Questions tagged [security]

Allowing users to access only the data they are authorized to access. It also encompasses protection of data during movement on the network and storage on disks and backups.

Filter by
Sorted by
Tagged with
0
votes
0answers
21 views

How to prevent a highly dynamic PL-SQL query from injection using bind variables

I have a procedure as you can see below: create or replace procedure Injection_test(qry1 varchar2, qry2 varchar2, ...
0
votes
1answer
23 views

Passively load a monitoring shared object into an Oracle process

I'm trying to load my own code, which should add some security features to my environment, into each oracle BEQ dedicated process. The reason I'm posting this on this platform, is that I hope there is ...
15
votes
7answers
1k views

How to deny writes in all SQL Server databases (including new ones & restored ones)

I want to create a login that is denied the ability to write to any databases - not just databases that exist today, but any newly created databases or databases that are restored from other servers. ...
0
votes
3answers
46 views

Oracle - Is a separate database more secure than using the same database and a separate schema

We have very few developers and the ask from management is insane (computer vision, AI, IoT, etc.). Management wants to split the production database which uses Oracle Apex because the Apex ...
0
votes
1answer
34 views

How often does SQL Server refresh group policy?

Does SQL Server check against the Windows GPO on the local server it is running on or with the domain controller? Does SQL Server update the GPO at its own interval or immediately when the server has ...
0
votes
1answer
22 views

Is there a way of securing ProxySQL's own SQLite3 database?

As I understand ProxySQL has support for SSL encryption for inbound and outbound traffic (front/backend) and supports password hashing. However back in 2017, one had direct database access: How to ...
1
vote
1answer
71 views

User has been denied select to table, but has access to table via synonym

User has been denied select to table T1 in DB1, but user can create synonym in DB2 and can select from DB1.TB1. I can not deny create synonyms to user. Is it possible to prevent user to select after ...
0
votes
0answers
51 views

SQL Login can access Linked Server w/ impersonation, but Windows Login cannot

In SQL Server 2017 I have a Linked Server defined to use a fixed remote SQL Login for all local users. EXEC master.dbo.sp_addlinkedserver @server = 'RemoteServer', @srvproduct='SQL Server'; EXEC ...
0
votes
1answer
46 views

How to add a new listener on a new port and restrict it to one instance only

I am running oracle 11.2.3 and we have a server with multiple instances running. All of them are registered to port 1521 with the default listener. Now we are required to make one instance available ...
0
votes
1answer
28 views

Quality Database Security Metrics

Fellow DBAs and Engineers, I'm looking for few quality Database security metrics. Purpose of these metric is to demonstrate level of security provided to database schemas in the organisation. ...
0
votes
1answer
26 views

Is it possible for it to be inpenetrable? [closed]

I was wondering if it is possible to create some sort of database that is physically impossible to enter. While creating it you store some information in it and program it to spit that information ...
0
votes
0answers
24 views

Why I cannot do this in SSMS directly? (assigning a LOGIN to a USER)

In SQL Server 2008 R2, I want to change the LOGIN for a USER in a database. FROM THIS: TO THIS: Initially, the database has the [...] dots option to change this greyed-out (why?): The only way to ...
1
vote
2answers
66 views

How to grant permissions to allow anything inside a SQL Server schema?

I have a schema called training. I have a new role called training_modify. Here are the desired permissions for users placed in that role: Select, update, insert, and delete permissions on any object ...
0
votes
0answers
20 views

gMSA for running a sql agent job

I've had the question if it's possible to add a gMSA-account to the SQL-logins in order to let it perform a certain SQL Agent Job. I know it's possible to add a gMSA as a login but it will probably ...
1
vote
1answer
38 views

SQL Server Grant CRUD to Users on One Schema

I have a schema called training. I want users who will be trained to have CRUD permissions on any object on that schema. I do not want them to have any other permissions on any other object outside ...
10
votes
2answers
579 views

Break the link between a Database User and SQL Server Login

When restoring database from once instance to another one sometimes has to relink SQL Server Logins to the Database User. This is normally achieved with one of the following procedures. Deprecated ...
0
votes
1answer
54 views

