Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Allowing users to access only the data they are authorized to access. It also encompasses protection of data during movement on the network and storage on disks and backups.

0
votes
0answers
14 views

SQL server force encryption vs schannel

I'm working with a DBA to add some additional security to SQL connections and we're using SQL server 2008 R2 and it seem like way to do it is to turn the ForceEncryption box to yes. I understand that ...
0
votes
1answer
11 views

Audit MariaDB Which User Account Privileges Are Being Used

I'm looking to improve the security of my MariaDB installation by better auditing the user accounts and the privileges of each user account. This database is being provided as a service out to many ...
4
votes
1answer
63 views
+50

Security considerations of allowing logical replication subscribers on PostgreSQL

I run a non-profit dedicated to sharing data kind of like Wikipedia. We recently had a client that wanted a replica of our database, and we realized that by using PostgreSQL's new logical ...
0
votes
1answer
19 views

Isolating access to tenant data in a multi-tenant database

We have a single SQL Server database for all tenants of a web-application. How can we ensure when a support engineer queries the DB directly via SSMS, they only touch data belonging to one tenant? ...
0
votes
0answers
14 views

Oracle Advanced Connection Security SQL

I am looking for a way to check the encryption and integrity protection level in effect for the current session. Is there a system view where I can get those details? It would also be good if the ...
1
vote
0answers
57 views

Oracle 11g Select query returns NO ROW SELECTED but the table actually has data

In my production, There is a table named ABC under X schema. I have granted SELECT privilege on ABC table to another user named Z. When I execute the query SELECT COUNT(*) FROM X.ABC; as user Z it ...
-1
votes
1answer
29 views

MongoDb User with readWrite can create database

I dont understand why my user can create data base. The user "toto" with role "readwrite" on DB1 can create a DataBase (db2). And with the same account "toto" I can create a user and affect this user ...
19
votes
5answers
5k views

Is it still best practice to avoid using the default ports for SQL Server?

Historically, it has been recommended not to use the default ports for connections to SQL Server, as part of security best practice. On a server with a single, default instance, the following ports ...
1
vote
1answer
36 views

Is it best practice to revoke server permissions to the server “public” role on SQL Server instances?

We have evaluated the Microsoft "best practice" policies (located at C:\Program Files (x86)\Microsoft SQL Server\number\Tools\Policies\DatabaseEngine\1033) on each of our SQL Server instances (example ...
0
votes
1answer
43 views

when to use a TCP dynamic port and when TCP Port?

I have a new server that is configured using a dynamic port as you can see below: The application that connects to this server uses the following connection string, but I am getting the following ...
1
vote
1answer
31 views

Is it overkill to encrypt an already hashed BCrypt password?

I'm using BCrypt to hash my passwords on the server side. Before I store it in my MySQL database, would it be overkill to encrypt my hashed-BCrypt password or would storing the hash directly in the ...
1
vote
1answer
31 views

Database Reader Role with the ability to Create, View and execute stored procedure's and view's in sql server

I will need to allow report writers on the Subscription database to be able to view the table, create alter and delete stored procedure and views. Since it is a transactional replication they cannot ...
-1
votes
1answer
26 views

Determining what user data fields to protect within a database?

Besides passwords, credit/debit card info, social security info, passport info, what other types of data fields should be hashed to give it an additional layer of protection within any database? ...
0
votes
0answers
12 views

How do I inspect the certificate used to protect an MS SQL Server endpoint?

I have a hostname and a port. How do I inspect the public X.509 certificate used to protect the endpoint. It is possible to talk to the SQL server both encrypted and non-encrypted; however I have ...
0
votes
1answer
45 views

cross database ownership - The server principal is not able to access the database under the current security context

I have this script that set a bunch of databases to the same db owner, and set cross database ownership on at database level select database_name=name, db_owner_name=suser_sname(owner_sid), ...
4
votes
1answer
192 views

How to send secure emails using sp_send_dbmail

When using sp_send_dbmail to send an email on SQL Server, how do you specify that the email be sent in an encrypted format? I found a thread discussing including the string "[SECURE]" in the subject ...
1
vote
1answer
35 views

how to script out all the permissions in a folder using powershell?

