What Is The Best Way To Detect/report Unauthorized Access To Sql Databases?
Jan 10, 2008I am looking for something that can detect unauthorized access to our databases. Something that can be used in a 10+ sql server environment.
ADVERTISEMENT
401 Unauthorized Access When Calling Report Server From ASP.NET Application
Feb 11, 2008I receive the following error when i call report server web service from an asp.net application:
"The request failed with HTTP status 401: Unauthorized."
Here are the IIS logs on the reporting services server. When i open IE and browse to the web service i provide my user credentials and i can access the web service just fine. However when i call the web service via my asp.net application it looks like my credentials are not being passed??
Browsing web services via internet explorer.
2008-02-11 21:26:13 W3SVC1836052065 HQSQLDEV1 10.69.21.140 GET /Reports/images/16fold.gif - 8080 triwestdbloom 10.69.21.140 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+WOW64;+SV1;+.NET+CLR+2.0.50727;+.NET+CLR+1.1.4322) 10.69.21.140:8080 200 0 0 15
Call from ASP.NET App
2008-02-11 21:26:13 W3SVC1836052065 HQSQLDEV1 10.69.21.140 GET /Reports/images/16fold.gif - 8080 - 10.69.21.140 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+WOW64;+SV1;+.NET+CLR+2.0.50727;+.NET+CLR+1.1.4322) 10.69.21.140:8080 401 1 0 0
Here is my code:
RSWebService.ReportingService rs = new RSWebService.ReportingService();
rs.Credentials = new System.Net.NetworkCredential(@"triwestdbloom",
"blah", "triwest");
//rs.PreAuthenticate = true;
//Get all folders
RSWebService.CatalogItem[] allItems = rs.ListChildren("/", false);
//Get only folders not hidden to the user.
List<RSWebService.CatalogItem> visibleItems = new List<RSWebService.CatalogItem>();
foreach (RSWebService.CatalogItem item in allItems)
{
Response.Write(item.Name.ToString());
}
Any ideas?
How To Detect Changes To The Structure Of Databases, Tables And Even SP
Jun 1, 2006HI,
Any help here is appreciated, I work in a large software company that has many small teams. I am faced with the issue of some of the other teams are changing the structure of tables and views and even SPs and functions without letting the rest know of these changes.
My question is, is there a way of tracking these changes through a job to alert everyone else in case this situation happens.
regards
Security Holes --- Denying Unauthorized Access
Apr 6, 2000I am using mixed security on the SQL server and have an NT group 'NT_GROUP'.
The login for 'NT_GROUP' has been added to SQL server and has been explicitly granted access to only one database.
Using access database project (ADP), a user in the group is able to gain access to other databases (master, tempdb, msdb, etc.) as well.
It is very important to be able to prevent this access.
Thanks in advance for your help.
HTTP: 401 Unauthorized When Request Own Report
Mar 21, 2007Hallo,
after upload a report in a root directory I cannot open this report.
details:
- iis is configured for integreted windows authentification
- windows user und reporter are the same
- user have all rigths for the root directory
Integrated Security: Preventing Access Via Unauthorized Applications
Feb 20, 2008
Hi €“
We have built a .NET on SQL Server application with extensive business functionality and security. It uses SQL integrated security to control logon and access to the database objects. There is business logic built into the .NET code, so I don€™t want any chance that users access the tables directly through a tool such as Management Studio - many users need update, delete, insert on tables in order to use the applications functions. With integrated security they can logon through SQL Management Studio and change data in the tables directly.
How are people who are using integrated security for their business applications preventing logons through unauthorized tools or applications?
Peter
HTTP Error 401.2 - Unauthorized: Access Is Denied Due To Server Configuration.
May 11, 2007I am using .net 2005 as front end and Sql Server 2005 as backend, as i face the problem on client side when i installed my software it works properly but after some time i face this error "HTTP Error 401.2 - Unauthorized: Access is denied due to server configuration.
Internet Information Services (IIS)" Also some time it shows me all records. Some time it disconnect the database connection so i can not understand why it happens like this, if somebody know then please help me out this bug.
