it is proberly not right place to post here, but i found there are many experts here. I learn a lot from here. I would like to ask.
I have a new window 2000 server.
my supervisor let me set Domain Admins to both of us, how to set up?
The domain admins is full control, also we have admin for server, what is different? Is that Domain admin has been add in the server, and just let me add two users to be a domanin admins? how to do that? Thanks for your help.
Hi guys,
We have a scenario where there are about 50 tables in our database and we want to build an intranet web application for users to with the office to access those tables.
Users ability to access tables falls into diferent category:
Some users can NOT view some tables at all
Some users can ONLY view some tables but not insert/update any field
Some users can view and also insert/update some tables (in the same time they might not have view(select) permision on some other tables)
Now, what is the right way to implement this.
I say we have to have a Role, RolePermission, User, UserPermission inside our database to implement this (something which would look like the Roles and Users inside MSSQL) and we only have one user for our Database (MachineName/ASPUSER) to access the database and all the tables within
My colleague says NO, instead of creating all these tables and implement this, we add every user of our application as a Database user inside MSSQL in the Databse Users.
All the web application I have seen so far, DNN, CommunityServer, ... the have tables to implement all these and they don't add users inside the MSSQL.
Now which way is the way to go with, and what problem might we fall into if we use SQL users, is this possible at all. How can I convince him that we have to make and use our own tables to manage this.
Thanks for any help,Mehdi
I'm creating one of my first asp.net pages, and it accesses an MS SQL database.It runs fine locally, but if you go to it remotely through a web browser, you get an exception saying that the database login failed for user ASPNET.My brother told me to do the following in SQL Server Managment studio. It seems I don't have that program installed, so I did it from the SQL command prompt.CREATE LOGIN [bigblueASPNET] FROM WINDOWSuse AdventureWorkscreate user [bigblueASPNET](Where "bigblue" is the computer name and "AdventureWorks" is the database my asp.net web page reads from).This only partially fixed the problem - now when you open the page remotely and try to access the DB I get an error message saying that permission to use the SELECT command is denied.I searched on these forums, and found this:http://forums.asp.net/69166/ShowPost.aspxFor future reference, let's call what my brother told me "Method 1" and what the previous poster did as "Method 2."I haven't tried method 2 because I don't know exactly what I am giving ASPNET permission to do. Does method 2 enable ASPNET to do anything to any database? It seems method 1 is more secure, as from the commands I could already tell it only has permission to access AdventureWorks.So, I'd prefer to use method 1. Can anyone tell me what further commands I can use to give ASPNET permission to do specific actions?If I can't figure out method 1 and have to do method 2, how can I undo what I did in method 1?Thanks!
View 1 Replies View RelatedHi
I've loaded a C# assembly into my database with External Access (the dll contains a routine
that accesses Environment.MachineName).
I am now unable to invoke any of the entry points in this assembly. I get the error message
'An error occured trying to load assembly Id XYZ. System.IO.FileLoadException.....'
I have set the database Trustworthy flag to ON and the assembly does not have a strong name.
Can anyone tell me what I've done wrong?
Thanks
Steve
P.S. I am calling the assembly from SQL code residing in a different database than the one
the assembly has been loaded into.
In SQL 2000, a guest user can access any system tables in a database, but it looks not the same in SQL 2005. What even worse is the SQL security handles it in a confused way. When I sign on as sa and run:
SELECT * FROM sys.sysreferences
Of course I get what I want. While, if I sign on as a user only has guest privilege, I get nothing. Based on my understanding, if one does not have permission to SELECT, he should get rejucted error message. Otherwise, he should get return data. Now, SQL 2005 does not give any.
More interesting thing is when select * from sys.sysobjects, SQL 2005 return data to both sa user and user with guest privilege. Did MS applied different security on different sys.sys.. table? When a select return nothing, how can we know if there is no data at all, or the user does not have sufficient privilege.
Please help me to get out this puzzle.
Thanks.
I had created a CLR function in my db and was able to execute it successfully a couple of months ago. But when I tried to execute it today it was throwing errors saying there was something wrong with the permissions on the assembly. So I decided to drop everything and recreate it except I can not longer create the assembly with EXTERNAL ACCESS permissions. Whenever I try to create the assembly I get the followng error:
Msg 0, Level 11, State 0, Line 0
A severe error occurred on the current command. The results, if any, should be discarded.
Msg 0, Level 20, State 0, Line 0
A severe error occurred on the current command. The results, if any, should be discarded.
