Inheritance Of Security Role In Folder Structure Of Reports
May 16, 2007
Hi,
I have a folder structure of reports like this
Home
|
/
A B
Now, suppose I have created this folder, A first and user, say A_User is given permission to view this folder. I am expecting this user to browse from 'Home' to A folder but as you know to browse folder 'Home' he must also be added to 'Home' folder . So I add him to 'Home' now.
The problem comes when I add new folder B, for user B_User. The moment I add this folder A_User is also added to folder B because of the inheritance of users to child folders.
So user A is able to see both A and B folder....and thats my problem, he is supposed to only A folder and not B
Is there any way to disable this inheritance feature ??
I tried deleting A_User from B with a script using "InheritParentSecurity" method of ReportingService but it says that it can not delete inherited users.
How can I fix the problem ? without need to manually delete users from folders ??/
thanks
prashant
View 3 Replies
ADVERTISEMENT
May 21, 2008
On our report server I have several folders. I would like to set up security such that a user doesn't see any folders except the "My Reports" folder (I enabled the My Reports site option) and a few other folders I specify. These are a shared folder and the models folder.
Is there a way to create a system level role that by default can't browse any folders except My Reports and ones I specifically grant? I would also like this person to default to having the item level security role of report builder to create reports off of report models.
The only way I have been able to accomplish this so far was to add the user to the the system users site level role and then go to every undesired folder and delete the item level role assignments for the user. It seems odd for the user to have access to every folder then to remove permissions from each folder. Should I create a role with no tasks and then selectively add in the permissions to the desired folders?
I did try creating a new system level role that only had the Execute Report Definitions task assigned and assigned the user exclusively to this role but they could still see all of the folders and their My Reports folder. When I created a new folder the user had been defaulted to item level roles of Browser and Report Builder. I suspect these defaults are what caused the new folder to be visible as soon as I created the folder.
I searched the forum for my question so hopefully I am not causing a re-answer of this question.
Thanks in advance,
Sean
View 3 Replies
View Related
Jan 23, 2008
Hi,
Could someone please advise if the report folder structure I am proposing will be secure enough so unauthorised users can't access the reports?
I have created three folders; Departments (that contains subfolders being one for each department), Sections (that contains subfolders being one for each section), and Open Access. A manager will either see the Department or Section folder and then the relevant subfolder for the area he/she manages.
I have deployed the reports from the Development Studio to the Home page, made them invisible there, but created linked reports that then show in the subfolders. Each subfolder contains a separate linked report and each has parameters set within the Properties tab of SSRS that only enables the manager who will access that subfolder to see the report details specific to their area.
A manager will then be given the browser role for only the subfolder he/she has access to.
I would like to be sure that a manager will not be able to see information in other subfolders. Will my proposed structure be secure enough?
Thanks
View 5 Replies
View Related
Jun 18, 2007
I want to use an Active Directory security group that is a Distribution List for a new role assignment for an existing report. Can someone tell me if this is possible? I get an error each time I try:
The user or group name <DLName> is not recognized. (rsUnknownUserName)"
View 1 Replies
View Related
Aug 7, 2007
Is there a way to copy reports from other users "My reports" folder? I am logging onto the management studio reporting services using an administrative account and I am able to view the reports from all users' "My Reports" folder. But I am not able to export them as an rdl file. I am able to export reports from other common folders, but not from the "My Reports" folder.
The reason I need to do this is some of the users have created some reports in one environment and the reports are available in their respective "My Reports" folder. I need to move these reports to their corresponding "My Reports" folder in another environment.
Is there a way to do this?
Thanks for your help.
View 3 Replies
View Related
Jan 30, 2007
Hi i have my customer security method using the
http://msdn2.microsoft.com/en-gb/library/ms160724.aspx msdn article !
now my problem is i can login using different different users login
but i can view the deployed folder sturcutre using one user account only,others just have the accees to the connect to the report server only ?
but in my rsreportserver.config file
i already added three seperate user account like this
<adminconfiguration>
<username>asd></username>
<username>asd1></username>
<username>asd>2</username>
<adminconfiguration>
and i have added these user name on to the report report server users table as wel,
but problem is again i can see folder structure using asd2 user login only,other users just have the login permision ony,they cant see the folder structure ?
what is the problem with this ?
regards
sujith !
