I know how to create an Application role in SQL server 7. Now how do I connect to the database from VB using that Application Role? I can't find anything about this topic anywhere. Is this the purpose of an Application role or am I way off?
Thanks for the help
Steven Abt
StevenA@grsgroup.com
Ive been reading over the documentation and some stuff online, but I still dont really understand what the difference is and when you would use one vs the other. Can someone put it in simple terms for this dummy (me) ?
thanks
Hi,
I want my application to create database and I do the following things:
1)Create application role
2)Grant create database to application role
3)Activate application role
4)Create database
and I get the answer:
CREATE DATABASE permission denied in database 'master'.
I got problem connecting database to my asp application (in teh code of sign up button)
here's the code
SqlConnection con = new SqlConnection();con.ConnectionString = ConfigurationManager.ConnectionStrings["connectionString"].ConnectionString;
SqlCommand cmd = new SqlCommand();
cmd.Connection = con;
cmd.CommandText = "INSERT INTO Students (FirstName,LastName,Address,Birth_Day,Birth_month,Birth_year,Country,User_Name,Password,SecretQuestion,Answer,E_mail,Grade,Dep_Name) VALUES (@FirstName,@LastName,@Address,@Birth_Day,@Birth_month,@Birth_year,@Country,@User_Name,@Password,@SecretQuestion,@Answer,@E_mail,@Grade,@Dep_Name)";string firstname = this.FirstName.Text;
string lastname = this.LastName.Text;string address = this.Address.Text;
int bd = int.Parse(this.Birth_Day.Text);string bm = this.Birth_month.Text;
int by = int.Parse(this.Birth_year.Text);string cntry = this.Country.Text;
string UN = this.User_Name.Text;string pw = this.Password.Text;
string SQ = this.SecretQuestion.Text;string ans = this.Answer.Text;
string em = this.E_mail.Text;string grd = this.Grade.Text;
string dep = this.Dep_Name.Text;cmd.Parameters.AddWithValue("@FirstName", firstname);
cmd.Parameters.AddWithValue("@LastName", lastname);cmd.Parameters.AddWithValue("@Address", address);
cmd.Parameters.AddWithValue("@Birth_Day", bd);cmd.Parameters.AddWithValue("@Birth_month", bm);
cmd.Parameters.AddWithValue("@Birth_year", by);cmd.Parameters.AddWithValue("@Country", cntry);
cmd.Parameters.AddWithValue("@User_Name", UN);cmd.Parameters.AddWithValue("@Password", pw);
cmd.Parameters.AddWithValue("@SecretQuestion", SQ);cmd.Parameters.AddWithValue("@Answer", ans);
cmd.Parameters.AddWithValue("@E_mail", em);cmd.Parameters.AddWithValue("@Grade", grd);cmd.Parameters.AddWithValue("@Dep_Name", dep);
con.Open();
cmd.ExecuteNonQuery(); // the error appears here
con.Close();
could anyone Help me urgently???
Hi,
I have a problem connecting to database using windows authorization.
this is sample codeSqlConnection oSQLConn = new SqlConnection();oSQLConn.ConnectionString="integrated security=SSPI;Server=SHAREPOINT\EPM;Database=STS_sharepoint_1;Trusted_Connection=true;";oSQLConn.Open(); on Windows Aplication it work good but on ASP.NET Web application I got an Server Error - Login failed for user *****************is it problem with IIS configuration???
I am thinking of using my web database as the database to use for my program, though not sure how feasible due to connection speeds and having to transfer that info.
what I am using as the connection string is
con.ConnectionString = "Data Source=databse ipadress inserted here; Initial Catalog=databasename here;Integrated Security=True"; with real data obviously inserted into the ip and tables, but when i try and send values there it just hangs and then crashes. I am thinking its not finding the database. Is there something else im to do?
I am using the exact same code as when i use my own machine as the server, and it works great that way, only thing different is the trying to send to the web server.