I also tried to create the assembly with Unsafe permissions and got the same error. Does anyone know why this error would be occurring now? I tried creating the same assembly on a different SQL 2005 server and it creates successfully and can be executed successfully. Any help would be greatly appreciated!!
Thanks!
GN
I have an application that uses Integrated Windows authentication. My Web.config looks like below
<add key="dbconnection" value=" server=XXX;Initial Catalog=XXX;persist security info=False;Integrated Security=SSPI;Pooling=true" />
When users try to access my application, they get the below error:
Execute permission denied on object 'SprocName', database 'DBNAME',Owner,'dbo'
The Only way I could get rid off the error is if I set DBO permissions for the user group on the databse.
Can someone suggest how to set up a security group with the ‘necessary’ permissions on SQL SERVER (ie read,write execute Sproc etc) and not too many extra ones, like DBO.
Thanks,
Hi,
We have the followoing:
-A "master domain" AD, a "sub domain" AD, a trust relationship between the two (sub trust master)
-A sql server 2005 on a win server 2003 in "sub domain" AD
-A linked server to "sub domain" AD
-A linked server login using a "sub domain" admin acccount
-A view to this linked server
-A grant on masterDomain/Domain Users to the database
-A grant on subDomain/Domain Users to the database
-We want all connections done through "Windows Authentication" not "Database Authentication".
Queries on the view work fine using "sub domain" user accounts.
Queries on the view fail using "master domain" user accounts (including master domain admin accounts)
"Msg 7399, Level 16, State 1, Line 1
The OLE DB provider "ADsDSOObject" for linked server "ADSI" reported an error. The provider indicates that the user did not have the permission to perform the operation."
All connections are done through "Windows Authentication" not "Database Authentication".
Can we establish cross domain connectivity with "Windows Authentication" ?
Below are details of the implementation:
SELECT TOP (100) PERCENT *
FROM OPENQUERY(ADSI,
'SELECT displayname, givenName, sn, cn (etc...)
FROM ''LDAP://OU=PEOPLE,DC=subDomain,DC=com''
WHERE objectCategory = ''Person'' AND objectClass = ''user'' ')
EXEC sp_addlinkedsrvlogin @rmtsrvname ='ADSI', @useself='false',
@rmtuser='subDomainAdminAccnt', @rmtpassword='sunDomainAdminAccntPassword';
In SQL Server Mngt Studio in Server Objects/Linked Servers/Providers/ ADSI properties security tab I have:
"connections will: <be made using this security context> Remote login:'subDomainAdminAccnt' With password: 'subDomainAdminAccntPassword'
Error:
Msg 7399, Level 16, State 1, Line 1
The OLE DB provider "ADsDSOObject" for linked server "ADSI" reported an error. The provider indicates that the user did not have the permission to perform the operation.
Msg 7320, Level 16, State 2, Line 1
Cannot execute the query "SELECT displayname, givenName, sn, cn
FROM 'LDAP://OU=PEOPLE,DC=subDomain,DC=com'
WHERE
objectCategory = 'Person'
AND objectClass = 'user'
" against OLE DB provider "ADsDSOObject" for linked server "ADSI".
SQL Server 2005 anomoly?
In SQL Server Management Studio I granted specific permissions to user "A" to do Select, Insert, Update, Delete on Table "B" -
When I logged on as User "A" and attempted the Insert imto table "B" I got the following error:
"Insert Permission Denied on Table B, Database C, Schema dbo"
Is this a problem with the dbo schema?
Then I went back and created a stored proccedure "D" with the exact same Insert statement inside the procedure. I granted User "A" execute permission on the stored procedure "D".
I then logged on as User A and executed Stored Procedure "D". No Problem - stored procedure executed fine with the Insert.
I attempted the Insert statement again - straight SQL - as User "A" and got the same error as above ("Insert Permission Denied.....")
Strange behavior - cannot do a SQL. Insert even though user has permissions but can execute a store procedure with the same Insert statement.
What gives?
http://www.abvalve.com/careers/form/
can someone please tell me whats the problem with this?
I actually gave that user permission and and still did not work, the DB is in the appdb folder and the network services user is granted full permisions on that folder!
Any ideas
every things at sql2005 have to permission
table , create , select , stored procedure
every things have to make permission to NT AUTHORITYSYSTEM
at last i do every thing without permission how can i make it without it
I tru to add connection to my db in Visual Web Developer 2008 express.