View 4 Replies
View Related
Dec 10, 2003
Hi,
Which role we can assign for user other than Sysadmin to able to see and execute all sql agent jobs?.
Thanks,
Ravi
View 7 Replies
View Related
Feb 11, 2004
Hi all,
Our SQL2000 server now allows all member of the Windows 2000 local administrators group log in with SysAdmin role.
I only want couple of people with sysadmin role. What should I do
to prevent that. I was told once that I should delete the
BUILTINAdministrator ID and manually add each window login ID
to SQL server. Am I on the right track?
Thank you for your help.
View 1 Replies
View Related
Sep 4, 2007
We have an application use Approle to read from database. If the client login to windows as administrator or a name that has the administrator rights, the application can get all data. If the client login to windows as a domain user that has limited rights, the application can't get all data.
I run profiler and found that it seems, when application use approle to access a database, the login name is the domain user that log into windows. Is there anybody know what type of right the window login name should have in order to get all data from a database?
Second question, when I log in to window as domainusername( username is not administrator, but has administrator rights). In the profiler, I can see the application use this domainusername access database. However, under sql server login node, I didn't find domainusername. Is this because, the domainusername belongs to buildinadministrator?
Thanks
View 1 Replies
View Related
May 9, 2007
I am trying to locate the "My Reports" folder on the SSRS site, but I dont think I am able to see it. I am an admin on the box with Browser, Content Manager, My Reports roles.
I also tried creating the folder manually and it says the folder exists but I cant see it.
I have also checked on the "Site Settings" and checked the box "Enable My Reports". What else am I missing here?
Thanks,
sj
View 2 Replies
View Related
Mar 13, 2007
Since i have 5 different projects all has the same kind of reports., but calling via 5 different sites all sites on same webserver.
The problem i have is the .rds file name is same in all 5 report projects and it is a shared datasource., now when i compile the report project it will not load or overwrite the .rds file since the name is same, for that reason i tried to have the .rds file in reports folder as a datasource not a shared datasource. but i tried to add it, after i create the datasource, it is automatically going into the shared datasource folder, how can i create a datasource not shared under reports folder.
Thank you very much for all your help and information.
View 3 Replies
View Related
Nov 5, 2007
Hi
I donn't see reportserver folder in my local host is there any wrong at instalation time ?
Thank you
View 3 Replies
View Related
Jan 16, 2007
I am attempting to set up a new user that has only the ability to run reports in the report manager.
I have created a new ActiveDirectory entry for DOMAINReportUser. I have a created a new folder with the reports, and have set this user as a Browser role on this directory, and all reports in the directory.
I have made it throught the security maze to gain access to these reports as this user, but I cannot dynamically run the reports. As the BUILTINAdministrator (content manager), I get a grayed background on the parameters and can run the reports. As this DOMAINReportUser, I get what looks like HTML parameter items, and cannot run a dynamic report. Even if I change the role of this user to Content Manager, I still cannot run a dynamic report.
How do you properly set up a user to be able to dynamically run, and only run, a report in Report Manager, and have this user only see reports in a single folder?
I have been fighting the security issues of creating a RS site and properly setting up access, and have yet to find a single site or person explaining the entire process in any coherant method.
Mark
View 3 Replies
View Related
Dec 9, 2007
Hiiiiiiiiiiii,
Why my program can't access data base, if i'm not set permission & security to All User (Everyone)..??
FYI, my IIS setting for directory security is Basic Authentication.
Pls advise how my program can access the program, if permission & security are not set to Everyone ??
Thanks
View 3 Replies
View Related
Nov 5, 2007
Hi All,
I'm delivering some reports through data driven to a shared folder in another computer in my network. In report manager, under status, it shows the following message.
Processing: 10 processed of 12 total; 0 errors.
When I chek in the folder, I can see sometimes only 6 reports. I rescheduled and run it again. Then I could see only 10 out of 12 reports.
I opened the Management Studio and tried to refreshed the report subscription under subscription. Then I got the following error message.