I'm trying to connect to a sql express database on my local machine, using the following connection string:
SqlConnection thisConnection = new SqlConnection(@"Data Source=C:Program FilesMicrosoft SQL ServerMSSQL.1MSSQLDataTest.mdf");
However, I keep getting an error message saying "An error has occurred while establishing a connection to the server. When connecting to SQL Server 2005, this failure may be caused by the fact that under the default settings SQL Server does not allow remote connections."
Why would my application be trying to connect remotely when the database is on my local machine? And how can I fix this problem?
Thanks
I have created an application which uses a SQL Express database. The program runs fine on the the computer where I built the app, however when I install the app on another computer I get an error telling me that under default SQL Express does not allow remote connections. The problem is that I dont want a remote connection I want a local connection, the database file is on the commputer. How can do get my application to look for the database on the local machine.
My connection string is:
Data Source=(local)SQLEXPRESS;Initial Catalog="C:DOCUMENTS AND SETTINGSADMINISTRATORPLDAQ.MDF";Integrated Security=True
I have made sure that the file is in the correct directory.
Any help would be greatly appretiated
Hi all, I am trying to connect to the database using application role. But gives an error An error has occurred while establishing a connection to the
server. When connecting to SQL Server 2005, this failure may be caused by
the fact that under the default settings SQL Server does not allow remote
connections. (provider: SQL Network Interfaces, error: 26 - Error Locating
Server/Instance Specified)
for the given connection string Dim connstring
As String = "Data Source=Northwind;Initial
Catalog=OrderProcessing;Persist Security Info=True;UserID=application_login;Password=wewewe;"
Dim cmd
As SqlCommand
Dim
param As SqlParameter
Dim
cookie As Byte()
Dim cn As New
SqlConnection(connstring)
If
(cn.State = ConnectionState.Closed) Then
cn.Open()
End If Please help..
Thanking you, Nirmala
In sql server 2000, I created some custom database roles called ProjectLeader and Developer. I would make these roles a member in the fixed database roles so that I would only have to add the user to the ProjectLeader or Developer role once and they would presto-magico have the security I wanted them to have with no unecessary mouse clicking. I'm not sure how to repeat this process in 2005? Management Studio doesn't seem to allow you to add a role as a member in another role. Is there a work around or solution for this?
View 1 Replies View RelatedI am confused . What is considered an application and how SQL would know ?
If I have a web site accessing SQL VIA IIS will SQL Server treat it as an application ? How about MS Excel ?
Also , If I was to use the application of Power builder , using app role , how do control which user can use the app ?
Thanks
Hi all,
This one is a real X FIle, just without Mulder, Scully or the Lone Gunmen!
I have a database, to which access must be restricted via a sole application. So, I have to use an application role. I go in the database and run these statements to add and activate the roles, respectively;
Exec sp_addapprole 'Sirius', 'password'
(The system confirms the role is created.)
Exec sp_setapprole 'Sirius', 'password' 'odbc'
(The system confirms the role is activated.)
Right, now I should not be able to connect using anything but this role, agreed? But here's where things go wrong. I can then successfully connect from another computer by using MS query from Excel, from a login that is not even a member of the Public Role!
I tried again, started and stopped the Server/DTS/Agent services and dropped the old role after each successful login before recreating it. I've checked my syntax exhaustively. I must be doing something wrong, or overlooking something, otherwise MS has a major security problem! (Just hope the Cancer Man doesn't find out!!)
Thanks in advance everyone,
Jaishel.
Hi dear reader
I made an application that uses a Sql Server 2005 Express DataBase.
In the database I made a application role.
When the user logs into my application I run this procedure:
If Not sqlConnectionCR Is Nothing Then
If Not sqlConnectionCR.State = ConnectionState.Open Then
sqlConnectionCR.Open()
SqlConnection.ClearAllPools()
ConsultasSqlCommand = New SqlCommand
ConsultasSqlCommand.CommandType = CommandType.Text
ConsultasSqlCommand.CommandText = "sp_setapprole 'appRole', 'drowssap"
ConsultasSqlCommand.Connection = sqlConnectionCR
ConsultasSqlCommand.ExecuteNonQuery()
End If
Else....
