Questions tagged [security]

Allowing users to access only the data they are authorized to access. It also encompasses protection of data during movement on the network and storage on disks and backups.

Filter by
Sorted by
Tagged with
1
vote
1answer
28 views

Should the remote user value be configured to map users defined in Local login or map users not defined in Login login?

Link: https://docs.microsoft.com/en-us/sql/relational-databases/linked-servers/create-linked-servers-sql-server-database-engine?view=sql-server-ver15#to-create-a-linked-server-to-another-instance-of-...
0
votes
1answer
15 views

Postgres RLS: how to error instead of ignoring rows not matched by the policy? [duplicate]

When creating a policy (CREATE POLICY) in postgres it's possible to specify expression to filter out some rows when issuing a SELECT query: CREATE POLICY ... USING ( using_expression ) ... It's also ...
-1
votes
0answers
13 views

What is the minimum permission needed to be able to run SELECT IS_MEMBER('DB_DATAREADER')?

What is the minimum permission needed to be able to run the following SQL query: SELECT IS_MEMBER('DB_DATAREADER')?
0
votes
0answers
10 views

Are There Any Viable Alternatives to Master User Usage in RDS for SQL Server?

I've inherited an RDS instance, and I'm trying to figure out a way to create a server role as similar to that of SA as I can, so that I can give it to a couple of additional employees, without having ...
0
votes
1answer
17 views

How to query the effective permission of sql login (windows and/or sql user)?

How to query the SQL server to fetch the effective permission of the following SQL logins under the Security/Logins: SQL user Windows user Windows group
1
vote
1answer
24 views

What is effective permission if windows user is added as login as well as via group membership; with only public permission given via the user login?

Link: https://docs.microsoft.com/en-us/sql/relational-databases/security/authentication-access/determining-effective-database-engine-permissions?view=sql-server-ver15#principals Remember that a ...
1
vote
1answer
29 views

How to remove user from login (user is already part of group) and keep the jobs?

I have a sql login for windows group. One of the members of ths group was also added as a sql login. This user has 1 job in which he is registered as the owner. I want to remove this user login ...
0
votes
1answer
18 views

Does deleting the login retain the permissions given via group membership?

I have a windows group account added as login in sql server. The group contains around 100 members. The above windows group login is given specific database level permissions like db_datareader, ...
0
votes
1answer
20 views

Explicitly revoke privileges from a user who is a member of a role that is granted those privileges in PostgreSQL

Let's say I have a user on my PostgreSQL instance called "myuser", and I add it to a new group called "update_all" like this: CREATE ROLE update_all WITH NOLOGIN ROLE myuser; I ...
1
vote
0answers
24 views

Service Broker's SEND statement causes security context switch

We have triggers in multiple tables that will send messages to a Service Broker service upon INSERT, UPDATE and DELETE operations. These operations may be nested as parts of bigger, transactional ...
0
votes
0answers
8 views

How to make the Azure MySQL log events for Security Compliance

We currently in the process of the Implementing below Standards required. https://www.cyber.gov.au/acsc/view-all-content/guidance/event-logging-and-auditing Does anyone has any idea on how we can ...
0
votes
0answers
11 views

How to configure a Azure MySQL DBMS software configure according to vendor guidance?

We currently in the process of the Implementing below Standards required. https://www.cyber.gov.au/acsc/view-all-content/guidance/database-management-system-software ISM - 1246 - Hardening and ...
0
votes
0answers
32 views

SQL server encryption

i am using SQL server enterprise edition V.2019 i need to encrypt some columns i liked IBM Guardium for File and Database Encryption but the cost is too high . so i found some other solutions 1- SQL ...
1
vote
0answers
22 views

Azure SQL custom backup role

We are currently running an Elastic Pool within azure to host all our databases. We need to back up these to on-premise as well in case of an emergency, and for it we are trying to use sqlpackage. Now ...
0
votes
0answers
34 views

AWS-RDS database catalog is restricted

I use PostgreSQL 13.2 in AWS-RDS. The database is up and working properly; I can connect with the user provided by Amazon. We need to alter the catalog to enable the implicit cast of integer to ...
0
votes
1answer
70 views

Linked server only works if I am on the machine itself. I can't use it from my local computer. what is missing?

