Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Allowing users to access only the data they are authorized to access. It also encompasses protection of data during movement on the network and storage on disks and backups.

1
vote
1answer
35 views

How to copy all firewall rules and apply them on a new server?

I often install new SQL Server Servers. Be them production, test or development. There is one thing I still have not automated and it is time consuming: the firewall settings. I know how to ...
1
vote
1answer
36 views

Is it possible to login to an Oracle schema using a certificate?

The question is based on having to deal with lots of automated processing (testing, mostly). As it stands, all the schemas used have the same well known password, which is stored in lots of ...
0
votes
1answer
28 views

Oracle SecureFiles LOBs Licencing

We argued in our DBA team on whether an Oracle Database with SecureFiles LOBs needs to be an Enterprise Edition. Can I use Oracle Secure File Lobs in a Standard Edition?
1
vote
1answer
35 views

Query of sys.login_token doesn't include particular windows group while connect within workgroup

I had two SQL Server Logins which correspond to two windows groups: MachineName\MyAppAmdin MachineName\MyAppUser And I use select principal_id, name, [type], usage from sys.login_token where ...
0
votes
0answers
34 views

SSL certificate for MS SQL Server

I'm trying to implement SSL certificate on a SQL Server and I already tried two methods. I tried with lets encrypt service and self certificate generated on Powershell. In the first scenario I can ...
1
vote
2answers
40 views

How to Disable Windows Authentication in SQL Server

I would like to say that as per my Organization requirement they want to Disable Windows Authentication in SQL Server. My Environment is as follows:- 1) Microsoft Azure 2) Windows Server 2016 3) ...
0
votes
1answer
22 views

Permanently delete SQL server database - anti recovery

I rent a server from a server provider. And one day I'm no longer rent it. I have some important database on the server need to wipe out so no one can see it. Is that safe to just right click on the ...
0
votes
1answer
30 views

`Encrypt Connection` causes an invalid certificate error even though server-side encryption is forced

I have a SQL Server set up to force encrypted connections from all client. It has a standard SSL certificate, using Let's Encrypt as the CA. Browsing to the server via a web browser verifies that the ...
5
votes
5answers
123 views

How to tell which windows group login I used when logging in via windows authentication

I created two SQL Server Logins which correspond to two windows groups: MachineName\MyAppAmdin MachineName\MyAppUser Then in the database, I created two users with the same name and mapped them to ...
1
vote
1answer
32 views

SQL Server 11.0 and AD Groups

I have a user that has his Active Directory logon set to allow logging into a specific SQL Server, and that works fine. This user is also part of an AD Group that has access to a specific database on ...
2
votes
2answers
64 views

Assembly deployment with permission UNSAFE or EXTERNAL_ACCESS using asymmetric key

When we are trying to deploy an assembly with PERMISSION_SET=UNSAFE or EXTERNAL_ACCESS, we are getting following error message by SQL Server: CREATE ASSEMBLY for assembly 'System.ServiceModel....
1
vote
0answers
25 views

Restrict Source Access to SQL Server Service Account

I have an Audit requirement to ensure that the service accounts (that connect to SQL Server) are not used by anyone but the by the APPLICATION SERVER itself. All other connections attempts must be ...
2
votes
1answer
27 views

pt-kill - how to securely allow access to mysql server when running as service

I know how to run pt-kill as systemd service: [Unit] Description = pt-kill myUser After=syslog.target mysql.service Requires=mysql.service [Service] Type = simple PIDFile = /var/run/ptkill.pid ...
1
vote
1answer
33 views

Microsoft SQL Server v13 bulk add users from active directory

I would like to import all users from Active Directory into Security/Users. What I do is the following: Go to Security -> Users Right click Users -> New User... User type: Windows user, click on '......
1
vote
3answers
45 views

Login report of Sysadmin

We have got a requirement to provide login report from SQL Server for Sysadmin only - This would have log-in date and time when anyone logged into SQL server having sysadmin privilege. Is there ...
0
votes
0answers
36 views

NT SERVICE accounts should be sysadmins? [duplicate]

I have the following query to get me a list of sysadmins in the current server: select 'ServerRole' = SUSER_NAME(rm.role_principal_id), 'MemberName' = lgn.name , 'Status'= Case when ...
0
votes
1answer
16 views

