Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 3 years ago.
Improve this question
(Submitting the following on behalf of a Snowflake User)
I'm looking to find a way to force MFA on all accounts, but understand that this can only be accomplished on a user-by-user basis. Is there any way to set it so that all users must use MFA?
Can anyone recommend a script that does this for all users?
Any recommendations (or alternatives) would be greatly appreciated! THX!
There is no mandatory opt-in for MFA as of now but a feature request for central MFA administration is in process. To identify those users who have not enrolled, one can use login_history/login_history_by_user information schema views to highlight those users. Specifically, when the column 'SECOND_AUTHENTICATION_FACTOR' is NULL, we know users have not enrolled in MFA.
Reference:
login_history
There is the option MINS_TO_BYPASS_MFA that gives people time to login, and enable MFA themselves, and if they don't they are locked out.. so you tell them, log in and set it up...
MFA docs
Related
Closed. This question needs details or clarity. It is not currently accepting answers.
Want to improve this question? Add details and clarify the problem by editing this post.
Closed 1 year ago.
Improve this question
Do I really need firebase admin sdk to determine roles of user and admin or can I still do it with roles as a field with a datatype of an array and based on that I'll determine if the user is just a regular user or an admin?
You can very well base your user roles based access rights strategy on Firestore documents and not on Custom Claims. In this case you don't need the Admin SDK. You have to take care, however, that your security rules correctly protect the collections/docs where the access rights are declared!
You will find some examples in the doc as well as in the following article (for user groups).
Closed. This question needs debugging details. It is not currently accepting answers.
Edit the question to include desired behavior, a specific problem or error, and the shortest code necessary to reproduce the problem. This will help others answer the question.
Closed 2 years ago.
Improve this question
I get error "Insufficient privileges to operate on user" when I run drop user SNOWFLAKE.
Is that a special user in snowflake?
Thanks
Query ID: 0193baea-0044-27e5-0000-0f4d000f339a
I have disabled, and dropped support users in the past, but the long and short of it is, they have quite tight protocols over accessing customer accounts. And if they need to access your account they just create new accounts. So it is not like "you can keep them out", they are running the matrix as such..
I believe this is a system user, yes. If you run SHOW USERS you'll see that it was created at the time when your snowflake environment was set up, and that the user has no password and has probably never been logged in. Also, you cannot user DESCRIBE USER for this user as with normal user defined users.
Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 6 years ago.
Improve this question
I know that BPMN is used for Business Processes but is it possible to use it for software flows?
An example could be when a user enters a web application(www.foo.com) using his/her Google credentials(Google sign-in API). In this software flow the system compares the Google credentials(Google Database) with the web applications internal credentials(www.foo.com Database) to check if the user is an existing or a new user.
Please can you provide examples on how the BPMN is going to look like if possible.
Sure, if you choose to model that problem domain with BPMN, you can do something like that. I give you an example.
I am using here a BPMN 'collapsed pool' for the user, a 'message' for the Google API Credentials, 'service tasks' to characterize automatised software steps and a 'data store' to visualise the internal database. The read/write usage of the database can be visualised by ingoing or outcoming 'data associations' (the dotted arrows), but I recommend to use that cautiously, as data associations can quickly clutter a software oriented process model. Better focus on the process flow (the solid arrows, called BPMN 'sequence flows').
Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 7 years ago.
Improve this question
To protect software, you can create a validation system which requires users to provide a valid license number (Often 25 letters or digits) which they have to enter with some personal information. This then gets validated (sometimes aby using a validation server, thus requiring online access) and when valid, the user can use the registered version of an application.
Now, simple question: What kinds of solutions are there which would allow developers to implement such a licensing scheme in an easy way into their applications? I could easily create my own solution but I don't want to re-invent the wheel again...
Ezirez Intellilock has a good solution and API to implement it.
Basicly you created a function of (HW ID, Registration Key) and check if it's right.
Intellilock is just a tool to help you lock the software if the license isn't there.
Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 2 years ago.
Improve this question
I'm currently developing a small application in WPF for us at work though I'm not a professional software engineer, so this might be obvious. However, I cannot find an answer to my question (maybe I used the wrong keywords)
Anyway, our computers are setup so that we need to log on through Novell Client for Windows. The password from the Novell account is synced with the Windows 'Administrator' account. Thus, effectively, everyone is Administrator on his machine. Novell is used to authenticate against a local Fileserver.
The problem now is, when I try to get the Username in my application using Environment.Username or any other method, I will only ever get 'Administrator' as the logged in user.
Question: How can I get the Novell username from my WPF application?
Thanks in advance
A bit late with the answer but I believe you will find the name of the current user logged into Netware or NDS in the windows registry if you do a search.