Report On Users Accessing A Database
Aug 5, 2004
Hi,
I need a way to automatically generate a daily report of user names, time of access, and type of access (login, select, insert, update, delete, etc.) to a database.
We need to audit all accesses from all accounts to find out who is accessing the payroll system. We have already defined the security to be as tight as possible - however we need to monitor all Administrator accounts to ensure they are not being used to obtain sensitive information.
I have looked for some software to read the live SQL Transaction Logs, but none of the tools I have seen can do exactly what we require. For example, I've tried Lumigent Log Explorer (http://www.lumigent.com/products/le_sql.html), but it's not automated and the report output is just garble to our payroll staff.
I have looked up all Microsoft SQL Server partners but their software is all about data recovery and data reporting. We need Security Reporting.
I have created a general SQL Profiler trace that may suffice if everything else fails, but I still have no way of automating it - it relies on Real-Time monitoring which I can't trust (admin can turn this off, do their stuff, turn it back on). Also this is dependant on someone turning it off, save the log, turn it back on, every day - this person would be the Administrator - what admin would monitor themselves?
- SQL Trace seems like a good idea, how do I read the trace log file? How do I automate a trace?
- Can we automate the SQL Profiler to read the transaction log to find all accesses to a database?
- Does anyone know what we can do to automatically audit accesses to a database? What format can the report come in (pdf, xls, dbf, html etc.)
- Recommended software to try?
- Ideas for alternatives to try?
- Any companies/developers out there who know of a tool or are developing a tool to provide this sort of report?
- Is there a spec somewhere to let us write our own software to query the live transaction log?
Thanks, I appreciate any help.
Kind Regards
James Payne
IT Administrator
View 7 Replies
ADVERTISEMENT
May 13, 2008
All,
I would like a report to display the number of users and the reports accessed for a certain duration of time[being able to go back and check for previous years as well].
I read on the msdn that 60 days worth of report log is kept,and the rest gets wipped off.Any suggestions on how I would be able to get user access list for the past year as well.
View 5 Replies
View Related
Feb 8, 2007
Hi,
I would like to know if there is any way of Accessing database users from frontend and changing their persmissions.
Thanks
Niranjana.
View 10 Replies
View Related
Mar 3, 2006
Is
there a way to find a list of Windows User accounts that are directly
or indirectly (through Windows Group membership) assigned to a database
role?
I could put work in to CLR programming or using a Linked Server to
Active Directory, but if there is a sys.* view available that can
provide me this
information directly it would be much easier.
I'll be looking into this further myself anyway and posting an answer
if I can find one, but if anyone has suggestions... well, thanks!
View 1 Replies
View Related
May 9, 2007
I have a need to refresh a report after applying a filter on the data that is displayed, without accessing the database.
The following example is a simplified version of the functionality I'm trying to accomplish. The first report displays Sales & Projection data for all products. On clicking a particular product in the header, the second report displays just that product and the total metrics. I have created an rdl file for both the reports and based on the parameters passed, it displays one or several products. My concern is that the report is having to access the AS cube every time a product is clicked. In the real report, it's taking minutes to get the data. Is there way I can get the report to refresh to apply the filter without accessing the database again? Thanks in advance...
Report-1
Product
A
B
C
Total
Sales
100
200
300
600
Projection
200
200
300
700
Total
300
400
600
1300
Report-2
A
Total
Sales
100
600
Projection
200
700
Total
300
1300
View 3 Replies
View Related
Aug 28, 2014
I am looking to write a script that would give the list of all active users in a database with their privileges.
Sample would look something like this.
Login User Schema IsdbOwner canWrite canRead
xyz xyz dbo N Y Y
View 2 Replies
View Related
Feb 28, 2007
In SQL Server 2000 we had a view that would show the user credentials and the password hash. The reason we need this is that we use SQL Server authentication on the database. To test users, we have a login with little access, and it should be able to see the view and compare the password supplied against what is in the database, and then let the code handle a graceful exit if the password is invalid. I am trying to do this with SQL Server 2005, and I am running into trouble. I am trying to do this with a function, since there I can set the EXECUTE AS clause (in theory) and leverage the privlidges of a specific user in the database. Here is an example function:
CREATE FUNCTION check_acct.fn_allusers (@test int)
RETURNS @users table (username varchar(50), passwd varbinary(256))
WITH EXECUTE AS caller
AS
BEGIN
INSERT @users
select name, password_hash from sys.sql_logins
RETURN
END
GO
GRANT SELECT ON fn_allusers TO user_acct
I cannot get to all rows in the sys.sql_logins table unless I first:
GRANT VIEW ANY DEFINITION TO CHECK_ACCT
then when I call this function from CHECK_ACCT, I am able to see the data. If I change the WITH EXECUTE AS 'CHECK_ACCT' and execute thsi function from USER_ACCT, I do not get the same results. Do functions not inherit VIEW DEFINITION proivlidges? Any suggestions on how to do this but limit access to these secure objects to this one function?