"
nvalid node. (Microsoft.SqlServer.SmoEnum)
------------------------------
For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&LinkId=20476
------------------------------
Program Location:
at Microsoft.SqlServer.Management.Smo.XPathExpression.Load(AstNode ast)
at Microsoft.SqlServer.Management.Smo.XPathExpression.Compile(String strXPathExpression)
at Microsoft.SqlServer.Management.Smo.Urn.get_XPathExpression()
at Microsoft.SqlServer.Management.Smo.Urn.Compare(Urn u1, Urn u2, CompareOptions[] compInfoList, CultureInfo cultureInfo)
at Microsoft.SqlServer.Management.UI.VSIntegration.ObjectExplorer.NavigableItemBuilder.RebuildItem(INavigableItem item, Boolean applyItemParentFilter)
at Microsoft.SqlServer.Management.UI.VSIntegration.ObjectExplorer.NavigableItem.RequeryProperties()
at Microsoft.SqlServer.Management.UI.VSIntegration.ObjectExplorer.NavigableItem.Refresh(Boolean autoRefresh)
at Microsoft.SqlServer.Management.UI.VSIntegration.ObjectExplorer.NavigableItem.Refresh()
at Microsoft.SqlServer.Management.UI.VSIntegration.ObjectExplorer.ExplorerHierarchyNode.Refresh()
Even If see error log file, I can not see any file there. This is actually a file of the previous run.
<Header>
<Product>Microsoft SQL Server Reporting Services Version 9.00.2047.00</Product>
<Locale>en-US</Locale>
<TimeZone>Pacific Standard Time</TimeZone>
<Path>C:Program FilesMicrosoft SQL ServerMSSQL.3Reporting ServicesLogFilesReportServerService__11_05_2007_11_29_11.log</Path>
<SystemName>DEV02</SystemName>
<OSName>Microsoft Windows NT 5.1.2600 Service Pack 2</OSName>
<OSVersion>5.1.2600.131072</OSVersion>
</Header>
ReportingServicesService!library!4!11/5/2007-11:29:12:: i INFO: Initializing ConnectionType to '0' as specified in Configuration file.
ReportingServicesService!library!4!11/5/2007-11:29:12:: i INFO: Initializing IsSchedulingService to 'True' as specified in Configuration file.
ReportingServicesService!library!4!11/5/2007-11:29:12:: i INFO: Initializing MaxQueueThreads to '0' thread(s) as specified in Configuration file.
ReportingServicesService!library!4!11/5/2007-11:29:12:: i INFO: Initializing IsWebServiceEnabled to 'True' as specified in Configuration file.
ReportingServicesService!configmanager!4!11/5/2007-11:29:12:: w WARN: WebServiceAccount is not specified in the config file. Using default: DEV02ASPNET
ReportingServicesService!library!4!11/5/2007-11:29:12:: i INFO: Initializing MaxActiveReqForOneUser to '20' requests(s) as specified in Configuration file.
ReportingServicesService!library!4!11/5/2007-11:29:12:: i INFO: Initializing WatsonDumpOnExceptions to 'Microsoft.ReportingServices.Diagnostics.Utilities.InternalCatalogException,Microsoft.ReportingServices.Modeling.InternalModelingException' as specified in Configuration file.
ReportingServicesService!library!4!11/5/2007-11:29:12:: i INFO: Initializing WatsonDumpExcludeIfContainsExceptions to 'System.Data.SqlClient.SqlException,System.Threading.ThreadAbortException' as specified in Configuration file.
ReportingServicesService!library!4!11/5/2007-11:29:12:: i INFO: Initializing SecureConnectionLevel to '0' as specified in Configuration file.
ReportingServicesService!library!4!11/5/2007-11:29:12:: i INFO: Initializing DisplayErrorLink to 'True' as specified in Configuration file.
ReportingServicesService!library!4!11/5/2007-11:29:12:: i INFO: Initializing WebServiceUseFileShareStorage to 'False' as specified in Configuration file.
ReportingServicesService!library!8!11/5/2007-11:29:20:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.ReportServerDatabaseUnavailableException: The report server cannot open a connection to the report server database. A connection to the database is required for all requests and processing., ;
Info: Microsoft.ReportingServices.Diagnostics.Utilities.ReportServerDatabaseUnavailableException: The report server cannot open a connection to the report server database. A connection to the database is required for all requests and processing. ---> System.Data.SqlClient.SqlException: Cannot open database "ReportServer" requested by the login. The login failed.