I have a few queries that I use to monitor log shipping. Sometimes I want to run those queries on a different server. I usually do that through a linked server. I have a server called SQLDEV4-TS that ...
0
votes
2answers
632 views

for mongo, not able to create users other than admin with error command createUser requires authentication :

This is the script I am using to create user accounts in MongoDB: mongo <<EOF use admin; db.createUser({user:ram", pwd: "ram123!", roles:['root']}); db.createUser({user:"sam&...
0
votes
2answers
52 views

Lockdown database access on certain tables

I have a dev team who have a number of SQL databases used as a back end for mostly excel front end. This originally came from an excel spreadsheet until it got made into SQL databases. At first, they ...
-1
votes
2answers
37 views

Extremely safe Postgres table permissions

Let's say that I have four tables in my Postgres database, two of which are private and contain highly sensitive information (private1 and private2), and two that contain information I want to allow ...
1
vote
1answer
349 views

Security best practices for SSIS package execution via SQL Agent job

We're trying to rein in the number of sysadmins on our servers, and one of the issues we're running into pertains to SQL Agent security -- especially with regard to SSIS jobs and our ETL team. I ...
1
vote
0answers
21 views

Azure SQL DB and SQL MI Security Concerns

I have 7 different SQL Managed Instances, which were newly migrated over from SQL VM. I also have 7 different Azure SQL Databases, which were also newly created. I want to make sure that I completely ...
0
votes
1answer
58 views

SQL Server, how to log client PID of failed login attempts?

I'm trying to figure out which process is trying to connect to my SQL Server instance with a wrong password. The log file only contains the IP address from where the connection is initiated. Example: ...
0
votes
1answer
17 views

How to setup Mysql master-slave replication with the slave meant for testing where divergence is OK

Problem: I have a staging DB server on which functionality is tested before pushing it to the production environment. Now, we want to start doing VA/PT (Vulnerability Analysis and Penetration Testing) ...
0
votes
1answer
15 views

How to change user privileges from 'Y' to 'N' in MySQL Server?

I want to change a privilege to my glpiuser from 'N' to 'Y'. In MySQL server, what is the command to do this task? Here's the image that display my users. I'm using Ubuntu 20.04.1
0
votes
1answer
44 views

is it safe to grant permission to all users in Microsoft sql server

I have a global production server and database, as I all users should have access to it by remote desktop. Is it possible to grant NTFS permission on all database files (mdf+ldf files) to all users? ...
0
votes
1answer
19 views

Contained User on View - Select permission denied on object 'table1', database 'Database1', schema 'test'

As an example, I have a database called 'Database1' on Azure SQL Server 12.0.2000.8 I needed to setup an account that could only access a view in the database (eg. View1). This was achieved by the ...
1
vote
2answers
178 views

Prevent timing attacks in postgres?

I'm looking into accepting an API token from a user, and I would like to prevent timing attacks. The conventional wisdom seems to be that one should hash the token server-side in order to make the ...
0
votes
1answer
31 views

How do I judge whether a given sql statement has sql injection risk or not [closed]

Analysis the sql comes from sql log only, trying to find out which sql statement has risk of sql injection. it is different from the perspective of application side check.
2
votes
1answer
50 views

Should I use a Domain User account to manage SQL Server (or other services)

As the SQL Server administrator for a server running inside a Windows Domain, I followed some rules: SQL service runs under a Domain User account (least privilege) "sa" has been disabled ...
0
votes
1answer
197 views

Should I provide db_owner principal role to the user of the Azure SQL of my Azure Web App?

I have an Azure Web App connected to an Azure SQL database. Let's call the app ACME. The application has it's own Role and User called ACME, and I gave that User db_owner principal roles. The ...
0
votes
1answer
43 views

Data Factory keeps getting "untrusted connection" error when logging into on prem SQL Server via IR on VM

We have: A local SQL Server database A VM with the Integration Runtime installed on it A Data Factory sharing this IR, working (according to the ADF interface) Logins stored in Key Vault for SQL ...
1
vote
1answer
73 views

How do I copy SQL Server Data Discovery and Classification rules and suppressed recommendations to another database?

We have hundreds of SQL Server databases, all of which share a common schema. We are implementing Data Discovery and Classification policies. We wish to create one rule set and copy it to all like ...
2
votes
5answers
242 views

CREATE Windows User in database for not existing domain

Is it possible to create a Windows User in the database when the domain is not accessible? I am preparing database at my dev environment outside of the targeted domain. Created user is not expected to ...
11
votes
2answers
2k views

Should I drop dbo from the database role db_owner?