View 4 Replies
View Related
Mar 6, 2008
Based on our database infrastructure, we need to secure our SQL databases. The security issue concerns on allowing a limited number of Domain Admin users to access the SQL databases.
We tried certain ways, based on the documents in the Microsoft web site, but we couldn€™t reach to the point of preventing the Domain Admin users accessing the SQL databases.
Thanks in advance.
View 5 Replies
View Related
Mar 24, 2006
Hi,
I'm trying to extract all the users and their membership to groups, and the membership of groups to groups from active directory though a link to server.
I can get the users. I can get the groups.... individually.
I can't get the info of what user is a member of or who are members of a group.
Anyone know how to do this or am I going to have to right a vb app? (Anyone already got the code...)
I want to load this data into tables for reporting in my Data Warehouse.
Cheers
Chris
View 1 Replies
View Related
Apr 16, 2015
I am working on reports in SSRS 2008 (not R2)... There are some reports with parameters that are hidden when the report is accessed through normal URL using ReportViewer.asx..The thing is that these hidden parameters need to be visible when the report is accessed using SSRS Report Manager.
View 3 Replies
View Related
Mar 6, 2008
I have had this issue just pop up. I have local users who can connect fine, but my users that require connection by VPN cannot connect. I get the server not available or access denied error. I did confirm that the VPN'ers are connected to the network correctly and can see that their shares and mappings are correct. Any ideas? Thanking you all in advance!!
View 6 Replies
View Related
Nov 28, 2006
Hi Team,
In SQL Enterprise Manager, when we expand "Database -->Users", we see the
users there. When we expand "Security --> logins" we see the same users there.
Can you differentiate these two.
Thanks
Santhosh
View 1 Replies
View Related
Aug 7, 2015
I have an MVC asp.net application that stores many records in a table on sql server, in its own system. Â used the system for 2 months, worked fine accessing, changing data.
Now that other users are logging in? there is cross coupling going on. Â one user gets the data from another users sql search.
In the mvc app it had used the get async method to read the ID record from the db, i set that to synchronous. Â no effect; Â the user makes their own login id but that does nt matter either.
View 8 Replies
View Related
Jun 7, 2007
I need some assistance with Microsoft SQL Reporting Services. My problem is quite straight forward. I am using a ASP.NET 2.0 ReportControl locally on my machine and I would like to access a report which is hosted on another server within the network. How could I access this report. I am getting the following error:
The attempt to connect to the report server failed. Check your connection information and that the report server is a compatible version.
The request failed with HTTP status 404: Not Found.
<%@ Page Language="C#" AutoEventWireup="true" CodeFile="Default.aspx.cs" Inherits="_Default" %>
<%@ Register Assembly="Microsoft.ReportViewer.WebForms, Version=8.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
Namespace="Microsoft.Reporting.WebForms" TagPrefix="rsweb" %>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head runat="server">
<title>Untitled Page</title>
</head>
<body>
<form id="form1" runat="server">
<div>
<rsweb:ReportViewer ID="ReportViewer1" runat="server" Font-Names="Verdana" Font-Size="8pt" Height="400px" ProcessingMode="Remote" Width="400px">
<ServerReport ReportPath="/bdsvr16/Pages/Reports/Phishing/WF/Country+Report" ReportServerUrl="http://bdsvr16/reports/" />
</rsweb:ReportViewer>
</div>
</form>
</body>
</html>
Thanks.
View 4 Replies
View Related
Feb 14, 2007
Hi,
I have created a sample report called Report1 in SSRS 2005. This currently is running locally on my workstation.
