New answers tagged permissions
2
You must be a member of both the old and the new owning role, and the target role needs the CREATE privilege on the schema.
0
On Database level CONNECT privilege is required:
db2 grant CONNECT on database to user user1
Note: This may not be required if the PUBLIC group has connect privilege (which is the default setting).
Every table that is referenced in the view has to have the SELECT privilege
db2 grant select on table schema1.table1 to user user1
To create a view user has to ...
2
I have my SYSTEM user, who owns several tables
Do not use any pre-defined usernames that come with the database itself.
You have no idea what Oracle might choose to do there in the future, and if Oracle were to introduce a SYSTEM-owned table with the name as yours, then either your application or the database itself would be in a lot of trouble.
Create your ...
1
From the RDS Docs:
If you accidentally delete the permissions for the master user, you can restore them by modifying the DB instance and setting a new master user password. For more information about modifying a DB instance, see Modifying an Amazon RDS DB instance.
Performing a password reset appears to do more than just reset the password, but also resets ...
0
Define "cause a problem"... Will running a query affect the data in any way? No. That is literally what Oracle is designed to do: allow queries and transactions to occur simultaneously.
What it might do is affect performance of the system, especially if compute resources are tight. Users could possibly experience a slower response time.
That said, ...
0
Use the ScriptLoginPermissions stored procedure, deploy it to any user database:
https://github.com/aleksey-vitsko/Database-Administrator-Tools/blob/master/Permissions%20-%20ScriptLoginPermissions.sql
Run it specifying login's name:
exec ScriptLoginPermissions 'domain\account.name'
Aside from showing all permissions for this account, this SP will also show ...
1
Testing with a SQL Server login isn't going to help if the problem is with a Windows login. This is due to Windows logins having the ability to authenticate via multiple sources (itself and/or one or more Windows groups).
How is the Windows login authenticating?
Directly (i.e. the login has an entry in sys.sys.server_principals),
via one or more Windows / ...
0
A slight variation on the theme....
Adds a check for SYSADMIN membership
CREATE TRIGGER [TR_LOGON_APP]
ON ALL SERVER FOR LOGON
AS
BEGIN
-- define variables
DECLARE @program_name nvarchar(128)
DECLARE @host_name nvarchar(128)
SELECT
@program_name = program_name,
@host_name = host_name
FROM sys.dm_exec_sessions AS c
...
1
For those wondering about security of running GRANT [ALL] USAGE statement, here is what Postgres doc have to say:
For schemas, allows access to objects contained in the specified schema (assuming that the objects' own privilege requirements are also met). Essentially this allows the grantee to "look up" objects within the schema. Without this ...
Top 50 recent answers are included