I did a Vulnerability Assessment for my database today. I found VA2108 and it suggests me to ALTER ROLE [db_owner] DROP MEMBER [dbo] But it's the default setting of any SQL instance. Should I go for ...
-1
votes
2answers
596 views

Create user for all databases in MongoDB

How can I create a user and grant it read-only access for all databases available in MongoDB (2.2/2.4/2.6) instance? I am new to MongoDB, please provide the detailed, step-by-step process.
0
votes
0answers
36 views

Does PostgreSQL have some ability to "compare" a backup with the live database automatically and neatly?

I make full backups of my PG databases each day. I store these pg_dumped archives/blobs in a dir on the same computer, as well as on offline disks, up to a year before they are culled. I'm constantly ...
0
votes
0answers
11 views

Rotating MongoDB Replica Set Internal Auth Certificate Authority

I noticed that for replica set internal authentication all MongoDB instances must have certificates signed by the same CA. (Source) Rotating individual certificates is sensible, but if I wanted to ...
-1
votes
3answers
326 views

CVE-2021-1636 security update for SQL Server

Microsoft just released this security update CVE-2021-1636 for a Security Vulnerability. Not much information is available at the moment. Any input on the following points will be highly appreciated ...
0
votes
0answers
39 views

Which DBs hide rows INSERT order (header metadata related)?

I discovered that PostgreSQL has a "t_xmin" row header metadata field that is used to store the transaction ID of an INSERT command. So, as I understand, even if I use a random INT primary ...
1
vote
2answers
63 views

Schemas permission in SQL DB

I am a fresh admin in SQL DB and I need to learn how to establish the security settings in SQL DB. I have encountered an issue that is somehow unclear or even weird for me. I know that if one user has ...
2
votes
3answers
419 views

Is it possible to edit data inside an unencrypted SQL Server backup file (*.bak) without SSMS?

I have found out that there is a difference error (Remaining Qty <> (Purchase - Sales)) in one of the items in my database. There are more than 5000 items and more than 100,000 transactions has ...
0
votes
2answers
65 views

Oracle - How do I grant a user permission to create and change passwords for other users (like a security admin)

I have a user that is a security admin in the I.t. dept. I need to grant his Oracle user account privileges to be able to create new users, change passwords and change membership in other groups we ...
0
votes
1answer
86 views

Oracle Database Vault: Changing DV Owner and DV Account-Manager passwords hangs PX Deq: Execute Reply/row cache lock

When changing the password of the users mentioned above the sessions hangs. And it seems to be a deadlock. When changing the password it seems that two sessions are spawned: Blocking session C##...
-1
votes
1answer
86 views

Is there some kind of "undo" or "rewind" feature in PostgreSQL?

Although it has not actually happened in quite a long time, every day, I fear that I will make a mistake such as accidentally deleting the wrong table, or deleting too many records, or doing some kind ...
0
votes
1answer
180 views

Do I have to worry that root user can login into MariaDB 10.5 without password

I remember when installing MySQL Server 8.0, or in some database setups, there are warnings about no password login. Should I worry about this? I think if someone gets access to root user on my debian ...
0
votes
1answer
31 views

Checking vulnerabilities for Oracle Data Integrator version 12.2.1.3.0

I understand October 2020 Oracle patches included security updates for Oracle Data Integrator (ODI) version 12.2.1.3.0. The application admin who is managing ODI for us is really new and used to be ...
-1
votes
1answer
157 views

Azure SQL ports - expect on 1433 - but finding more

Our security department has questioned why we have multiple ports open to our Azure SQL instance. Ports highlighted as LISTENING are 443, 3006, 5002, 5432, 7443 and a few in the 16000 to 16018 area. ...
0
votes
1answer
74 views

SID for SA account

I want to change the SA password for the always on availability group servers. Since i wanted to keep the same password on all the replicas when I tried to transfer the login through Microsoft Stored ...
1
vote
1answer
214 views

SQL Server EXECUTE AS impersonation as RBAC method

I wrote a web application that is using AD authentication (Windows) and has it's own authorization module (like RBAC). Backend is SQL Server. A DBA in my team is not happy with us using a service ...
0
votes
1answer
38 views

Web server accessing the database server in Always on availability group

We have a web server that is on the DMZ but that will need to query a database that resides inside the network. Now the network team wont allow port 1433 from the web server to the Database server. ...

1
2 3 4 5
21