Determine the source of user permissions in a database

I have a developer that just accidentally ran an UPDATE and ALTER TABLE script he was working on in a production database instead of the development environment. How can I track down what security ...
0
votes
1answer
30 views

Cassandra security - private IPs with some VPN solution or public IPs and open ports?

there are many different solutions to secure a cassandra cluster. One of them is to enter public IPs and open the 7000/9042 port on each sever. Another one is to have everything in a private network ...
1
vote
1answer
32 views

Allows to select on view, while hiding its definition

I need to create a user in PostgreSQL with the least privileges possible. So, the user would only be allowed to do queries on specific tables and views. That user should not be allowed to get any ...
0
votes
2answers
40 views

SQL Server 2016 Express, need to add account with Administrator access to a database

Working with a new SQL Server 2016 Express installation. I loaded SSMS and have Administrator access to the instance. The vendor supplied a database for a new app that has only a couple internal ...
8
votes
1answer
309 views

Security implications of enabling CLR on shared instance

My database is currently isolated in its own instance and VM. My customer is retiring that server and I need to migrate the DB to a new environment. My DB uses CLR, so the new environment needs to ...
0
votes
1answer
17 views

Granting access to users to run specific SQL jobs that runs SSIS packages [duplicate]

We need to grant a couple of users access to run only specific SQL jobs that runs SSIS packages. Is there a solution that can be used to accomplish this?
0
votes
1answer
38 views

Restrict server login by user AND machine (within or not within a domain): is it possible?

I'm trying to setup a SQL Server 2008 R2 instance, restricting access to my database so only specific users on specific machines can login there. Let's say, we have 3 devs: John, Jill and Steve, with ...
0
votes
1answer
16 views

Recreate a Certifcate Encrypted by Password to another database

I have created a stored procedure which requires permissions across a number of databases: USE MyDB; CREATE PROCEDURE dbo.MyProc ( @ScheduleName NVARCHAR(260), @KeepSchedule BIT = 0 ) AS ...
0
votes
1answer
31 views

Sqlserver 2019 Partitioning based on Data Classification? [duplicate]

Now that sqlserver 2019 has been around for a while, this is a re-ask of a prior question that was not really answered in the way I had hoped: Is it possible to partition a database based on the ...
1
vote
1answer
33 views

Should a local account be set up and used solely to install SQL Server?

I'd like to follow best practices. However, is it overkill to create a new local user account (with minimal access and no special rights) and then use that account to install SQL Server? Are there ...
0
votes
1answer
40 views

Should every job, SSIS project, SSRS have its own sql login

Apologies for asking an opinion type question, but I'd like to know what is best practice. I have a bunch of sql servers and every job as well as every connection manager for every SSRS report & ...
1
vote
1answer
30 views

how to script out proxy accounts?

I have servers where I use proxy accounts to run ETL processes or even to backup SSAS databases using powershell through a job. I can see what AD Accounts are related to my proxies: use msdb go ...
0
votes
1answer
21 views

Configuration file missing after successful SSRS migration

Getting the backup of all SSRS databases including compressing and encrypting can be straight forward. However, when planning a complete solution for SQL Server Reporting services backup, following ...
0
votes
1answer
58 views

MS SQL - CLR Stored Procedure runs as deleted user

I have a SQL Server 2017 database which contains some CLR stored procedures. When trying to call those CLR SP's, I get a "login failed" error back from the CLR SP. My user is connected and works ...
1
vote
0answers
82 views

How to hide SQL Server connection string and SQL login password from Developers

We are using Microsoft Azure App Services to host some of our Web Apps. Web Apps connect to on-premises SQL Server over hybrid connections. When new Web App needs access to the on-prem SQL Server, a ...
0
votes
1answer
22 views

Split database for security and privacy reasons

Currently I have a small business where I have a main product (written in PHP and MySql), several users, several companies, etc. The software occupies around 20 tables in its operation. The problem ...
0
votes
1answer
59 views

Postgres security for functions with “security definer”

I was reading about possible security issues when creating functions in Postgres with "security definer". Official documentation suggests that search_path is set to some trusted schema followed by ...
0
votes
0answers
23 views

How to remove Sql Server Fingerprints? [duplicate]

I have a sql server which being monitor by Nagios. One day, i received some alerts from nagios come with some sensitive information like: Critical Alert: dbi connect (Server name: ABC, Encrypted ...
1
vote
1answer
110 views

Changing the login name for user dbo

I have a database where the owner is Login1 but the username dbo is assigned to Login - login2. I understand in order to change the login name for the username dbo to sa I will have to use the below ...
1
vote
1answer
62 views

How to Hide Sql Server Fingerprint?

