Questions tagged [security]

Allowing users to access only the data they are authorized to access. It also encompasses protection of data during movement on the network and storage on disks and backups.

Filter by
Sorted by
Tagged with
0
votes
1answer
15 views

Web server accessing the database server in Always on availability group

We have a web server that is on the DMZ but that will need to query a database that resides inside the network. Now the network team wont allow port 1433 from the web server to the Database server. ...
0
votes
0answers
37 views

Login to SQL Server cross domain AD Group user

Our MS SQL Server is on another trusted domain (Trusted Domain C). We created a Universal Group within Domain A with users from different forest domains and added the AD group onto the SQL Server. ...
0
votes
1answer
23 views

What are the security implications of the privileges needed by the Bluemedora Postgres account?

Blue Medora is a service for forwarding monitoring metrics from Postgres to Google Cloud Monitoring. As part of their setup instructions they offer a SQL script to configure a least privilege user to ...
0
votes
1answer
16 views

How to see the original text of the the function that has been wrapped by “DBMS_DDL.WRAP”

As I'm new to Oracle PL-SQL,I'm trying to be familiar with DBMS_DDL package and I used it to hide my source code,below you can see the example I'm working on: Declare v_string varchar2(32676); begin ...
0
votes
1answer
34 views

How is the “Adjust memory quotas for a process” user right assignment used in SQL Server 2019?

I am looking at the Configure Windows Service Accounts and Permissions doc (https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/configure-windows-service-accounts-and-permissions?...
1
vote
1answer
21 views

Deploying dacpac through sqlpackage.exe with NETWORK SERVICE user

I have a database release pipeline in Azure DevOps Server which deploys our dacpac files through Powershell commands that run the sqlpackage.exe commands to publish the database. I am using the ...
0
votes
1answer
52 views

SQl server 2008R2 Performance issue after SP3 update

We have recently applied SP3 KB2979597 and Security Update Patch KB4057113 on Sql server 2008R2 but after that our couple stored procedures runs slow, it's taking almost 4 to 5 hours, but normally it ...
0
votes
1answer
16 views

Risk of dropping users in postgres

Is there any risk in DROPPING users in postgres? We have bunch of users in our database that no longer work at the company. I was wondering what (if any) risk there was in dropping those users?
0
votes
1answer
19 views

Can I hide my password for data at rest encryption key?

For MariaDB encryption at-rest, my setting is [mysqld] # at-rest encryption plugin_load_add = file_key_management file_key_management_filename = /etc/mysql/rest/keyfile.enc ...
0
votes
1answer
39 views

What is the point of encryption at rest?

I am wondering what is the point of encryption at rest? It is said that a hacker cannot steal the database and look through it. I'm afraid that it does not protect the database while the key is stored ...
0
votes
0answers
16 views

Oracle(12+) + Kerberos = Protocol Violation

we have an various oracle database installations and a few Kerberos KDC servers application uses JDBC driver latest 8 version and it works perfect with 11.2 version but when I try to connect to a bit ...
4
votes
1answer
45 views

Active Directory Name Change

Our Active directory will change the accounts name for example John Doe Jdoe@abcd.com to John.Doe@abcd.com. My question is do I need to change all the SQL Logins individually or the person can login ...
1
vote
1answer
18 views

Extended event to track the logins from a specific login, but that login is filtering on a an active directory group

I'm wondering if there is a way to do this in sql server. I have an extended event set up to track all user logins from a database with a filter. The way our security is setup, we have active directly ...
4
votes
0answers
47 views

Mongodb 4.2 Brute Force Defense

Is there any tool or configurations for mongodb server to protect against brute force attacks on the user credentials? I found only authFailedDelayMs param witch Available in MongoDB Enterprise only (...
2
votes
1answer
48 views

Raise application error in a stored procedure when inputs contain keywords like 'delete' , 'insert','update'

I have a Stored Procedure which gets 6 input queries and the inputs are the same as where clause of a query. For instance where x=1 and z=5 and e=4. The Application makes these input strings and pass ...
0
votes
1answer
41 views

How to prevent a highly dynamic PL-SQL query from injection using bind variables

I have a procedure as you can see below: create or replace procedure Injection_test(qry1 varchar2, qry2 varchar2, ...
0
votes
1answer
27 views