I understand that this procedure connects to my sqlserver database as my application role
Ok, so far no problems in reading and manipulating data.
The problem comes with the reports in my application. For example: I have a reportviewer with a serverreport but when I try to show the report gives an error about permissions and grant access....
I think that is because the Server Report uses the user account (domain/user) to read the database. No user (besides admin) has access permissions in the database (only admin and application role).
So, my cuestion is: How can I tell Report Server to use the application role to display reports?
Thank you for your time and help.
Giber
We have an application use Approle to read from database. If the client login to windows as administrator or a name that has the administrator rights, the application can get all data. If the client login to windows as a domain user that has limited rights, the application can't get all data.
I run profiler and found that it seems, when application use approle to access a database, the login name is the domain user that log into windows. Is there anybody know what type of right the window login name should have in order to get all data from a database?
Second question, when I log in to window as domainusername( username is not administrator, but has administrator rights). In the profiler, I can see the application use this domainusername access database. However, under sql server login node, I didn't find domainusername. Is this because, the domainusername belongs to buildinadministrator?
Thanks
Hi,
I'm testing the use of application roles for security. The customer I work for has still a lot of ASP intranet applications running. We're migrating the databases to a SQL Server 2005 server.
I've changed the connection string to a user without any permissions but to log on. After that I use an application role for permission to select different tables and to execute Stored Procedures.
The first queries do execute but after that I get "Permission denied", like I haven't got the application role anymore.
Any ideas?
Adrian
I want to add bulkadmin permission to my applicatio role. Is it aposible.My windows account havo only public permission on database.I'm using application roleEXEC sp_approlepassword 'MyRole', 'password';Therefore I want to BULK some data with BULK INSERT command.Error is:The current user is not the database or object owner of table'tablename'. Cannot perform SET operation.Thanks in advance.
View 1 Replies View RelatedIn SQL Server 2005, you must have the VIEW SERVER STATE permission in order to access sys.syslockinfo (http://msdn2.microsoft.com/en-us/library/ms189497).
View 7 Replies View RelatedHello,
Can I confirm whether pooling=false in the connection string is still required for SQL Server 2005 (Express Edition)?
Various google searches say pooling has to be turned off for SQL Server 2000, but I was just wondering whether it is still a limitation for SQL Server 2005
Thanks
John
I've created a database in SQL Express and I have a Windows form attempting to connect to it through SQL Authentication. Connection string:
private string connString = @"Data Source=.sqlexpress;Initial Catalog=SQLTestDatabase;User ID=SearchAppRole; Password=password;";
The role I have added to the database is an Application Role. It has been added to the Database permissions with Grant checked for "Select" and "Authenticate".
If I test this with query analyzer, it returns expected results (if I remove Grant from 'Select', it fails)
sp_setapprole 'SearchAppRole', 'password'
select * from recipe
If I edit my connection string (for testing purposes) to use the sa account, the application can connect and run the Select statement:
private string connString = @"Data Source=.sqlexpress;Initial Catalog=SQLTestDatabase;User ID=sa; Password=sa_password;";
However, I cannot get the application to successfully logon and run the select statement when using the user id and password of the Application Role. I get error:
System.Data.SqlClient.SqlException: Login failed for user 'SearchAppRole'. at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection) at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj
I can't find much information on Application Role...I just want one basic permission for the application as a whole. Any help is appreciated. Thanks.
I am attempting to use dbmail from an application that logs in to my database using an application role. Since the application role does not exist outside the database, I created an spSendEmail in the database with "execute as login='mailagent'" in it: I set the database to trustworthy, created a 'mailagent' account and added it to the msdb database with the databasemailuser role rights.