Login failed for user 'ZOPAratnayake'.
at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)
at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
at System.Data.SqlClient.SqlInternalConnectionTds.CompleteLogin(Boolean enlistOK)
at System.Data.SqlClient.SqlInternalConnectionTds.OpenLoginEnlist(SqlConnection owningObject, SqlConnectionString connectionOptions, String newPassword, Boolean redirectedUserInstance)
at System.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, Object providerInfo, String newPassword, SqlConnection owningObject, Boolean redirectedUserInstance)
at System.Data.SqlClient.SqlConnection.Open()
at Microsoft.ReportingServices.Library.ConnectionManager.OpenConnection()
--- End of inner exception stack trace ---
ReportingServicesService!library!8!11/5/2007-11:29:21:: Exception caught while starting service. Error: Microsoft.ReportingServices.Diagnostics.Utilities.ReportServerDatabaseUnavailableException: The report server cannot open a connection to the report server database. A connection to the database is required for all requests and processing. ---> System.Data.SqlClient.SqlException: Cannot open database "ReportServer" requested by the login. The login failed.
Login failed for user 'ZOPAratnayake'.
at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)
at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
ReportingServicesService!library!4!11/05/2007-11:43:03:: Status: The file "Members - Awaiting Approval.xls" has been saved to the "\derbyReports" file share.
ReportingServicesService!notification!4!11/05/2007-11:43:03:: Notification 77fc9843-80f6-4392-9c26-3a84b087dafb completed. Success: True, Status: The file "Members - Awaiting Approval.xls" has been saved to the "\derbyReports" file share., DeliveryExtension: Report Server FileShare, Report: Members - Awaiting Approval, Attempt 0
ReportingServicesService!dbpolling!4!11/05/2007-11:43:03:: NotificationPolling finished processing item 77fc9843-80f6-4392-9c26-3a84b087dafb
ReportingServicesService!library!4!11/5/2007-11:43:03:: i INFO: Initializing SqlStreamingBufferSize to default value of '64640' Bytes because it was not specified in Server system properties.
ReportingServicesService!library!4!11/5/2007-11:43:03:: i INFO: Initializing SnapshotCompression to 'SQL' as specified in Server system properties.
ReportingServicesService!library!d!11/05/2007-11:43:03:: Data Driven Notification for activation id 668b2d9c-d5ea-46e9-8efd-e2824e9a8c64 was saved.
ReportingServicesService!library!d!11/05/2007-11:43:03:: Status: The file "Members - Awaiting Approval.xls" has been saved to the "\derbyReports" file share.
ReportingServicesService!notification!d!11/05/2007-11:43:03:: Notification 5fa50ecb-1b0f-4e40-86c8-4c4700c4b820 completed. Success: True, Status: The file "Members - Awaiting Approval.xls" has been saved to the "\derbyReports" file share., DeliveryExtension: Report Server FileShare, Report: Members - Awaiting Approval, Attempt 0
ReportingServicesService!dbpolling!d!11/05/2007-11:43:03:: NotificationPolling finished processing item 5fa50ecb-1b0f-
ReportingServicesService!library!d!11/05/2007-11:43:03:: Data Driven Notification for activation id 668b2d9c-d5ea-46e9-8efd-e2824e9a8c64 was saved.
ReportingServicesService!library!d!11/05/2007-11:43:03:: Status: The file "Members - Awaiting Approval_1.xls" has been saved to the "\derbyReports" file share.
ReportingServicesService!notification!d!11/05/2007-11:43:03:: Notification 3a282979-9cab-44fd-b4e8-a083558c494e completed. Success: True, Status: The file "Members - Awaiting Approval_1.xls" has been saved to the "\derbyReports" file share., DeliveryExtension: Report Server FileShare, Report: Members - Awaiting Approval, Attempt 0
ReportingServicesService!dbpolling!d!11/05/2007-11:43:03:: NotificationPolling finished processing item 3a282979-9cab-44fd-b4e8-a083558c494e
ReportingServicesService!subscription!4!11/05/2007-11:43:03:: System.IO.IOException: The process cannot access the file '\derbyReportsMembers - Awaiting Approval_1.xls' because it is being used by another process.
at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access)
at Microsoft.ReportingServices.FileShareDeliveryProvider.FileShareProvider.SaveReport(Notification notification, SubscriptionData data)
ReportingServicesService!subscription!4!11/05/2007-11:43:03:: Error writing file Members - Awaiting Approval_1.xls to path \derbyReports
ReportingServicesService!library!4!11/05/2007-11:43:03:: Data Driven Notification for activation id 668b2d9c-d5ea-46e9-8efd-e2824e9a8c64 was saved.