SQL 2012 :: Report GUEST User Access Status In All Databases On Instance Level
Apr 17, 2015Below query tells us if guest user is enabled or disabled in a particular database
SELECT dp.name, CASE perms.class WHEN 0 THEN 'Yes' ELSE 'No' END AS 'Enabled'
FROM sys.database_principals dp
LEFT JOIN (SELECT grantee_principal_id, class FROM sys.database_permissions
WHERE class = 0 AND type = 'CO' AND state = 'G') AS perms
ON dp.principal_id = perms.grantee_principal_id
WHERE dp.name = 'guest';
Do we have a query which can also add the database name to above query output? The output must have columns with data against Name,Enabled,Database name
Report Viewer In ASPX Page- Getting An Error The Request Failed With HTTP Status 401: Unauthorized
Nov 2, 2006 I used the following reference code while creating this simple ASPX page with reportviewer control using VS 2005
http://www.tutorialsall.com/REPORTINGSVCS/WebFormsReportViewer-ReportServerCredentials/
ReportViewer is having following properties
ProcessingMode = "Remote",
ReportServerUrl = "/foldername/myreport
ReportPath = "http://report.mydomain.com/reports"
Even after using admin user we got the same problem
Please help
How To Detect When A New Report Is Added Into Reportng Services
Mar 17, 2008Some power users who may or may not write good SQL for their reports have been given the ability to place their reports directly into production. I would like to receive an email notifiction (either triggered by the report being added or via sql job that runs daily) that let's me know when a new report has been added.
Does anyone know how to accomplish this?
Thanks,
Chris
This Feature Remote Access To Report Data Sources And/or The Report Server Database Is Not Supported In This Edition Of Report
Jun 16, 2006SQL server 2005 express reporting problem.
error message:
This feature "remote access to report data sources and/or the report server database" is not supported in this edition of reporting service
I got this error message when I try to connect to database hosted in another PC running SQL server 2000.
Is it true that SQlL server Express can only use Local Database Engine to host the database?
Reporting Services :: Check Access Fails To Grant Access To Report Item For Current User
Sep 10, 2015Is there any way to get more information for when IAuthorizationExtension::CheckAccess fails to grant access to a report item for the current user? Specifically, it would be useful to know:
1. URL of attempted report
2. IP address of user agent
3. Identity of current user
4. Date/Time of the failed attempt
ssrs2014
Access Or SQL Databases
Jun 2, 2004I've read afew articles about .Net and they mentioned not using Access when developing with VS.Net, but the articles didn't go into why. Between the two, is one better/easier to use than the other? Is there a cost difference? Or does it depend on what you are doing?
Any input would be appreciated. Thanks.
Access Databases Using ADO.Net
Sep 20, 2005Hi I am using Visual Studio.Net 2003 and SQL 2000 Web applications run using the ASPNET user account.
I have to set up this account and grant it permissions before my Web application will have access to a SQL database. How do I grant permissions ?.
Deny Builtin/administrators Full Access To Report Services Report Manager 2005
Apr 14, 2008
I need to prevent domain and local administrators from having full control over our report manager. (I want them to be assigned permissions just like everyone else, some reports they can see other reports they can not.)
How can I accomplish this? I tried going into Report Manager -> Site Settings -> Configure Site Wide Security and re-assigning BUILTINAdministrators to the System User role instead of the System Administrator role. (A different set of report manager admins was given the system administrator role).
However, it appears that members of the BUILTINAdministrators group still have full control in Report Manager.
Converting Access Databases To SQL
Apr 18, 2001what is the proper method of taking a database made in MS Access and converting it so that it runs in SQL Server 7?
View 1 Replies View RelatedSingle ID Access 2 Databases
Mar 27, 2006Is it possible to have an ID that can access 2 databases? If it's possible, I have to create the same ID and password under each database?
View 6 Replies View RelatedAccess To Different Databases In Different Domains
Apr 16, 2007Hi everybody,there are several SQL-Server 2000 databases within a company locatedon different servers in different domains. On every database you canfind the same table X.I want to merge these tables X (UNION query) and print the result witha Crystal Report.Unfortunately I only have little knowledge on security, domains,distributed applications.Thanks for help.
View 2 Replies View RelatedMissing Mdf Won't Allow Access To Other Databases
Mar 13, 2008The project I work with consists of about a dozen databases. One of the .mdf files was deleted by one of the team members. Since we are still exploring with the data structures to some degree, we didn't have a backup for this file, but we do have the .sql file that created the database. Now, however, we cannot access any of the databases because the OS reports that it can't find the one file. The log shows that it connects to the others fine, but gives us a login failure because of one missing file [Error: 18456, Severity: 14, State: 11]. Losing the file is of no importance to the team, but it sure is causing a problem for SQL Server 2005. How do we get the rest of the databases to connect and just drop the damaged one to recreate it later?