Email works just fine on the server when I use the execute as login='mailagent' to fire off the msdb..sp_send_dbmail. But from the .NET application, I get the error: "Cannot execute as the server principal because the principal 'mailagent' does not exist, this type of principal cannot be impersonated, or you do not have permission." When I run my spSendEmail stored procedure from the calling database, I get the same error.
Hi all.
I have developed a VB6 program which will activate an Application Role to UPDATE and INSERT some tables in SQL Server 2005.
My program will login with a username, say USER and then run with the rights of the Application Role which will SELECT, UPDATE and INSERT the following tables:
1) Table A
2) Table B
3) Table C
The USER login is a restricted user which has only SELECT permission to Table A, B and C.
I encounter a problem in which my program can only UPDATE table B and table C but Table A. I have double checked the settings of Table A, Table B and Table C. Theirs are all same. Fyi, the column which can't be updated is of type "datetime".
Once i grant USER login UPDATE permission to Table A, my program works perfectly in which it can UPDATE all the tables including Table A.
I have tried for almost 2 days but am still clueless. Any ideas?
Thank you so much.
Running VB 2005 Express Edition and Sql Server 2005 Express Edition (SQLX).
Developing a desktop application which calls a local instance of ".sqlexpress".
This app needs to set data base options and add/del various table columns.
When activating the application role, I get the following message:
HariCari SQL Error/s 15422 - Application roles can only be activated at the ad hoc level.
Anyone know what this message means?
I have searched SQL Server Books On-Line and been unable to find a list of Sql err numbers. Either I have missed the obvious or Books On-Line has missed the obvious.
Thanks
Gary
Hi every body
I'm developing a web application and i like to use the sql server 2005 role management features istead of developing a role management package in my program, I can do it on my tables and othe database items but I have no idea about using database access rights in my web pages to permit some one viewing or updating a web form... Is there any system table or system stored procedure showing access rights in my data base? or is there another idea to do this??
by Thanks
Javaneh
I keep getting this error. I am using Visual Web Developer Express 2005 (Visual Basic) and SQL Server 2005 Express.
"There is a problem with your selected data store. This can be caused by an invalid server name or credentials, or by insufficient permission. It can also be caused by the role manager feature not being enabled."
This is in the ASP.NET Configuration.
How do I enable role manager?
Hi everybody.
I created an application role in a database (DB1) and gave it all the rights on a view in DB1 which refers to a table located in another db (DB2). I also gave the rights to the app role on a table of DB1
I tried to use this app. role through the sp_setapprole launched by a user (server principal?) which is SQL Server administrator (and local administrator (Win 2003 Server)).
With the following query
SELECT USER_NAME()
I see that the approle is being used.
Than, if I query the table on DB1 everything works, but if I query the view, referring a table in db2 I get following error:
The server principal "NameOfServerPrincipal" is not able to access the database "DB2" under the current security context.
What should I do to make it work?
The table in DB2 has the same schema of the view in DB1 which refers to it.
I put the DB1 TrustWorthy and both the database have the db_chaining option activated.
Any idea on how to solve the problem would be widely appreciated.
Thank you very much.
Vania
Hi All,
Is there any limitation for setting password to an approle (like it should be 8 character long, should not start with numbers) ?
If so, what are those limitations ?
Does the same is applicable for sp_setapprole which uses the same password ?
please confirm, for both SQL Server 2000 and 2005 versions.
thanks in advance,
Regards,
Kailai
I am very frustrated. Everything works on the local host but when I upload to server I can login to the admin role I created, but when I try to access pages that have role priveleges I get the following error:
The SSE Provider did not find the database file specified in the connection string. At the configured trust level (below High trust level), the SSE provider can not automatically create the database file.
The ASPNETDB.MDF database was uploaded using the Database Publishing Wizard.
Please help!
Hi,
I have SQL server 2005 (Developer edition) installed and I want to add a database role to a database role. It is working on my SQL 2000 server,however, when I tried to do the same thing on SQL2005, It didn't allowed me.
