5
votes
5answers
204 views

How to tell which windows group login I used when logging in via windows authentication

I created two SQL Server Logins which correspond to two windows groups: MachineName\MyAppAmdin MachineName\MyAppUser Then in the database, I created two users with the same name and mapped them to ...
1
vote
1answer
34 views

SQL Server 11.0 and AD Groups

I have a user that has his Active Directory logon set to allow logging into a specific SQL Server, and that works fine. This user is also part of an AD Group that has access to a specific database on ...
2
votes
2answers
183 views

Assembly deployment with permission UNSAFE or EXTERNAL_ACCESS using asymmetric key

When we are trying to deploy an assembly with PERMISSION_SET=UNSAFE or EXTERNAL_ACCESS, we are getting following error message by SQL Server: CREATE ASSEMBLY for assembly 'System.ServiceModel....
1
vote
0answers
25 views

Restrict Source Access to SQL Server Service Account

I have an Audit requirement to ensure that the service accounts (that connect to SQL Server) are not used by anyone but the by the APPLICATION SERVER itself. All other connections attempts must be ...