View 8 Replies View RelatedPlease Help Me SQL 2005 And Access Databases
Nov 16, 2006I have a restaurant POS application that is written in VB 6 and the data is being written to a access database. I need to access this database over the internet. I need to get certain tables (current sales) in this database to automatically send the updated data to a Web Server. My questions are: What is the best way to do this? Do I need to have sql express loaded on site and let it do the interactions with the Access server and then connect to SQL express over the internet? I am new to this and not sure of the best way to design it. Do I use Report services or analysis services to design?
Thanks
SSRS Report Rendering Different In VS2005 And In Report Viewer Via URL Access
Apr 17, 2008Hello,
I'm using Reporting Services to render a text (stored in sql as varchar(max)). The text is all plain text, with some lines having trailing spaces.
Source text file i've imported to SQL via SSIS:
CLIENT: 10055
STATEMENT 2007
DATE:1002993
THIS IS THE OTHER STATEMENT
COLUMN1 COLUMN2 COLUMN 3
TRY THIS
*Note the trailing spaces on the line before 'STATEMENT 2007'.
I've designed a report using the Report Project in VS2005 to retrieve this text via a stored procedure. When I test the report using the 'Preview' tab in the IDE, it looks good
CLIENT: 10055
STATEMENT 2007
DATE:1002993
THIS IS THE OTHER STATEMENT
COLUMN1 COLUMN2 COLUMN 3
TRY THIS
But when I deploy the report and run it using URL Access:
CLIENT: 10055
STATEMENT 2007
DATE:1002993
THIS IS THE OTHER STATEMENT
COLUMN1 COLUMN2 COLUMN 3
TRY THIS
On all lines with trailing spaces, they (the trailing spaces) have been removed. This is affecting my formatting of some reports and statements. We really want to use the report viewer as it has built in paging, print and export capabilities.
Why does it look okay in VS2005 but different in Report Viewer via URL Access and Report Manager?
Note: When I export as PDF, it looks okay.
The stored procedure I use to return the data is a CLR Hosted assembly as below:
Code Snippet
Partial Public Class StoredProcedures
<Microsoft.SqlServer.Server.SqlProcedure()> _
Public Shared Sub GetPagedDocument(ByVal inText As SqlString)
Dim dr As SqlDataReader
Dim row As New SqlDataRecord(New SqlMetaData("RowText", SqlDbType.Text))
Dim cmd As New SqlCommand("select cast(doc as varchar(max)) as 'DOCTEXT' from testdoc WHERE id='" + inText + "'")
Dim cn As New SqlConnection("context connection=true")
cn.Open()
cmd.Connection = cn
SqlContext.Pipe.SendResultsStart(row) 'initialise the resultset to be returned
dr = cmd.ExecuteReader
'If no records in result set, return.
If Not dr.HasRows Then
row.SetString(0, "There is no document to display or you do not have permission to view the document.")
SqlContext.Pipe.SendResultsRow(row)
SqlContext.Pipe.SendResultsEnd()
' SqlContext.Pipe.Send("There is no document to display.")
Return
End If
'Read rows in the result set
dr.Read()
'Get the entire text
Dim docText As String = dr.Item("DOCTEXT")
'debug
row.SetString(0, docText)
SqlContext.Pipe.SendResultsRow(row)
SqlContext.Pipe.SendResultsEnd()
Return
'end debug
End Sub
End Class
Any help will be appreciated.
Restrict Report Builder Access To Report Execution Timeout
Nov 22, 2006I am setting up the SQL2005 reporting service to let users build their own reports on the web. I'll provide them with pre-built report models. We have concern with SQL database performance by allowing users to execute huge reports. The problem that I have is: If I give the users permissions to build report they'll have access to the report's Properties | Execution page, which allows them to disable the report execution timeout. Is there a way for me to allow them build reports while restrict them to access the report execution timeout settings?
Please advise. Many thanks.
MS Access Report / Remote Access To The Report ?
Nov 12, 2007I have search all around the net, trying to get a solution for my application under MS Access 2003, I developed a database that generates a report, this report will need to be accessed trough the internal network, perhaps we don't want any user to have direct access to the database itself, and also we don't want to have to manually posted the report in the shared folder, we want to set up this to be done automatically and the end user won't need to have MS access in their pc, perhaps exporting the report as an spreadsheet instead. I try by using Macros within Access but this will only work manually from the .mdb file.