Using the script below I find out where are the data and log folders: declare @rc int, @dir nvarchar(4000) declare @data nvarchar(4000) declare @log nvarchar(4000) ...
0
votes
1answer
33 views

How to Oracle DBLink encryption

I have the environment that I explain below and I need to encrypt the data that is sent between my two nodes, I have been reading but I can not find the right solution, I explain: I have an Oracle ...
2
votes
1answer
216 views

Logon failed for login due to trigger execution

I have been trying to login using one of my sql server logins but I am getting the error message below: General Error Message Copy Message Text TITLE: Connect to Server -----------------------------...
-1
votes
1answer
36 views

Is it possible to store Always Encrypted master key an on-premises key vault? [closed]

I want to store the master key in a centralize key vault and have IIS access the key from there. I know I can use Azure Key Vault or local Windows key store, but I was looking for another option to ...
1
vote
1answer
23 views

Oracle RMAN encryption

I would like to know if it is possible given a certain backup made with RMAN in Oracle 12c is encrypted without having to restore said backup, is there any or some queries that verify if an RMAN ...
1
vote
1answer
60 views

what is the difference between db_datareader and db_denydatawriter?

I am trying to assign a SQL Server database role to a user who just needs to be able to see data across all tables. I was wondering what is the difference between db_datareader and db_denydatawriter? ...
0
votes
0answers
47 views

How to get environmental properties during a row security policies?

I am developing a REST AOI backed by PostgreSQL. Users of the API must pass a session token in the Authorization header. For example: Authorization: Bearer fcda6eca-71c4-456c-a4df-4e398b11fa00 This ...
1
vote
1answer
36 views

Implement row-level security as a user table or millions of roles? [closed]

PostgresSQL 10.4 is our backend database for a consumer-facing app with millions of users. When implementing row-level security so each user can only access their own data, is it best practice to use ...
0
votes
1answer
32 views

Advanced threat detection vs IP restriction

If we configured IP restriction to allow only internal network, then why we need threat detection? IP restriction already blocks connections from other resources. Moreover, advanced threat detection ...
0
votes
0answers
13 views

MySQL SNMP Audit

i was looking for a way to make MySQL Enterprise Edition to send SNMP trap with audit log information. I've enabled the audit_log module and I've added some rules (for example i've decided to log ...
4
votes
1answer
204 views

Purpose of SQL Server Application Roles

I've been reading up on application roles in Microsoft SQL server. It seems an application role is like any other role in that permissions on securables can be granted to an application role, however, ...
0
votes
0answers
20 views

Problem setting up client-side encryption to SQL Server “selectively”

We are in the process of selectively encrypting connections to our SQL server using TLS1.2. We have few applications which are not configured for encryption yet (and are in the process)and hence will ...
2
votes
1answer
40 views

Does a user who has permissions to select from a view also need select granted to the children entities of that view?

If view 1 uses tables A and B, and a user has SELECT granted on view 1 is that sufficient for the user to select from view 1 or does he also need SELECT granted on tables A and B. Specific details on ...
2
votes
3answers
71 views

Cleaning up specific domain logins on about 50 servers and therefore the users

There is a specific need to clean up logins from the SQL Servers after migration from one domain say abc to new domain foo. After migration as we still have those old logins and users under naming of ...
0
votes
1answer
242 views

Connection Manager in SSIS 2017 Package NOT Saving the Password

We're using Visual Studio 15.7.2 and using SSIS on SQL 2017 (14.0.3029.16). We built a connection manager to a 3rd-party, vendor managed SQL Server 2008 R2 (10.50.6529.0). Our only allowed ...
5
votes
2answers
85 views

How secure is an Azure database within Microsoft?

