Skip to main content

Questions tagged [security]

Allowing users to access only the data they are authorized to access. It also encompasses protection of data during movement on the network and storage on disks and backups.

Filter by
Sorted by
Tagged with
0 votes
1 answer
51 views

Does granting execute stored procedures (all) implicitly allow any critical privileges?

Does granting execute stored procedures (all) implicitly allow any critical privileges? For example privilege to control security, etc, by runing the relevant stored procs? The way to grant execute ...
variable's user avatar
  • 3,554
0 votes
1 answer
44 views

Sql Server - Unable to create new database due to lack of admin role [duplicate]

I can log onto Sql Server Management Studio without issues. I can't create a new DB however as it appears that I don't have permissions. I can't give myself more permissions I can't modify the SA ...
Amanda Brandimore's user avatar
0 votes
0 answers
32 views

SQL - AD Security Group name changing in AD, effects?

I have been granting the permissions within SQL Server to an AD Group(Server-Level). If I change an AD security group name from "companyA_SQL_Server_DBA_Users" to "...
Cell-o's user avatar
  • 1,088
0 votes
0 answers
62 views

How to prevent user from connecting via SSMS but allow query via .net application connectionstring?

I have been given task to create a SQL login that can be used to query the db via a .net application connection string. But the user shouldn't be able to connect to SQL via SSMS. I have created the ...
variable's user avatar
  • 3,554
0 votes
1 answer
64 views

Connecting to SQL Server from externally with proxy server

I have a server running SQL Server 2022 with a couple of instances. There is the need to grant access to an external supplier working with us on a project. The idea is: the supplier connects to our ...
aganju82's user avatar
0 votes
1 answer
17 views

Issue with DBSAT Tool Stuck at "Setup Complete" Stage

We want to perform a security assessment on our database using the DBSAT tool. However, we are facing an issue. When I run the DBSAT, it gets stuck at the "Setup complete" stage and does not ...
Mahammadali Aghabayli's user avatar
0 votes
0 answers
46 views

Role management in SQL Server

What is the best way to manage roles in sql server in Azure VMs (multiple). We want separate logins for each users but it should be same on all Azure SQL VMs. We are currently using windows ...
Bishal Basyal's user avatar
0 votes
0 answers
29 views

Audit attempts to access the Database, only failed for some users and all attempts for the rest

I am needing help to be able to configure an audit mechanism that allows me to record in the audit_trail the login (or create session) attempts in my databases, the problem comes when I need to record ...
miguel ramires's user avatar
1 vote
0 answers
33 views

Using impersonation from External Script?

We're on SQL Server 2022, and want to use Impersonation when accessing another (remote) SQL Server from our Python code (our external script). I.e., the security credentials on the remote SQL Server ...
Tibor Karaszi's user avatar
0 votes
1 answer
47 views

What is harm in marking a function as LEAKPROOF in PostgreSQL when row level security is in effect in a single tenant setup?

I am trying to understand the implications in marking a PostgreSQL function as LEAKPROOF. Let us say we have a (single tenant) web application setup, which is Browser -> Server (Django, Rails, etc.)...
rationaltiger24's user avatar
0 votes
1 answer
28 views

MySQL Stored Procedure security best practises

Sorry if this has been answered before but what is the "correct" way to set up security for a stored procedure? Scenario is I want execute permissions only for the logged on web user and ...
Andy's user avatar
  • 1
0 votes
2 answers
88 views

How does this user log in to the database server, when its login is deactivated on the database server?

I've specifically disabled a login on the database server. This is an Azure hosted SQL-as-a-Service database. alter login [********@hotmail.com] disable Here's what the login looks like on the server....
Yossi Geretz's user avatar
1 vote
1 answer
22 views

Logical replication security risk with run_as_owner = false

The docs say If the subscription has been configured with run_as_owner = true, then no user switching will occur. Instead, all operations will be performed with the permissions of the subscription ...
Felipe's user avatar
  • 305
0 votes
0 answers
27 views

LocalDB with linked table to SQL Server error 7412 switching from non-admin to admin privileges

We are experiencing a strange issue using a localDB with linked tables to an SQL Server instance using SQL 2019. We see the issue in our own software but can also reproduce it using SQLSMS. The steps ...
RAC's user avatar
  • 1
0 votes
1 answer
46 views

Can I password protect a specific ms sql database view?