Audit MariaDB Which User Account Privileges Are Being Used

I'm looking to improve the security of my MariaDB installation by better auditing the user accounts and the privileges of each user account. This database is being provided as a service out to many ...
4
votes
1answer
75 views

Security considerations of allowing logical replication subscribers on PostgreSQL

I run a non-profit dedicated to sharing data kind of like Wikipedia. We recently had a client that wanted a replica of our database, and we realized that by using PostgreSQL's new logical ...
0
votes
1answer
27 views

Isolating access to tenant data in a multi-tenant database

We have a single SQL Server database for all tenants of a web-application. How can we ensure when a support engineer queries the DB directly via SSMS, they only touch data belonging to one tenant? ...
0
votes
0answers
15 views

Oracle Advanced Connection Security SQL

I am looking for a way to check the encryption and integrity protection level in effect for the current session. Is there a system view where I can get those details? It would also be good if the ...
1
vote
0answers
91 views

Oracle 11g Select query returns NO ROW SELECTED but the table actually has data

In my production, There is a table named ABC under X schema. I have granted SELECT privilege on ABC table to another user named Z. When I execute the query SELECT COUNT(*) FROM X.ABC; as user Z it ...
-1
votes
1answer
31 views

MongoDb User with readWrite can create database

I dont understand why my user can create data base. The user "toto" with role "readwrite" on DB1 can create a DataBase (db2). And with the same account "toto" I can create a user and affect this user ...
19
votes
5answers
5k views

Is it still best practice to avoid using the default ports for SQL Server?

Historically, it has been recommended not to use the default ports for connections to SQL Server, as part of security best practice. On a server with a single, default instance, the following ports ...
1
vote
1answer
67 views

Is it best practice to revoke server permissions to the server “public” role on SQL Server instances?

We have evaluated the Microsoft "best practice" policies (located at C:\Program Files (x86)\Microsoft SQL Server\number\Tools\Policies\DatabaseEngine\1033) on each of our SQL Server instances (example ...
0
votes
1answer
84 views

when to use a TCP dynamic port and when TCP Port?

I have a new server that is configured using a dynamic port as you can see below: The application that connects to this server uses the following connection string, but I am getting the following ...
1
vote
1answer
48 views

Is it overkill to encrypt an already hashed BCrypt password?

I'm using BCrypt to hash my passwords on the server side. Before I store it in my MySQL database, would it be overkill to encrypt my hashed-BCrypt password or would storing the hash directly in the ...
1
vote
1answer
32 views

Database Reader Role with the ability to Create, View and execute stored procedure's and view's in sql server

I will need to allow report writers on the Subscription database to be able to view the table, create alter and delete stored procedure and views. Since it is a transactional replication they cannot ...
-1
votes
1answer
28 views

Determining what user data fields to protect within a database?

Besides passwords, credit/debit card info, social security info, passport info, what other types of data fields should be hashed to give it an additional layer of protection within any database? ...
-1
votes
0answers
12 views

How do I inspect the certificate used to protect an MS SQL Server endpoint?

I have a hostname and a port. How do I inspect the public X.509 certificate used to protect the endpoint. It is possible to talk to the SQL server both encrypted and non-encrypted; however I have ...
0
votes
1answer
118 views

cross database ownership - The server principal is not able to access the database under the current security context

I have this script that set a bunch of databases to the same db owner, and set cross database ownership on at database level select database_name=name, db_owner_name=suser_sname(owner_sid), ...
4
votes
1answer
233 views

How to send secure emails using sp_send_dbmail

When using sp_send_dbmail to send an email on SQL Server, how do you specify that the email be sent in an encrypted format? I found a thread discussing including the string "[SECURE]" in the subject ...
1
vote
1answer
49 views

how to script out all the permissions in a folder using powershell?

