I have seen the red down arrow for disabled, but I don't know what this means?
(I can't post an image is there a way to upload an image?)
It appears to be a little red tornado or down pin?
Apologies if my post does not fit into this forum. I initially tried the SQL Server Data Access forum but I now think my question is more security related.
Is it possible for a web user who has been successfully authenticated with forms authentication to be authorised to use a SQL Server 2000 role depending on a particular ASP.NET 2.0 role that they have been authorised to use? I understand that that I can assign a SQL Server 2000 role to the ASPNET or NETWORK SERVICE account but this will grant access to anonymous web users to the database role. I can ensure that I only call stored procedures which access sensitive data in web pages that are in restricted by ASP.NET roles. However, it would be nice to also restrict stored procedures via the ASP.NET 2.0 Forms Authentication roles.
If this is not possible have you got any bright ideas how I could restrict access to stored procedures who are anonymous web users.
Many thanks,
Mark
I'm developing an ASP.NET2.0 application which accesses a SQL Server 2005 Express database. I plan to use integrated security for access to the database.
I'm confused about the relationships between Windows groups, the ASP.NET web.config file <allow roles=.../> and SQL Server roles.
I would like to create a Windows group to which I can assign multiple users and grant that group access to a Web Site using windows authentication and also grant that windows group access to the database my web application uses.
I have gotten the combination of Windows Authentication to the web site and to the database to work for a specific windows user but I am having trouble determining the combination of database security entities I must create to allow access to my database by members of the windows group.
For a Windows user:
1. Create Windows user
In SQL Express
2. CREATE LOGIN FROM WINDOWS WITH DEFAULT_DATABASE =
3. CREATE USER FOR LOGIN
4. CREATE ROLE
5. EXEC sp_addrolemember <role-name> <user-name>
For a Windows group, what would be the equivalent commands necessary to grant a windows group access to my database? Specifying the Windows Group name in sp_addrolemember does not appear to be sufficient even though the documentation states that a windows group name is a valid value for the member name argument.
I would like to know if there is a way to find out who changed a users roles/access WITHOUT using the audit function. For example, if a user account was created and given SA access then changed to read only, how can I find out who made that change? I tried searching for an answer, but kept getting no results. I'm thinking this may tie into the sys.sysusers view?
View 3 Replies View RelatedI am in the process of locking down the SQL Server in an environment that is considered to be in production (pilot stages) and there is no staging or test environment that mirrors it. I need assistance in determining the server and database roles to assign to existing logins, most of which currently have sa and dbowner rights. Because it is not a development environment, I need to be sure that downgrading the server and/or database level permissions will not break any functionality.
I'm starting with the logins that have the SA fixed server role. These logins need to be able to install applications that require the use of a backend database, which will be stored on SQL Server. In addition, through the installation process a new login/password for the newly created database(s) is normally created. For the existing logins with the SA fixed server role, will downgrading to the securityadmin and dbcreator roles be sufficient to facilitate those needs, or are those too much/ too little? And should any user account ever be granted the SA role? If so, what questions could I ask to determine this need?
Since these install process for these applications usually prompt to install using SA or local system account to authenticate to SQL to create the new database(s), that account should have securityadmin and dbcreator roles to create the database and its tables, as well as add a new login to that database.
Please address this question, keeping in mind that the logins will only be performing the described actions, installing apps using SQL Server as the backend database and adding a login to that database (which may or may not be done during the installation process).
Thank you,
nu_dba
Can anybody tell me what the following icon means against the SQL Server Agent in EM. I'll describe as best as I can:
Its the usual pc tower picture, but instead of the usual green arrow or red square at the bottom, I'm getting what looks like a window (its very small, I can't tell exactly).
When I see this icon, I can't see or change the Service Startup Account under properties and EM doesn't seem to know if the service is stopped or started (I get the option to do either - although both fail if I try them)
Any help would be appreciated
Regards
Andy
In EM, the left pane shows servers, etc. What is the meaning of the red
squiggly line which can apprear on the server icon?
Thanks.
Hello,
I am new user of SQL Server. I have some problems with these words. I want to make my database works in my specified permissions. I will specify permissions with schemas and these schema wants an owner. I want this owner should be my user. When creating a user it needs a valid login. I am selecting my login and it occurs and error says this login has an different user. I am specifying permissions with roles. But i can't make association all of them. I hope i told my problem to you as well. If you explain these words to me and tell me how can i do my database's works with my own schemas, users and roles i'll be grateful. Thanks for advices.
Happy coding...