I have a sql server which being monitor by Nagios through snmp string. One day, i received some alert from nagios come with some sensitive information like: Critical Alert: dbi connect (Server name: ...
0
votes
0answers
17 views

Does SSRS report user needs database level permission?

I have a separate reporting server and a separate database server. Now on the Reporting server site settings I could see there are some roles and users. Suppose a User BOB has ‘POWER USER’ role ...
1
vote
1answer
99 views

openssl s_client does not indicate that SQL Server is using TLS, however the connection is secure. How is that possible?

I am connecting to SQL Server 2017 using ODBC and MSSMS. The connection is not using TLS; I checked it using openssl s_client. However, the DBA assures me that the connection is secure. What ...
0
votes
1answer
32 views

Specifying MySQL user hosts with IPv6 addresses

Inspired after making the move to IPv6 on my MySQL server, and intrigued by the lack of documentation regarding 'user'@'[IPv6]' nomenclature I proceeded to discover how to limit my users based on ...
0
votes
1answer
19 views

Defining password complexity and its action on “grace” state USERS

I have Oracle USERS linked to external applications that came to "grace" status. I tried to change the assword time expiration to unlimited but it doesn't apply to those account (considering I guess ...
1
vote
2answers
38 views

WHERE clause not preventing return of row but changing values for aggregate function (here: count)

I have recently discovered a PostgreSQL behavior which is strange and problematic in my opinion. Consider this simple query SELECT 'something confidential' WHERE FALSE; The nonsense clause ...
0
votes
1answer
58 views

sp_configure set at code execution - Pro/con's of turning on/off

The right answer of course is 'it depends', but on the surface it seems to make sense to turn on/off some options when needed as the code sample below for Ole Automation Procedures would do. Could ...
0
votes
1answer
46 views

How to implement UNIX like ACL for table rows

EDIT: I can't create or use native MySQL users. I have to use users stored in table with their password hash. I am new sql stuff so please forgive me for asking dumb question. I am creating my first ...
1
vote
1answer
63 views

Discover who changed SQL Server service state

There's any way to find out who stopped\restarted\started the following services ? SQL Server Database Engine SQL Server Agent SQL Server Analysis Services Thanks !
0
votes
2answers
56 views

pre login initialization =29237; handshake=26244

Connecting to one of my servers (no mirror or availability group running), from a local machine and I get this error message below related to handshake when the firewall is up. when the firewall is ...
3
votes
1answer
357 views

How to grant permission to execute stored procedure in master database from another database

Our developers have a domain account used by their application that needs to be able to execute stored procedures created in the master database using the "sp_" naming convention from other databases ...
0
votes
0answers
50 views

If there is no end-user input, is it safe to un-parameterize a parameterized query to avoid parameter sniffing?

AFAIK, a parameterized query is commonly used to prevent SQL injection attacks. What if there is no end-user input that can cause SQL injection? In this case, is it safe to un-parameterize a ...
1
vote
1answer
87 views

SQL Injection penn testing from the queries only

Is there an established method or tool available to perform pen testing on an application by only testing queries it sends to the database? For example, if I have a bunch of SQL Servers hosting ...
2
votes
1answer
427 views

How to force a sysadmin to store data in schema other than dbo? [duplicate]

I am using a GUI tool to upload data in my SQL Server 2016 database. The user being used for above task has been granted sysadmin permission I created a dedicated schema to store above data. This ...
0
votes
1answer
152 views

Sql server/azure connection string parameter for readonly access?

Is there a specific parameter that can be used in a SQL server/azure connection string to specify that the connection should be readonly? In other words, only SELECT queries should work but INSERT/...

1
2 3 4 5
20