I have an MS SQL database with a View that contains sensitive data in one column. Typically, users will consume this View in Power BI. As additional security, is it possible to password protect the ...
jbyrne's user avatar
  • 1
0 votes
2 answers
120 views

Tool for monitoring changes to data in a database

I regularly back up my MariaDB databases using mariadb-dump (mariadb's mysqldump). However, I want to ensure data integrity in either of these cases: a vulnerability in an application using a ...
kataba's user avatar
  • 33
0 votes
0 answers
684 views

Microsoft SQL Server Extension Agent - Where is it enabled

This is on a SQL Server 2016 SP1-CU3 Recently, these entries are appearing in our Security log table which traces any grants, revokes, user creation, etc. And the host that is dropping these users ...
Craig Efrein's user avatar
  • 9,640
2 votes
2 answers
52 views

SQL Server DWH architecture question

We have SQL Server DWH server. It has dwh_raw, dwh_prod and so on databases with client data, business operations. Now there is a task to allocate new data - on employees, their salaries and so on. Is ...
George K's user avatar
  • 2,296
1 vote
1 answer
118 views

What type of queries are considered as SQL injection?

I was testing efficacy of a paid Database security solution which has the ability to detect and block SQLi attack. For the testing purpose I have tried the following query against a PostgreSQL ...
mediocre's user avatar
  • 129
2 votes
0 answers
38 views

Error when creating policy in Oracle Label Security

I ran into a "failure to create trigger" error when creating policy in Oracle Label Security. Here's my code: -- step3: Creating a Labeling Function for a Policy CREATE OR REPLACE FUNCTION ...
largecats's user avatar
1 vote
0 answers
23 views

How to securely limit columns in postgres logical replication?

The docs currently have this to say about publications with specified column lists: The choice of columns can be based on behavioral or performance reasons. However, do not rely on this feature for ...
Felipe's user avatar
  • 305
1 vote
3 answers
146 views

What are some sensible approaches for dealing with 4,000 vulnerabilities across 700 databases in 70 servers

I'm looking for ideas here. I've inherited a large SQL estate with multiple servers in multiple configs that has grown over 10-15 years with no specific DBA-skilled individual in charge. I'm the first ...
Potatan's user avatar
  • 11
1 vote
1 answer
45 views

SAGE ODBC driver - minimum required folder permisions

I have a website which I want to connect to SAGE ACCDATA folder (which resides on a different server but same network to the intranet server) using their proprietary ODBC driver. For security purposes ...
BLoB's user avatar
  • 163
5 votes
2 answers
319 views

Can I change the owner of the cdc schema?

I've enabled Change Data Capture (CDC) on a database using exec sys.sp_cdc_enable_db This creates a new cdc schema which is owned by the cdc user select s.* , dp.name from sys.schemas as s ...
Zikato's user avatar
  • 4,812
1 vote
0 answers
29 views

search_path setting interaction when set for a function, versus role

I have a role called 'kube' with limited grants; those required to call functions in the api schema. This includes access to the "shared" schema that specifies user-defined used in the ...
Edmund's Echo's user avatar
1 vote
0 answers
340 views

CLR unloaded due to security data definition language

Today, we got a very weird situation. We added a SQL login to our database server. After adding this login, SQL unloaded a critical CLR routine "due to security data definition language" (...
Wilfred van Dijk's user avatar
1 vote
1 answer
328 views

What is the difference between a securable and permission in SQL Server?

In Microsoft SQL Server you have the possibility to set permissions at server and database level. You are also able to select a server login or database user and then set securables. I am wondering ...
Jacob Gomez Hansen's user avatar
6 votes
5 answers
3k views

SQL Server with multiple databases (one per client) - what is the best security practice in terms of logins/users/permissions?

We have multiple SQL Servers with each holding dozens of databases - one per client (a client in this case means a customer organization). These databases are accessed via an application, but the ...
SQL_Guy's user avatar
  • 665
0 votes
2 answers
71 views

Making a database publicly readable to anyone on the Internet [closed]

Say that I have some data that is publicly available to begin (like an archive of hackernews stories), and I would like to make it available publicly in a sql database that is world-accessible. The ...
pseudosudo's user avatar
2 votes
1 answer
546 views

Can I revoke database permissions on "NT AUTHORITY\SYSTEM" but still let it have the "sysadmin" role?

I need to implement this: https://www.stigviewer.com/stig/ms_sql_server_2016_instance/2020-12-16/finding/V-213934 In our instance IsClustered and IsHadrEnabled are both 0. Using an automated tool it ...
The ITea Guy's user avatar
10 votes
6 answers
3k views

Is this SQL Procedure "injection proof"?

Most all answers and examples of SQL injection are showing some form of dynamic SQL or interpreting parameters as SQL. I haven't been able to find an example of the "correct" way. Microsoft ...
UpTide's user avatar
  • 271
0 votes
0 answers
16 views

Backup SQL Server on a shared folder from Azure DevOps / Command line [duplicate]

I need to back up my database using a command line instruction. I launch the backup instruction from a Azure DevOps Release Pipeline to back up my SQL server database on a share folder on another ...
Bastien Vandamme's user avatar
2 votes
1 answer
552 views

Is there a way for mongodb clients to connect to mongodb server (SSL/TLS enabled) without client certificates?