Hi,
I'm looking for some guidance/help regarding setting up a sa - lite account in SQL 2005. I need to give another admin rights to create/monitor maintenance plans, backup and restore databases, monitor performance/logins, but NOT be able to have any rights on several tables (and of course not being able to set user permissions).
I've tried using server and db roles but haven't been able to determine how to give someone w/o full sa rights access to maintenance plans.
If you can think of soemthing, please let m eknow.
Jenn
Can you write a stored procedure to add a user to your DB and set the roles the user belongs to?
I want to write a stored proc. to add users and set roles so it can be used in code instead of doing it manually.
After the user has been added and their roles set, can you write another stored proc. to give you what roles they belong to?
After reading Books Online, I am still confused with Database Role vs Application role.
My intention is to control the end users' authority on the database, where the end users will access through Winforms client application. With proper assignment of schema and database roles to an user, I believe this will enough to control the permisison of an user.
If this is the case, why Application role exists? When and why should I use Application Role? How is it different from Fixed Database Role?
Hi! Can anyone say which ms sql server predefined roles are similar to the following oracle predefined roles: dba, connect, resource. I already know that sysadmin in MS SQL Server is the same as DBA in Oracle but what about the rest?
Thanks a lot.
Is there any way to configure a notification icon in the start tray in Express 2005 (like we had in SQL Server 2000) with a little green (or red) arrow (or dot) to indicate whether the server's up (or down)?
View 3 Replies View Related
Earlier versions of SQL had an icon in the system tray - which was very useful. I cannot seem to find how you activate this in 2005.
Also you could schedule a job MSDE 2000 to, say, backup a database. I can't find how you do this in SQL Express.
Why would some of my servers that I have registered not show a green arrow (or any connection status for that matter). It's just a blank white circle. Is there some sort of connection error happening between me and the server?
It's sort of annoying to click on these servers and have the error "SQL Server xxxx is not known to be running. Are you sure you wish to connect?" Any way to get around that?
Thanks..
Is there any way to change the interactive sorting icon or even adjust it? When I add the functionality to a column, it skews the column heading to make room for it. This means that reports that previously displayed properly no longer look correct. If I adjust the width of the report to allow room for the icon, then the report overflows its boundary in terms of printing.
Also, the icon does not display evenly all the time. Sometimes, it displays directly next to the text and sometimes it is off to the right more.
Hi all,
I am facing some trouble in my asp.net application. We have decided to add some more security at the DB. Every user gets his own login in SQL-server. (I know for connection-pooling it is better to use the exact same connectionstring, but security is the most important fact in our project).
What I want to do is add sql-server roles to new created sql-server users. I can create sql-server users from my code and I can GRANT or DENY rigths to a specific table, but I don't know how to give a user a role.
Any ideas?
Thx,
BKT
Hi,
I want a user login to have permissions to view sql server jobs that they are not the owner of without giving them system administrator permissions,
Is there any way to do this?
Hi,
I have just received my notebook from my work, and Sql Server 2005 is installed on it. There are 2 accounts, the SA (i dont know this password), and my Windows account.
When I go to security - server roles; I see that only the SA account is assigned to the sysadmin role. But my account is not assigned to any server role and when I want to create a database I get the following error: CREATE DATABASE permission denied in database 'master'. (This is at my local database)
Is there anyway I can get passed this restriction? (without hacking my own pc?)
With kind regards
What roles or permissions does a user need to create stored procedures?
Jshurak - The International Businessman of Mystery
Hi,
I have some stored procedures that I use in my .Net application. These stored procs are created by the role of [dbo]. Now I want to deploy the application along with the database. On the live database I have created a new user, but I cannot give this user the role of dbowner. I have only given it the roles of public, dbreader and dbwriter.
Now the problem is that I am not able to execute my stored procedures. So what should be the solution for this problem. Should I modify my stored procs and create them with the role of public or should I give the user the role of a dbowner.
I also want to know, what is the best set of roles I should give a db User and yet not compromise the security of the database.
If any one knows the solution to my problem, please reply or provide some links that would help. Urgent
Regards
Vineed
I have MS SQL Server 2000 DB.
I have created a User and created some tables for the same.
I created a Role named A and granted Select Permissions for few tables to that roles.
When I created another Role named B and added this role (A) to B, the permissions are not being xferred to B. Bcos of which, if i assign an User to Role B, he is not able to select the tables for which permissions have been given thru role A.
Note : If i give assign directly the user to Role A, it is working. But i want to assign User to role A only thru B.
Hi everyone,
This is a beginner's question: I know that in order to run a package i need to press ctrl_f5 but i also know that there should be an icon (dimmed green arrow) to do that but i cant find it on the toolbar! I only see the "debug" green arrow. Can anyone help me find the lost "play" (or "run") green arrow ? on which toolbar is it situated ?