Passively load a monitoring shared object into an Oracle process

I'm trying to load my own code, which should add some security features to my environment, into each oracle BEQ dedicated process. The reason I'm posting this on this platform, is that I hope there is ...
15
votes
7answers
2k views

How to deny writes in all SQL Server databases (including new ones & restored ones)

I want to create a login that is denied the ability to write to any databases - not just databases that exist today, but any newly created databases or databases that are restored from other servers. ...
0
votes
3answers
56 views

Oracle - Is a separate database more secure than using the same database and a separate schema

We have very few developers and the ask from management is insane (computer vision, AI, IoT, etc.). Management wants to split the production database which uses Oracle Apex because the Apex ...
0
votes
1answer
38 views

How often does SQL Server refresh group policy?

Does SQL Server check against the Windows GPO on the local server it is running on or with the domain controller? Does SQL Server update the GPO at its own interval or immediately when the server has ...
0
votes
1answer
30 views

Is there a way of securing ProxySQL's own SQLite3 database?

As I understand ProxySQL has support for SSL encryption for inbound and outbound traffic (front/backend) and supports password hashing. However back in 2017, one had direct database access: How to ...
1
vote
1answer
74 views

User has been denied select to table, but has access to table via synonym

User has been denied select to table T1 in DB1, but user can create synonym in DB2 and can select from DB1.TB1. I can not deny create synonyms to user. Is it possible to prevent user to select after ...
0
votes
0answers
60 views

SQL Login can access Linked Server w/ impersonation, but Windows Login cannot

In SQL Server 2017 I have a Linked Server defined to use a fixed remote SQL Login for all local users. EXEC master.dbo.sp_addlinkedserver @server = 'RemoteServer', @srvproduct='SQL Server'; EXEC ...
0
votes
1answer
53 views

How to add a new listener on a new port and restrict it to one instance only

I am running oracle 11.2.3 and we have a server with multiple instances running. All of them are registered to port 1521 with the default listener. Now we are required to make one instance available ...
0
votes
1answer
34 views

Quality Database Security Metrics

Fellow DBAs and Engineers, I'm looking for few quality Database security metrics. Purpose of these metric is to demonstrate level of security provided to database schemas in the organisation. ...
0
votes
1answer
26 views

Is it possible for it to be inpenetrable? [closed]

I was wondering if it is possible to create some sort of database that is physically impossible to enter. While creating it you store some information in it and program it to spit that information ...
0
votes
0answers
24 views

Why I cannot do this in SSMS directly? (assigning a LOGIN to a USER)

In SQL Server 2008 R2, I want to change the LOGIN for a USER in a database. FROM THIS: TO THIS: Initially, the database has the [...] dots option to change this greyed-out (why?): The only way to ...
1
vote
2answers
77 views

How to grant permissions to allow anything inside a SQL Server schema?

I have a schema called training. I have a new role called training_modify. Here are the desired permissions for users placed in that role: Select, update, insert, and delete permissions on any object ...
0
votes
0answers
44 views

gMSA for running a sql agent job

I've had the question if it's possible to add a gMSA-account to the SQL-logins in order to let it perform a certain SQL Agent Job. I know it's possible to add a gMSA as a login but it will probably ...
1
vote
1answer
104 views

SQL Server Grant CRUD to Users on One Schema

I have a schema called training. I want users who will be trained to have CRUD permissions on any object on that schema. I do not want them to have any other permissions on any other object outside ...
10
votes
2answers
604 views

Break the link between a Database User and SQL Server Login

When restoring database from once instance to another one sometimes has to relink SQL Server Logins to the Database User. This is normally achieved with one of the following procedures. Deprecated ...
0
votes
1answer
54 views

Determine the source of user permissions in a database

I have a developer that just accidentally ran an UPDATE and ALTER TABLE script he was working on in a production database instead of the development environment. How can I track down what security ...
0
votes
1answer
38 views

Cassandra security - private IPs with some VPN solution or public IPs and open ports?

there are many different solutions to secure a cassandra cluster. One of them is to enter public IPs and open the 7000/9042 port on each sever. Another one is to have everything in a private network ...
1
vote
1answer
32 views