I am considering moving most of my Databases to Azure SQL server Database, but I am concerned that Microsoft will be able to snoop and look at the data inside the database, which is absolutely not ...
0
votes
1answer
71 views

Oracle data access restriction

I am working on some data access restriction feature in Oracle 11g and have been struggling since then. What I want to achieve is, that I want to allow a specific group only to access a particular ...
0
votes
0answers
24 views

How to write complex expressions while creating a row-level security policy in Postgresql

I've got a table structure where A has records with an owner ID, B links to A, and C links to B. I want to restrict access to rows in C by the ownerId, which is set as a setting on the session in the ...
0
votes
0answers
49 views

Make the linked server ask for password

Till today i am using the linked server with the user of sql having same username and password in both the servers. For now on i can not keep the 2 servers password same for some reason and i still ...
-1
votes
1answer
54 views

SQL Server Intellectual Property (Protecting DB Structure and Relations)

I would like to know is there any update about protecting DB Structure? We deliver a licensed app that uses SQL as its main DBMS and we would like to lock the database structure (schema). I know I ...
2
votes
1answer
72 views

Hide databases from SQL Server with AG

I have 10 databases on a server. Each database is part of a different AG. Each database has its own listener. Can I hide all databases and show only the one database belonging to a listener? I also do ...
0
votes
0answers
56 views

What does the WQL Select * from SQLService return 0 rows in WBEMTest mean?

So, I've been trying to solve the blue icon question mark on my sql server in SQL Server Management Studio by following the answer in the following link: Blue icon with question mark - what does it ...
0
votes
1answer
37 views

How to configure/setup data at rest encryption in Couchbase 5.1 [closed]

I am evaluating best database solution for a sizeable application. My basic requirements include: Data should be encrypted at disk level Mobile support Scalable Enterprise support I realized ...
2
votes
1answer
34 views

Difference between encrypted backup of an encrypted DB and an unencrypted backup of an encrypted DB

Let's say we have a fully encrypted database (the type of encryption is not considered in this scenario), and we produce two backups for that database. If I encrypt only one of the backups, would ...
1
vote
1answer
41 views

Roles and Schduled jobs

I have some instances were some of the BI teams can create their own schduled jobs in the sql agent. However i also have a couple house keeping jobs i don't want them to interfere with. Can I create ...
7
votes
1answer
771 views

How to GRANT permission to execute stored procedure?

I have an AD group that is setup as a Windows Authenticated SQL Login on my SQL Server. On DatabaseA it has the db_datareader and public roles. So the users of this AD group only have read access to ...
1
vote
1answer
69 views

Is there a way to check which computer or IP used a particular script?

As the Title suggest, is there a way to check what IP used a particular SQL Script? The scenario is, there is a recreation script in a email and we hypothesize that somehow, that recreation script ...
2
votes
1answer
34 views

How to ensure security with SQL Server Restore

I'm building a shared hosting SQL Server tool for linux, where users only receive access to their own database, with a SQL Login and SQL Database User that has db_datareader, db_datawriter and ...
1
vote
1answer
47 views

Read Only Access Except Stored Procedures in Specific Schema

I'm building an application that is attached to a legacy application database. The application has it's own database that is on the same server as the legacy database. My application is ASP.NET and ...
1
vote
1answer
135 views

MariaDB doesn't set authentication_string during installation

I'm setting up a new server using MariaDB (current stable version of 10.3) and I notice that all of my users - mainly root and debian-sys-maint - do not have an authentication_string after the ...
2
votes
3answers
74 views

Why shouldn't user-defined database roles be members of fixed roles?

I'm redesigning security setup in our database. I was in process of defining certain user-defined roles and - as I find it handy - on the other monitor I was browsing documentation to make sure I don'...
0
votes
0answers
32 views

How are the options used for mysql_secure_installation?

The MariaDB knowledge base article for the command mysql_secure_installation states that mysql_secure_installation accepts some options: basedir defaults-extra-file defaults-file no-defaults No ...
3
votes
3answers
118 views

How do you manage service account passwords?

The security folks want all AD passwords to expire every three months. I'm really not excited about this, since I definitely won't remember, and I'll likely be on my boat, drunk, when they expire. ...
2
votes
1answer
40 views

how to encrypt one column of a table without using always encrypted?

I have been working on a solution to synchronise logins (using T-SQL) between 2 servers, or between AlwaysOn nodes, inspired by sqlsoldier. It requires a linked Server. When run, this procedure ...