I am trying to setup a MongoDB with SSL/TLS enabled. I'm just wondering is there a way for clients to connect to my mongodb server without having a client certificate that would not compromise the ...
JRA's user avatar
  • 149
2 votes
0 answers
83 views

How to enable Database Auditing on SQL server

I want to audit SQL database activities, but when I am trying to enable Database Level Adut specification, it is capturing all activities that is done from application side and also from queries that ...
Gizaw Simeon's user avatar
5 votes
2 answers
447 views

Is it secure to have database login in a PHP file? Other options?

I'm a DB and SQL beginner. I'm putting together a basic PHP app that has a few SQL queries. In all my searching and learning, every example accessed the database by first logging in. Makes sense, but ...
user1934286's user avatar
1 vote
1 answer
120 views

Why is to_char used when doing a divide by 0 in Oracle based SQLi?

For conditional-error-based SQLi, instead of writing 1/0 directly like MYSQL, we need to write to_char(1/0) for Oracle, what is the reason behind this? Example, Oracle: SELECT CASE WHEN (YOUR-...
Vbr's user avatar
  • 11
2 votes
2 answers
328 views

Revoke select on sys.database_principals

Following a request from the Security Team, do you think is there any issue if I revoke access to these tables? Use Master GO REVOKE SELECT ON sys.database_principals TO PUBLIC; REVOKE SELECT ON sys....
MBuschi's user avatar
  • 4,560
4 votes
1 answer
125 views

SQL Server data confidentiality in case of intrusion of machine host

I have to premit that i am a programmer, and i am trying to learn a bit about DBA even if i don't have the same background. I am trying to understand what security provide, and how to use, encryption ...
Skary's user avatar
  • 368
1 vote
1 answer
724 views

using encrypted password in xp_cmdshell command

Dears , i am trying to make the mapped drive visible to SQL server and as a security requirement, I need to use user name and encrypted password because this will be saved on the logs if it is plain ...
Tala 's user avatar
  • 41
1 vote
1 answer
61 views

How does MySQL maintain confidentiality of files?

In a DBMS like MySQL, are the underlying files that contain the data encrypted since we want to have role and user based control? If they are encrypted, what encryption keys and algorithms are used? ...
Tabish Mir's user avatar
2 votes
0 answers
24 views

Is this the best practice for separating all records by user company?

This is more of a general database question than specifically a Prisma question, but the implementation I have is written using Prisma connected to MySQL. Take the following part of my schema.prisma: ...
Basil's user avatar
  • 131
1 vote
0 answers
79 views

remove unix user named postgres after complete uninstallation of postgresql

I'm running MX Linux 21 and recently installed PostgreSQL-13; I wanted postgres to have read, write and execute access to a certain folder therefore I added the unix user postgres to the group of ...
stucash's user avatar
  • 111
3 votes
1 answer
849 views

How to enable authentication logs in Firebird 2.5?

I downloaded Firebird 2.5 from the official website and installed on a Linux machine. The install location is /opt/firebird. I want to be able to view authentication attempt logs for security reasons (...
Lucas Miranda's user avatar
1 vote
1 answer
61 views

How to list the permissions needed for a role / user to run a query / view successfully (in an automated manner)?

Suppose I have queries / views like this: select internal.companies._cid, internal.companies.name, src1.employees.year, src1.employees.count from internal.companies join src1....
m01010011's user avatar
  • 111
1 vote
0 answers
95 views

MSSQL Server Database Trigger Permissions - issue after migrating from 2008 to 2017 Server

I have some triggers set up on a database (Dynamics NAV) across various tables for Insert, Update, Delete. The triggers write to a separate database to log the DB, Table, RowId and date/time. The ...
David Mapes's user avatar
1 vote
1 answer
189 views

Cannot run nodetool commands after enabling JMX authentication in DSE

I would like to use these two pages to enable DSE Unified Authentication and realize a secure environment. I have tried to configure it but it does not work. How is it as a symptom. When I type ...
Youjie's user avatar
  • 41
3 votes
1 answer
1k views

The Trustworthy option should be disabled but what is an alternative?

I run vulnerability assessment report in SQL Server 2016 and I received this issue VA1102 The Trustworthy bit should be disabled on all databases except MSDB The reason of setting Trustworthy to ...
Muflix's user avatar
  • 1,109
1 vote
1 answer
43 views

What does the term "server" mean in this context?

I am currently familiarizing myself with SQL Server security. During the process, I came across the following text passage. Windows-level principals are generally domain and local server user ...
launcher's user avatar
1 vote
2 answers
348 views

What's the best way of going about storing information from different groups of users?

In my application, users (and all data) is grouped by company. So, for example, every customer in the database has a company assigned to it, as does every product etc. The user can log in with their ...
Basil's user avatar
  • 131
0 votes
0 answers
36 views

Postgres - basic security settings

I'm setting up a PostgreSQL instance for some logging data (non-critical). It will be accessible from internet. It's hosted on an azure VM. I'm wondering what would be a decent setup to have basic ...
user49126's user avatar
  • 103

1
2 3 4 5
22