I can even browse to it using the http address i.e. http://localhost/Reports
The question is: How can someone else access this report on my machine. They can not browse to my machine by typing http://12.32.2.344/Reports
Do I need to do any configuration in my local IIS?
Thanks
View 2 Replies
View Related
Mar 1, 2007
Hello. I made a reports in my local machine. How can other users in other machine view the reports? Do I need to install SP2? Any guidance please.
Thanks.
-Ron-
View 3 Replies
View Related
Oct 17, 2007
i am unable to browse my report server. this is the message im getting
The Report Server Windows service 'ReportServer$SQLEXPRESS' is not running. The service must be running to use Report Server. (rsReportServerServiceUnavailable)
View 2 Replies
View Related
Feb 8, 2007
I'm accessing my report through a URL:
http://reportserver/ReportServer?/Folder/ReportName&rs:Command=Render&rs:Format=CSV&rc:Parameters=true
I am getting an error: This report requires a default or user-defined
value for the report parameter 'beg_dt'. To run or subscribe to this
report, you must provide a parameter value.
(rsReportParameterValueNotSet) Get Online Help
I do not want to pass the report parameters (to and from dates) through
the URL. I want the dates to be entered by the user running the
report. If I enter default parameters in Report Manager I am not prompted
for the dates.
View 1 Replies
View Related
Nov 22, 2007
Hi,
I have a report with 2 tables (table1 and table2) in the report body. I have txtempname kept in table 1. I access the textbox value in the header using the following expression
=(report!txtempname.value)
This works fine. However when table2 gets populated on of the subsequent pages, the value in the header disappears. It is visible only for the 1st 10 pages where the table 1 data is there.
How to make sure that the value of the header displays for all the pages
thanks
Killy.
View 3 Replies
View Related
Jan 2, 2008
I have created a report using Visual Studio that brings back the expected information from the database when either run from within VS or is deployed to the server and run through Internet Explorer. The problem that I have is that records on the database each has a field that contains the location of a photograph file which is located on a different server. When I run the report from within VS on my PC it correctly includes the photo but when I run it from the server the picture just shows the icon denoting a broken link - although all of the database information is correctly displayed.
I think this may be a security problem as my workstation user has Domain Administrator capabilities but I am not sure which user is being used by Reporting Services when it tries to access the photo files from the other server. I have made sure that the user configured in Windows Service Identity also temprarily has Domain Admin rights but this has not made any difference.
Can anyone shed any light on which user the server uses when it runs on the server and tries to access network based information.
Thanks
View 1 Replies
View Related
Jan 31, 2008
Dear Technical Team,
I am facing an error while displaying a sql reporting service report on my asp.net page. The report it self is build using Report server project. It consists of a Main report which contains a bar graph. Upon clicking on the bar graph, it takes you to another report (i have given in the jump to report section), call it Report 2. Upon clicking on Report 2 it shows another report say Report 3. It is displayed properly as long as i run the preview of the report in my report project. When i deploy this report on the report server and trying it to access using my asp.net code behind. The main reports runs very fine. Upon clicking, it does not do anything and when i click again it display error, the report does not contain any thing. Sometime it does not show even the error. But just could not drill me in.
I presume on the click event of the report which is a char item, it calls the page load event, and it loses it parent report information or something like that. Please can any body guide me how to do this.
The following functionality i need to achieve with my web page.
My main report : Main report :upon click on any char item, it should take you to the second report.
My second report : and on clicking on charitem on the the second report, it should take me to the third report.
Please help
Regards,
Nazim
View 1 Replies
View Related
Feb 28, 2007
hi,
i installed RS 2005 on windows XP with local system account,report manager does not access.it gives
The page cannot be displayed
HTTP 500 - Internal server error
Internet Explorer
although reportmanager and reportserver directory is available in its default location.
and also when i clicked on any report on report server it gives
An internal error occurred on the report server. See the error log for more details. (rsInternalError) Get Online Help
Requested registry access is not allowed.
i am using my account having admin privlge
please help me.....
View 1 Replies
View Related
May 14, 2007
Accessing report builder from client machine in which there is no sql server with the url http://<server name>>/reports. The report builder tab is not getting displayed.
when accessing from http://<server name>/reportserver/reportbuilder/reportbuilder.application it gets connected to the report model but when we are running the report it say the user doesnt have sufficient permissions or database can not be processed.
The permission is given to the user on the data source. For admin permission the report is running fine.