Using the script below I find out where are the data and log folders: declare @rc int, @dir nvarchar(4000) declare @data nvarchar(4000) declare @log nvarchar(4000) ...
0
votes
1answer
88 views

How to Oracle DBLink encryption

I have the environment that I explain below and I need to encrypt the data that is sent between my two nodes, I have been reading but I can not find the right solution, I explain: I have an Oracle ...
2
votes
1answer
441 views

Logon failed for login due to trigger execution

I have been trying to login using one of my sql server logins but I am getting the error message below: General Error Message Copy Message Text TITLE: Connect to Server -----------------------------...
0
votes
1answer
53 views

Is it possible to store Always Encrypted master key an on-premises key vault? [closed]

I want to store the master key in a centralize key vault and have IIS access the key from there. I know I can use Azure Key Vault or local Windows key store, but I was looking for another option to ...
1
vote
1answer
28 views

Oracle RMAN encryption

I would like to know if it is possible given a certain backup made with RMAN in Oracle 12c is encrypted without having to restore said backup, is there any or some queries that verify if an RMAN ...
1
vote
1answer
84 views

what is the difference between db_datareader and db_denydatawriter?

I am trying to assign a SQL Server database role to a user who just needs to be able to see data across all tables. I was wondering what is the difference between db_datareader and db_denydatawriter? ...
0
votes
0answers
49 views

How to get environmental properties during a row security policies?

I am developing a REST AOI backed by PostgreSQL. Users of the API must pass a session token in the Authorization header. For example: Authorization: Bearer fcda6eca-71c4-456c-a4df-4e398b11fa00 This ...
1
vote
1answer
43 views

Implement row-level security as a user table or millions of roles? [closed]

PostgresSQL 10.4 is our backend database for a consumer-facing app with millions of users. When implementing row-level security so each user can only access their own data, is it best practice to use ...
0
votes
1answer
32 views

Advanced threat detection vs IP restriction

If we configured IP restriction to allow only internal network, then why we need threat detection? IP restriction already blocks connections from other resources. Moreover, advanced threat detection ...
4
votes
1answer
293 views

Purpose of SQL Server Application Roles

I've been reading up on application roles in Microsoft SQL server. It seems an application role is like any other role in that permissions on securables can be granted to an application role, however, ...
2
votes
1answer
45 views

Does a user who has permissions to select from a view also need select granted to the children entities of that view?

If view 1 uses tables A and B, and a user has SELECT granted on view 1 is that sufficient for the user to select from view 1 or does he also need SELECT granted on tables A and B. Specific details on ...
2
votes
3answers
74 views

Cleaning up specific domain logins on about 50 servers and therefore the users

There is a specific need to clean up logins from the SQL Servers after migration from one domain say abc to new domain foo. After migration as we still have those old logins and users under naming of ...
0
votes
2answers
622 views

Connection Manager in SSIS 2017 Package NOT Saving the Password

We're using Visual Studio 15.7.2 and using SSIS on SQL 2017 (14.0.3029.16). We built a connection manager to a 3rd-party, vendor managed SQL Server 2008 R2 (10.50.6529.0). Our only allowed ...
5
votes
2answers
86 views

How secure is an Azure database within Microsoft?

I am considering moving most of my Databases to Azure SQL server Database, but I am concerned that Microsoft will be able to snoop and look at the data inside the database, which is absolutely not ...
0
votes
1answer
73 views

Oracle data access restriction

I am working on some data access restriction feature in Oracle 11g and have been struggling since then. What I want to achieve is, that I want to allow a specific group only to access a particular ...
0
votes
0answers
30 views

How to write complex expressions while creating a row-level security policy in Postgresql

I've got a table structure where A has records with an owner ID, B links to A, and C links to B. I want to restrict access to rows in C by the ownerId, which is set as a setting on the session in the ...
0
votes
0answers
49 views

Make the linked server ask for password

Till today i am using the linked server with the user of sql having same username and password in both the servers. For now on i can not keep the 2 servers password same for some reason and i still ...
-1
votes
1answer
57 views

SQL Server Intellectual Property (Protecting DB Structure and Relations)

I would like to know is there any update about protecting DB Structure? We deliver a licensed app that uses SQL as its main DBMS and we would like to lock the database structure (schema). I know I ...
2
votes
1answer
85 views

Hide databases from SQL Server with AG

I have 10 databases on a server. Each database is part of a different AG. Each database has its own listener. Can I hide all databases and show only the one database belonging to a listener? I also do ...