Thanks
In SQL 2005 when a database is in suspect mode there is no obvious way to tell (via SSMS). In SQL 2000 the word "suspect" was displayed (via Enterprise Manager) next to the database, and the respective database icon was grayed out. Why was this behavior changed for SQL 2005? From a disaster recovery standpoint, it is very important to see immediately if a database is in suspect mode.
View 9 Replies View Related In my installation of RS 2005 when I click the Refresh Icon on a report the report doesnt update. But when I click the "View Report" button it does.
For example, if I change the parameters on the report and click the refresh icon the report seems to flicker as if it was rfreshing but the report data remains the same, even the paramaters in the report remain the same (I have the parameters that are selected in the report header)
Anyone have the same problem or know the solution?
Hi all,
I apologize if this question has already been asked a dozen times, I ran a search and came up with nothing, soooo...
I installed SQL Server 2005 Express Edition SP1 + SQL Management Studio Express.
I attached all my old databases, and setup named pips, tcp/ip, etc, but for some reason, I don't see a SQL 2005 Express Icon in the system tray to indicate to me if the Server is running or not.
now I undestand Express doesn't come with Agent tools, but where on earth is my tray icon? Do I need to download the 'advanced reporting tools' version instead? (about 200mb+)
TIA,
Ray Bolander
Triac Engineering Ltd
After "copying" a SQL Srv DB from one server to the next, we have found that the permissions within the developer-created database roles did not transfer. How can we insert these permissions without doing it manually? Or can we create some type of DTS package that will bring the roles' permissions for us? Or how do you move a SQL database from one server to the next and get everything within it to come along??
View 3 Replies View RelatedShort of system administrator, does anyone know what server role a login must be assigned to in order to execute DTS package in Query Analyzer?
View 9 Replies View RelatedI am currently working on a SSIS configuration database. However, I am having trouble writing a script to get the the users that have each server role permissions. I'm pretty sure that I need to use sp_helpsrvrole, but am not sure where to go from here. If anybody has any ideas or has seen a script on the internet to get this then that would be a tremendous help.
Thanks in advance,
Kyle
Hi!
I have developed a database in MS SQL Server 2005 Express, to which I would require only bulkadmin server role from an external java application, because I only need to update rows, insert values or use select queries in the database.
The problem is that, using either the Microsoft JDBC Driver 1.1 or the Java JDBC ODBC Driver and the Windows XP Data Base (ODBC) configurations, I need a user with sysadmin server role inside Sql Server, otherwise JDBC won't connect to the database using the selected user. Even if I leave the sql login with setupadmin or any server role lower than sysadmin, the connection is refused.
Is there no way to connect using JDBC to MS Sql Server 2005 other than granting the connected user sysadmin rights? My code looks as follows:
Code Snippet
String driver = "com.microsoft.sqlserver.jdbc.SQLServerDriver";
String url = "jdbc:sqlserver://FIREBLADE\SQLEXPRESS";
String user = "username";
String password = "password$$";
Connection conn;
Class.forName(driver);
conn = DriverManager.getConnection(url,user,password);
if (conn != null)
System.out.println("SQL Server Connection established ...");
I have heard that Java JDBC connections to Microsoft require high-level access.
Any informed answer is more than welcome. Thanks for reading my post!
My co-worker, no idiot, says that the tooltip in the system tray forthe SS2000 icon usually shows the computer and server, but once in awhile shows the password (two slashes and the password).Is this a known bug of some sort? It really shouldn't be showing hispassword. It's likely the developer edition, but still, that isn'tgood.
View 2 Replies View RelatedI am getting a general protection fault when pressing the print icon in Reporting Services website.
Hi I found this article:
http://database.ittoolbox.com/groups/technical-functional/sql-server-l/reporting-services-2005-print-icon-causes-machine-to-reboot-1592477
but I can't figure ou how to "remove" the RSClientPrint Class add-on in IE 6.
P.S.
Why does something as simple as printing need to be an ActiveX control? There are all kinds of issues revolving around pushing this out using SMS for users without local admin permission.
So i finally figured out how to create custom transform and add an icon to it. However - when i added the component to toolbox it appears as a file icon (when i didnt have icon it appeared as a blue box) - in the data flow designer it appears as the correct image.
From BOL wrote:"The Data Flow toolbox uses the 16x16, 16-color image type, while
the design surface of the data flow tab uses the 32x32, 16-color image
type. Both are default image types for icons created using Microsoft
Visual Studio 2005."
I assume this has something to do with it - my ico is default 32x32 - however, what would be the way to fix it?