I also check what options do I have if I use Javascript but I don't think it will work either, since I'm not using Crystal Reports.
Can you please provide me with some guidance, if this is actually possible from a database/report under MS Access 2003.
Thank you in advance,
Remote Access To Report Data Sources And/or The Report Server Database Is Not Supported In This Edition Of Reporting Services.
Apr 24, 2006I'm using SQL Express with Advance Services & I get this error when I try to deploy my reports. Why do I get this error
An error has occurred during report processing. (rsProcessingAborted)
Cannot create a connection to data source 'EDPSYS'. (rsErrorOpeningConnection)
The feature: "Remote access to report data sources and/or the report server database" is not supported in this edition of Reporting Services. (rsOperationNotSupported)
Justin Song
Multiple Databases Access In Query ... HELP ?
Jul 30, 1998I try to fill a recordset with a query in an asp page to an SQL Server through ODBC connection :
The ODBC connection (eg : DB1Cnnection) is done to one Database (eg : DB1).
and I need to link to another Database (eg : DB2)
it `s like :
set rs=DB1Connection.Execute("Select DB1.xxx FROM TABLE1, TABLE2 WHERE ...")
Please, How do I `tell` to ODBC that TABLE2 is in DB2 ???
HELP !
Managing User Access To Databases
Aug 21, 2002Scenario:
1. Access to database objects is based on database roles.
2. Application administrators handle the assignment of users to database roles. Application administrators are first line managers, typically; they are not DBA's and not Help Desk staff.
Question:
What products are available to simplify the management of user access to databases in the aforementioned scenario?
TIA to all respondents.
--
Peter
One SQL Statement To Access Databases On Different Servers
Dec 8, 2004I know the SQL syntax to join two tables in different databases on the ame server, but does anyone know if a SQL statement will allow you to join tables from different databases on different servers?
View 8 Replies View RelatedRemote Access To Individual Databases
Jan 17, 2008I have SQL Server running on our web server located at a managed hosting site at Rackspace. I've got some developers who are going to be editing various sites and will need access to specific databases. Is there something built in to MSSQL, or a third party app, which will allow for this kind of remote access? They will be doing everything from restructuring these DB's to just inputting data.
Thanks!
Chris Sanders
Read Only Access To All Databases On A Server
Jan 18, 2008Hi,
How can I provide a user read only access to all the databases on the server. I have 15 databases on the server. I know I can give db_datareader access in each database individually but that is time consuming and I have 10 servers for this to be done.
thanks in advance.
List All Databases That A User Has Access To
Nov 17, 2014Any way to list all databases that a user has access to?
View 6 Replies View RelatedMigrate Multiple Access Databases
Jan 21, 2008I’ve been asked to migrate many Access databases to SQL Server. There are no reports, queries or forms in these databases. There are two different database structures. Each has many copies with different data. For example, 80 people each have a copy of abc.mdb. Each copy has the same tables, but different data. The databases cannot be merged without modifying the structure of the databases and the programs that access them. There are over 100 databases ranging in size from 2 MB to 60 MB.
What’s the best approach to do this? I don’t want to manually run each through the upsize wizard.
Should I use a local SQL Server Express or a central SQL Server?
Will there be any benefits to doing this? Will the performance improve?
Personally I’d rather redesign the databases, merge the data and modify the applications that use the data. But it’s not my decision.
Importing Access Databases Into SQL Server
Jul 23, 2005Hi there,I have a situation where an application needs to import data fromnumber of access mdb files on a daily bases. The file names changeevery day. The data import is very straight forward:insert into sql_table select * from acess_tableThere are up to 8 tables in each access file and some access files willhave less. So the process needs to figure out which tables exist inAccess mdb file and import them whole into sql staging tables.Any recommendations are appreciated.Thanks
View 2 Replies View RelatedETL From Multiple Access Databases -SSIS?
Jun 13, 2006Howdy Folks,
I have an ETL project that I want to ask a question about. I want to loop through a folder containing several Access databases, and extract and load each one into a single SQL Server 2005 database. The table layout is the same for all the Access dbs, as well as the SQL db. The number of Access dbs in the folder, their records, and their names will change. Is there a way i can use the SSIS Foreach tool to move through the folder and set the connection string inside the loop?
Thanks for your reply,
Chris