When I go to the Add role and then adding members to the role, the browse screen does not allow me the choice of object type Roles. It only shows me "Users".
Can someone please help me with this and provide me some information of how / what should I set to get the Roles in object types list so I can add a role to a role.
Thanks
What is actually happening behind the scenes when you open a connectionto sql server in code such as C# or vb.net.
View 2 Replies View RelatedHi,
i am stuck in a strange situation.
I
have successfully built my application setup through InstallSheild 12.
Which first installs SQL Express user define instance as a
pre-requisite and then install my application files. First time when i
run my application (without restarting the pc), it connects
successfully with user define instance.
But as i restart my PC and try to open my application, it is not connecting with database.
i am using the following command line to install SQL Express 2005 user define instance:
"/qn ADDLOCAL=SQL_Engine INSTANCENAME=MyInstance SECURITYMODE=SQL SAPWD="test" AUTOSTART=1"
if
i change Remote connection to "using both TCP/IP and named pipes"
through "SQL Server Surface Area Configuration" and then restart my pc
again. My application connects successfully with Database.
Please
guide me where i am getting wrong in building setup. do i have to add
something in my command line to not get this error
When deploying my application that uses sql server it doesn't connect to the server.
I checked the connection string & it's ok the server instance is the same.
The computer name isn't the same & i use the .SQLExpress as the data source.
I get an error saying 'sqlserver does not allow remote connections error 26 locating server / instance specified'.
How do I get rid of this error message when tring to log into my web site user account stored on the default ASP.NET 2.o generated database on my local computer?
Server Error in '/FundACure.org' Application.
Cannot open user default database. Login failed.
Login failed for user 'LANBOYASPNET'.
Where "LANBOY" is the name of my computer. I am logged in as myself "LANBOYKEVIN" My web page is trying to log into the server using the name "ASPNET" which I assume is a standard ASPNET user name.
I thought it was failing because I needed to grant access to this user in the server, so I added the account for the server. Same problem.
So I thought I needed to create this user in my Windows XP user list. When I tried it said "this user already exists" even though it isn't displayed in the list. That is when I realized that it is a standard user established by ASP.NET. It is probably supplied in the C# code through a base class.
So, how do I get this DB to connect? Is the user missing, or is it that my connection string is wrong?
I have an ASP application which is currently using a SQL 2000 Database, attaching via SQLOLEDB. I am getting ready to migrate my ASP application to .NET using SQL Server 2005 Express. The only problem, is that I am unable to connect successfully from my ASP applcation to my DB under SQL Express.
I have taken all of the steps that I have read, including the blog by Ming Lu. I still cannot be through.
I have included both the messages that are thrown and comments about the drivers and connection strings.
I have enabled TCP/IP and Named Pipes for SQL 2005 EE. I have also included the executable, port 1433, port 135, etc. in the firewall exceptions.
I have defined the DB in ODBC using both the Native Sql driver and the SQL Driver. Connection authentication is via SQL Server Authentication.
If anyone has any input, I would be grateful.
Error Messages:
Named Pipes Provider: Could not open a connection to SQL Server [53]. - using SQLNCLI - SQL Native Driver
::[DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. - using SQLOLEDB - SQL Native Driver
::[DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. - using SQLOLEDB - SQL Server Driver
Named Pipes Provider: Could not open a connection to SQL Server [53]. - using SQLNCLI - SQL Server Driver
connection string for SQLOLEDB: "PROVIDER='SQLOLDEB';DATA SOURCE='.SQLEXPRESS';User ID='Abilities2005';Password='abilities';Initial Catalog='nbdc2005';"
connectdion string for SQLNCLI: "PROVIDER='SQLNCLI';DATA SOURCE='.SQLEXPRESS';User ID='Abilities2005';Password='abilities';Initial Catalog='nbdc2005';
source name varied from .SQLEXPRESS, localhostSQLEXPRESS and machinenameSQLEXPRESS
Thanks, Tom