ReportingServicesService!library!4!11/05/2007-11:43:03:: Status: Failure writing file Members - Awaiting Approval_1.xls : The process cannot access the file '\derbyReportsMembers - Awaiting Approval_1.xls' because it is being used by another process.
ReportingServicesService!dbpolling!4!11/05/2007-11:43:03:: NotificationPolling finished processing item 09e28175-ce44-41cd-ab55-56199a58885f
ReportingServicesService!dbpolling!d!11/5/2007-11:43:03:: NotificationPolling processing item 41cfd72e-bda0-4e8f-87dd-a22789eb340f
ReportingServicesService!dbpolling!c!11/5/2007-11:43:03:: NotificationPolling processing 2 more items. 2 Total items in internal queue.
ReportingServicesService!dbpolling!4!11/5/2007-11:43:03:: NotificationPolling processing item 34e19ce1-b298-48e6-a2fc-b7637765968c
ReportingServicesService!subscription!11!11/05/2007-13:18:10:: Auto increment filename = Members - Awaiting Approval_5.xls
ReportingServicesService!subscription!11!11/05/2007-13:18:10:: System.IO.IOException: The process cannot access the file '\derbyReportsMembers - Awaiting Approval_5.xls' because it is being used by another process.
at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access)
at Microsoft.ReportingServices.FileShareDeliveryProvider.FileShareProvider.SaveReport(Notification notification, SubscriptionData data)
ReportingServicesService!subscription!11!11/05/2007-13:26:15:: Auto increment filename = Members - Awaiting Approval_11.xls
ReportingServicesService!library!11!11/05/2007-13:26:15:: Data Driven Notification for activation id 7bd68b9c-855f-4f2a-9482-43ac5f7c9589 was saved.
ReportingServicesService!library!11!11/05/2007-13:26:15:: Status: The file "Members - Awaiting Approval_11.xls" has been saved to the "\derbyReports" file share.
ReportingServicesService!notification!11!11/05/2007-13:26:15:: Notification 76aedee6-e860-4c60-aebc-2c3aeb854bed completed. Success: True, Status: The file "Members - Awaiting Approval_11.xls" has been saved to the "\derbyReports" file share., DeliveryExtension: Report Server FileShare, Report: Members - Awaiting Approval, Attempt 1
ReportingServicesService!dbpolling!11!11/05/2007-13:26:15:: NotificationPolling finished processing item 76aedee6-e860-4c60-aebc-2c3aeb854bed
ReportingServicesService!library!11!11/5/2007-13:29:12:: i INFO: Cleaned 0 batch records, 0 policies, 12 sessions, 0 cache entries, 12 snapshots, 36 chunks, 0 running jobs, 0 persisted streams
Here I did not post the whole error log, because its too long.
Does any one know why I can not deliver all the reports?
View 2 Replies
View Related
Mar 15, 2007
We have a statutory requirement to keep 5 years of history, so I've checked the option in the Site Settings page in the Report Manager to "Keep an unlimited number of snapshots in report history". The drives are partitioned as follows:
C: -- OS; 20GB
D: -- Apps; 20GB
E: --Data: 160GB
I want to force the report history snapshots onto the data (E:) drive, but I can't figure out what setting will force them there. Can anyone tell me how to set the path to the reports snapshots folder?
View 1 Replies
View Related
Sep 20, 2015
There is a STIG Check that does not allow grant "Connect SQL" directly to any logins except SQL System and the SA account. My way of resolving this is to do the following:
Step One:
We create a Server Role called SQL_APPLICATIONS – for the application accounts
We create a Server Role called SQL_DBA – for the DBA accounts
and give them direct “Connect SQL’ server permissions. MAKE THE ROLE OWNER = sysadmin (group)
Note: I think that creating a Server Role is only available starting with SQL Server 2012, but not sure. I am using SQL 2012
Step two:
I add the members (Logins - SQL & Windows) – in this case any application accounts and DBA accounts to the new roles respectively
Step three:
I remove the “Connect SQL” Permission from each Login
The first problem i noticed is that the maintenance plans failed with "The owner domainusername of job db_backup does not have server access.I am currently using a test system and wondered If you think I will have trouble with the application connecting when I try and implement on the production systems.