Allows to select on view, while hiding its definition

I need to create a user in PostgreSQL with the least privileges possible. So, the user would only be allowed to do queries on specific tables and views. That user should not be allowed to get any ...
0
votes
2answers
44 views

SQL Server 2016 Express, need to add account with Administrator access to a database

Working with a new SQL Server 2016 Express installation. I loaded SSMS and have Administrator access to the instance. The vendor supplied a database for a new app that has only a couple internal ...
8
votes
1answer
394 views

Security implications of enabling CLR on shared instance

My database is currently isolated in its own instance and VM. My customer is retiring that server and I need to migrate the DB to a new environment. My DB uses CLR, so the new environment needs to ...
0
votes
1answer
23 views

Granting access to users to run specific SQL jobs that runs SSIS packages [duplicate]

We need to grant a couple of users access to run only specific SQL jobs that runs SSIS packages. Is there a solution that can be used to accomplish this?
0
votes
1answer
42 views

Restrict server login by user AND machine (within or not within a domain): is it possible?

I'm trying to setup a SQL Server 2008 R2 instance, restricting access to my database so only specific users on specific machines can login there. Let's say, we have 3 devs: John, Jill and Steve, with ...
0
votes
1answer
18 views

Recreate a Certifcate Encrypted by Password to another database

I have created a stored procedure which requires permissions across a number of databases: USE MyDB; CREATE PROCEDURE dbo.MyProc ( @ScheduleName NVARCHAR(260), @KeepSchedule BIT = 0 ) AS ...
0
votes
1answer
32 views

Sqlserver 2019 Partitioning based on Data Classification? [duplicate]

Now that sqlserver 2019 has been around for a while, this is a re-ask of a prior question that was not really answered in the way I had hoped: Is it possible to partition a database based on the ...
1
vote
1answer
35 views

Should a local account be set up and used solely to install SQL Server?

I'd like to follow best practices. However, is it overkill to create a new local user account (with minimal access and no special rights) and then use that account to install SQL Server? Are there ...
0
votes
1answer
40 views

Should every job, SSIS project, SSRS have its own sql login

Apologies for asking an opinion type question, but I'd like to know what is best practice. I have a bunch of sql servers and every job as well as every connection manager for every SSRS report & ...
1
vote
1answer
35 views

how to script out proxy accounts?

I have servers where I use proxy accounts to run ETL processes or even to backup SSAS databases using powershell through a job. I can see what AD Accounts are related to my proxies: use msdb go ...
0
votes
1answer
65 views

Configuration file missing after successful SSRS migration

Getting the backup of all SSRS databases including compressing and encrypting can be straight forward. However, when planning a complete solution for SQL Server Reporting services backup, following ...
0
votes
1answer
62 views

MS SQL - CLR Stored Procedure runs as deleted user

I have a SQL Server 2017 database which contains some CLR stored procedures. When trying to call those CLR SP's, I get a "login failed" error back from the CLR SP. My user is connected and works ...
1
vote
0answers
141 views

How to hide SQL Server connection string and SQL login password from Developers

We are using Microsoft Azure App Services to host some of our Web Apps. Web Apps connect to on-premises SQL Server over hybrid connections. When new Web App needs access to the on-prem SQL Server, a ...
0
votes
1answer
27 views

Split database for security and privacy reasons

Currently I have a small business where I have a main product (written in PHP and MySql), several users, several companies, etc. The software occupies around 20 tables in its operation. The problem ...
0
votes
1answer
114 views

Postgres security for functions with “security definer”

I was reading about possible security issues when creating functions in Postgres with "security definer". Official documentation suggests that search_path is set to some trusted schema followed by ...
0
votes
0answers
23 views

How to remove Sql Server Fingerprints? [duplicate]

I have a sql server which being monitor by Nagios. One day, i received some alerts from nagios come with some sensitive information like: Critical Alert: dbi connect (Server name: ABC, Encrypted ...
1
vote
1answer
291 views

Changing the login name for user dbo

I have a database where the owner is Login1 but the username dbo is assigned to Login - login2. I understand in order to change the login name for the username dbo to sa I will have to use the below ...

1
2 3 4 5
20