Do anybody know the procedure to run adhoc reports from client machine??
Urgent!!
View 2 Replies
View Related
Dec 2, 2005
I am trying to view a report that i created and I get an error everywhere but on the server, where it runs fine. the report uses the sharepoint lists.asmx web service as a datasource, and I'm using Windows Authentication on the datasource. I'm logged on to my desktop with the same account i use on the server, but on the server it runs and on the desktop i get the following error:
View 6 Replies
View Related
Mar 14, 2007
Hi,
I am new to Sql Server 2005 Reporitng Services. I created a report in BI and used stored procedure as a dataset. When I run the report in preview mode it works fine and when I run it in report server/report manager, I am getting the following error:
An error has occurred during report processing. (rsProcessingAborted)
Query execution failed for data set 'dsetBranch'. (rsErrorExecutingCommand)
Could not find stored procedure 'stpBranch'.
But I have this procedure in the db and it runs fine in the query analyzer and the query builder window in report project. When I refresh the page in Report manager, I am getting this error.
Input string was not in a correct format.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.FormatException: Input string was not in a correct format.
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.
Stack Trace:
[FormatException: Input string was not in a correct format.]
System.Number.StringToNumber(String str, NumberStyles options, NumberBuffer& number, NumberFormatInfo info, Boolean parseDecimal) +2753715
System.Number.ParseInt32(String s, NumberStyles style, NumberFormatInfo info) +102
Microsoft.Reporting.WebForms.ReportAreaPageOperation.PerformOperation(NameValueCollection urlQuery, HttpResponse response) +149
Microsoft.Reporting.WebForms.HttpHandler.ProcessRequest(HttpContext context) +75
System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +154
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +64
I have changed the dataset from procedure to a sql string and the report is working fine everywhere. But I have a business requirement that I need to use a stored procedure.
I am not sure why I am getting this error and I greatly appreciate any help.
Thanks
View 2 Replies
View Related
Jul 3, 2006
Hey Forum Community
I seem to have a problem creating a model for my AS cube through Report Manager.
I have set up the data source as follows:
Name: Gates Aust Business Intelligence
Connection Type: MS SQL Server Analysis Services
Connection String: Data Source=MANT4003;initial catalog="GAPL Sales Analysis"
Connect Using: Windows Interegrated Security
This part works, but when i go to generate the model, i get the following error in the browser:
"
Cannot create a connection to data source ''. (rsErrorOpeningConnection) Get Online Help
For more information about this error navigate to the report server on the local server machine, or enable remote errors
In the reporting services log file i have the following errors:
w3wp!library!7!07/03/2006-10:51:40:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.DataSourceOpenException: Cannot create a connection to data source ''., ;
Info: Microsoft.ReportingServices.Diagnostics.Utilities.DataSourceOpenException: Cannot create a connection to data source ''. ---> Microsoft.AnalysisServices.AdomdClient.AdomdConnectionException: The connection either timed out or was lost. ---> System.IO.IOException: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. ---> System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host
at System.Net.Sockets.Socket.Receive(Byte[] buffer, Int32 offset, Int32 size, SocketFlags socketFlags)
at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
--- End of inner exception stack trace ---
at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
at System.IO.BufferedStream.Read(Byte[] array, Int32 offset, Int32 count)
at Microsoft.AnalysisServices.AdomdClient.DimeRecord.ForceRead(Stream stream, Byte[] buffer, Int32 length)
at Microsoft.AnalysisServices.AdomdClient.DimeRecord.ReadHeader()
at Microsoft.AnalysisServices.AdomdClient.DimeRecord..ctor(Stream stream)
at Microsoft.AnalysisServices.AdomdClient.DimeReader.ReadRecord()
at Microsoft.AnalysisServices.AdomdClient.TcpStream.GetDataType()
--- End of inner exception stack trace ---
at Microsoft.AnalysisServices.AdomdClient.XmlaClient.EndRequest()
at Microsoft.AnalysisServices.AdomdClient.XmlaClient.CreateSession(ListDictionary properties, Boolean sendNamespaceCompatibility)
at Microsoft.AnalysisServices.AdomdClient.AdomdConnection.XmlaClientProvider.Microsoft.AnalysisServices.AdomdClient.AdomdConnection.IXmlaClientProviderEx.CreateSession(Boolean sendNamespaceCompatibility)
at Microsoft.AnalysisServices.AdomdClient.AdomdConnection.ConnectToXMLA(Boolean createSession, Boolean isHTTP)
at Microsoft.AnalysisServices.AdomdClient.AdomdConnection.Open()
at Microsoft.ReportingServices.Library.RSService.OpenDataSourceConnection(DataSourceInfo dataSourceInfo, CreateDataExtensionInstance createDataExtensionInstanceFunction, Boolean isUnattendedExecution, Boolean unwrapConnection, IntPtr clientToken, IDbConnection& unwrappedConnection)
--- End of inner exception stack trace ---
w3wp!library!1!07/03/2006-10:51:59:: i INFO: Call to GetPermissions:/
w3wp!library!1!07/03/2006-10:53:02:: i INFO: Call to GetPermissions:/
I have tried searching the forums and cannot find anything really helpful. I have had one cube setup and a model generated before and all was workin, but i had to delete it and i recreated the SSAS cube from scratch.