View 3 Replies
View Related
Jun 29, 2007
Hi All,
I have a report running and I am attempting to assign role based security. I added a group to the site level security. The group I added contains child groups. It doesn't seem that report server is looking into the child groups to see if the logged in user is a member of the child group. Is there anyway to get this to work instead of adding all the groups directly? I suspect that report server is using cominterop and cominterop is not traversing the directory tree?
Thanks,
Darren
View 1 Replies
View Related
Feb 7, 2006
From Books Online Help:
In the role-based security model that is implemented for Reporting Services, users who are assigned to the Content Manager role can create and edit reports in Report Builder. Local administrators are automatically assigned to this role.
If you want other users to be able to work with a Report Builder report, you must create a role assignment for them that includes the default role "Report Consumer." Alternatively, you can create a custom role definition. As long as the customized role includes the "Consume reports" task, users who are assigned to that role will have sufficient permission to create and modify reports using Report Builder
---------
However, when I try to give a contact those rights, the "Report Builder" link still does not show up for my users. Is there any other place where I can examine the security rights to see why the Report Builder permission is not granted to my users?
View 1 Replies
View Related
May 12, 2015
I am setting up some security requirements - the requirement is that team leaders get to view all teams within their division. What I would like it to do when they log onto their dashboard/ssrs report is that it defaults to the team leaders default team (they can still select from other teams if they require).If I can avoid I don't really want another parameter in the report for this.
In my cube I have an attribute under the people dimension (where teams and division also reside) called Fee_Earner_Effective_Flag and where this is set to Y this is their current team.
Under the Role properties security under the Fee_Earner_Effective_Flag attribute I have set the Default member to
[People Primary FeeEarner].[Fee_Earner_Effective_Flag].[Fee Earner Effective Flag].&[Y]
When I then logon as the user and try to access the cube I get the following
Errors in the metadata manager. The '[People Primary Feeearner].[Fee_Earner_Effective_Flag].[Y]' security default member from the '{' attribute returns a result from a different hierarchy.
I have also tried setting the default member in the cube solution and then processing but then the cube failed.
View 3 Replies
View Related
Jul 3, 2007
Hi!
Is there a possibility to set the folder security on the report server programatically?
Thanks
Klaus Aschenbrenner
http://www.csharp.at
http://www.csharp.at/blog
View 1 Replies
View Related
Nov 16, 2007
Hi All,
I subsricbe few reports by data driven file shared method. Each reports is supposed to be delivered to 5 different customers. But each customer can see only his/her data. So I use a paramter to generate 5 different reports for each customer. But once the five different reports are saved in the shared file folder, is there any method to delete old files? These reports are to be executed once a week
Thanks
View 2 Replies
View Related
Sep 8, 2006
Hi all,
I have setup a new SQL 2000 SP4 and internal auditor query about revoke permission from Public role and remove guest from all databases.
1. Can I revoke all default permissions (select on system tables in all DBs) from "Public" role? I am concern any error after such action.
2. I found that guest account in DB -- master, tempdb and msdb. According to Microsoft documents. The account should not remove and can't from master and tempdb. How about msdb?
Thanks,
Regards,
Edwin
View 7 Replies
View Related
Dec 21, 2006
Hi,
The Report Manager portal has many folders. For each folder there are specific users with different roles.
I am trying to figure out the way to extract User, folder wise security data. I want to run a query and retrieve users name, the folders they have access to and the user role corresponding to that folder.
Use ReportServer
SELECT u.UserName, r.RoleName FROM users u, policyuserrole pur, roles r
WHERE pur.UserID=u.UserID AND pur.RoleID=r.RoleID
The above query fetches all the users and their roles.
The folder information corresponds to Path column of Catalog table. Am unable link this table with the above query.
TIA
View 1 Replies
View Related
Oct 2, 2015
I have a business requirement to build a tabular data model, where I need to mask information of other Agents from a given Agent but I still need to show the overall sales of the given product.
For eg: IF an Agent is in APAC region he should see APAC region sales and also should be able see the sales of the same product in other region without knowing region specific break down.