My user account has admin rights on the cube and also on the servers.
Server is Windows 2003
Client is Windows XP.
Any one got anythoughts on this or how i can determine what is wrong.?
Many Thanks
Scotty
View 2 Replies
View Related
Sep 6, 2007
I am trying to access HttpContext.Current in my report code section (report properties) since I have to look at a cookie. However, HttpContext.Current is always null. Has anyone managed to access HttpContex.Current from a report?
Thanks in advance.
View 1 Replies
View Related
Mar 5, 2008
Hi, all,How to give access permissions to All user to access Report Server,in Reporting Services
Regards.
View 1 Replies
View Related
Feb 15, 2006
Hi
I need to get a report that tells me the no. of users logged on to the SQL Server (this has to be an hourly report)
Will this do
WHILE 1=1
BEGIN
Select Hostname,getdate() from sysprocesses
WAITFOR DELAY '00:59:00'
END
GO
Will it have any bad affects on the SQL Server
Or can someone plz let me knw how to get that
Thanks
View 3 Replies
View Related
Oct 24, 2007
Hi, Is it possible to find out who has accessed a certain report for a given time period?
Does Reporting Services store this data somewhere?
If so how can I access it?
TIA
View 5 Replies
View Related
Oct 31, 2007
Hi guys,
I created a user on the system with a limited access privilege (Users group member). I need this user to see only specific reports when he login in to the report manager. I gave him a browser role on the report manager and went to the individual report and remove the permission. However, when this user go to the report manager he is not only browsing but also can do whatever the admin can do. I'm just confused. This user is created with a limited access and provided only a browser role, how can he act like an admin?
Please let me know if I missed something.
Thank you
View 1 Replies
View Related
Nov 21, 2007
I hope someone can help.
I'm working on a web project that will display the reports in an iframe to the user. When I was using windows security It worked perfectly.
Now my boss wants me to use form based authentication instead that can authenticate against our current Active Directory. This is working perfectly and does authenticate correctly. The only problem is that when I load a report in the iframe http://myserver/reportserver/myreport-blah reporting services prompts the user to enter in windows credentials. Is there anyway to pass my form credentials to the report server so that the user doesn't have to log in again.
Both the report server and the web app are on the same server BUT in different virtual directories.
PS: I tried using the reportviewer control but it does not display things correctly. For example, I have use a multi select dropdown on the reports and it messes up the drop down when the user only has 1 selection (hiding the selection). If the user has more than one selection the drop down uses scroll bars. I would use the reportviewer control if it displayed exactly like it does when using alternate URL method.
Any help would be MUCH appreciated!
Thanks!
View 5 Replies
View Related
Jan 16, 2008
Hi,
I am using PHP5 and SSRS 2005 to execute a report via ReportExecution2005.asmx?wsdl (using PHP's SOAP functions). I keep getting the error:
"Microsoft.ReportingServices.Diagnostics.Utilities.MissingSessionIdException: The session identifier is missing. A session identifier is required for this operation."
I know what the SessionID after successfully calling the LoadReport method (ExecutionID in the ExecutionHeader) but cannot seem to pass this along to the Render method. Does anyone know how to pass that along?
This is similiar in issue to the post at http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=2643092&SiteID=17 but for PHP instead of Java.
Thanks!
View 3 Replies
View Related