For Agent "Tom" in APAC region, the numbers will look like this
APAC_Sales = 100,000
Other_Sales = 500,000
And if "John" is in NA region, then the number will look like this for him
NA_Sales = 200,000
Other_Sales = 400,000
I wanted to create "Roles" based on the Region, so all the agents belong to "APAC" region will have same view as Tom and "NA" region agents will have John's view.
View 2 Replies
View Related
Aug 11, 2015
My company has a Windows 2008 R2 server which is running SQL Server v11.0.5058. This server was previously running SQL Server 2008 and was recently upgraded. Since the upgrade I have noticed that when I connect to this server using SSMS and Windows authentication it seems as though I have a limited user context as I cannot see SQL Agent in the server tree at all and underneath the server security > logins folder I can only see the sa and SQL Server Windows service accounts (there are many more).
If I connect to the server using SSMS and the sa credential then I can see everything I expect to be able to see as a sysadmin.
I tried connecting as sa, then deleting my Windows AD account from the security > logins folder and reading my Windows AD account with the sysadmin role however this yielded the same result, when I connect using Windows authentication I still appear to be in a limited user context.
We have several other SQL 2008 / 2012 servers within our organization and all of them appear to be working fine / none of them exhibit this problem.
View 8 Replies
View Related
Dec 28, 2007
How do I add an Importer as a user in my sql server database security folder.
Regards
Karen
View 1 Replies
View Related
Jun 20, 2007
I have windows 2003 reporting services 2005 that has been working fine. Now all of a sudden when I go to http://localhost/reports I am unable to assign security to folders(the link is hidden) the New data source button is hidden, the new folder button is hidden, upload folder and report builder are also hidden. I am logged in as aministrator.
Also when I connect to reporting services through SQL Mgmt Studio I have the same issue, there are no options for permissions only a general option.
I'm sure it's a permissions issue but what do i do to resolve?
Thx
View 2 Replies
View Related
Mar 19, 2008
Has anyone written a RSS file that is used to add new Active Directory User/Group to SSRS, and applying security ROLES such as BROWSER?
I have new IT AD group that I need to apply to ALL folders on my PROD, QA and DEV servers. Way too many folders to do via SSMS or Web interface.
Would you be willing to share the RSS file?
View 1 Replies
View Related
May 26, 2015
An old website I inherited uses sa to connect to SQL SessionState and had the details in the web.config. This is bad for security.The session state database is of -sstype "t" which is defined as:Temporary. Session state data is stored in the SQL Server tempdb database. Stored procedures for managing session state are installed in the SQL Server ASPState database. Data is not persisted if you restart SQL. This is the default.What kind of WIndows user, SQL Login, role and permissions do I need to create to make Session State secure? (Windows Server 2012 and SQL Server 2012 mixed mode authentication, Webfarm).
View 4 Replies
View Related
Feb 21, 2006
I am working on the security model for an application that will be used by 100s of users with a dedicated SQL 2005 database for this application and access via SQL XML Web Services.
The client has asked to make it "open" during alpha testing such that anyone can access the web services without having to set them up first. Is there a way to do this? The best I can figure is to use mixed mode security and hard code a login and password. Any method using Windows authentication would require that I add every user at a minimum to the database.
In production, all users will have an active directory role specified that determines if they should have access to the web services or not. However, it is my understanding that to use Windows authentication, I would still need to add each individual user at a minimum as a Login to the SQL Server, and under best practices also as database users with permissions granted to the endpoint.
Am I correct in the above, or is there a more efficient way to achieve these results?
Thanks
-L
View 1 Replies
View Related
Aug 19, 2015
I am setting up a database for one contractor who needs to access one of our databases but i need to remove the permission for them to view the security folder so he cant access the SA account and enable it. I was able to deny them the view permission to see all the other databases and hide the system objects but i can still see the security folder and the sa account there where i can disable and enable it.
View 9 Replies
View Related
Oct 30, 2015
If user want to see the grand total for a measure with include all members, even though the user has limited access for that member, so how we can do using DAX?For example, let’s say the total revenue for all the divisions in a cube is $15,000. You create a role called “Division A”, and set it up so members of that role can only see the revenue for Division A, which totals $3,000. If you use a front-end tool like Excel to access the cube and use the division hierarchy to see the total revenue, you will see the revenue of $3000 for Division A, but also want to see the Grand Total for the revenue as $15,000How we can achieve above scenerio in tabular model (DAX).
View 3 Replies
View Related