Data source: - I use Microsoft SQL Server Database File (SqlClient).
Under Data File Name: I browse and choose the database and I get this error message
"ECommerceDbYou don't have permission to open this file. Contact the file owner or an administrator to obtain permission." WHat should I do? I already give full control to all users.
My environment is ms sql 2005 express and window vista business version. Thanks for any help.
I have created a DTS package that get a information form a text file and insert the data into a table and package is save as Structured Storage File. Now I am calling this DTS package thru VB application. The pacakge is save under folder that is shared to everyone.
When I run the VB application it runs fine using my login. but when I login as other user(webapp) it does not work. Webapp has DBO rights to the database that importing the data.
I am not sure if this is a permission issue or not.
Thank You,
john
Hi, is there a smarter way to grant permissions on a lot of tables to a user rather than accessing the "Permissions" button on the Database User's Properties?
In SQL 6.5 there is "Object Permissions" that lets me "Grant All". Isn't there a similar way to do it in SQL 7?
I have a database with over 100 tables. I need to add a user with deny permission on all tables except one. Is there a way of doing this without having to enter the names of all the tables and not using EM and ticking over 100 boxes? I tried to write the script using a select from sysobjects where xtype = 'U' but it didn't like it very much!!
Any help would be greatfully appreciated.
Many thanks
Hello, Can anybody explain why a new loggin with Master Database as the Default Dafault Database without any clear permission to a particular database would allow me selection in a pubs or northwind database for an example. Thanks
View 5 Replies View RelatedI created a DTS package to extract data to a text file.
I want to create a login for a user who should be able ONLY to run this DTS. I don't want to give him/her any access to any database .
Is that possible?
Thanks in advance
Giorgio
Hi
I have a user that I need to grant access to a database, he should be able to ...
* create/edit/delete tables, views and stored procedures
So I created a user and then set his default database to the one he should access, then in user_mapping for that database I have checked.
db_Datareader
db_datawriter
db_ddladmin
db_denydatareader
db_securityadmin
public
But when this user try to access the tables with Sql server management studio he get this error "The select permission was denied on the object 'extended propoerties', database 'mssqlsystemresource', schema 'sys'. Microsoft SQL Server, Error: 229)"
What do I need to change in order to get this to work?
What's Defference between Control Server And SysAdmin Role
View 6 Replies View Relatedhi all,
we have so many logins in sql server 2005 . i want to reduce the permissions of the users.
changing permissions to each and user is little bit difficulty .
database level : - db_writer and db_reader, and execute permissions .
i have to grant these permissions only .is there any chance to give for all users
can any one suggest the issue..
thanks
manoj
Hi,
How can set select, add, delete & update permission for objects in a database for a particular user/role in SQL 2005.
In SQL 2000 I could see all the tables listed under permission so that I could give a tik for permission
regards
priw
i have my sql server database set up but when i try to run my app i get this error:http://img308.imageshack.us/img308/2862/untitledep4.pngany help you be grateful :)
View 4 Replies View RelatedIn sql server 2005, what is minimum right a user need to view the content of stored-procedures? That is, in SSMS the user will be able to right click a stored-procedure and then select "Modify" to view the content, but the user has no permission to promote it? Thanks!
View 4 Replies View Relatediam working with http location and using sql server 2005
its getting an error as "SELECT permission denied on object UserDetails' database 'elearning', schema 'dbo'."
"UserDetails" is my table name
"elearning" is database name
i worked same project with filesystem location ,there it is working
iam working with http location and using sql server 2005 its getting an error as "INSERT permission denied on object CourseDetails, database 'mydb', schema 'dbo'." "CourseDetails" is my table name "mydb" is database name i worked same project with filesystem location ,there it is working
View 1 Replies View RelatedI read a few articles on best SQL practices and they kept coming back to using a Least Privileged Account. So I did so and gave that account read only permissions. The articles also said to do updates use Stored Procedures - so I created stored procedures for updating/deleting data.So here's my problem - I connect to the database using the Least Privileged Account, I use the Stored Procedures, but .NET keeps saying I lack permissions. If I GRANT the Least Privileged Account UPDATE/DELETE permission on the table, the Stored Procedures run perfectly. But isn't that EXACTLY what I'm trying to avoid?My greatest concern is someone hacks my website and using the Least Privileged Account, they delete all my data using that account. So I don't want to give the Least Privileged Account the Update/Delete privileges.Thanks a MILLION in advance!
View 3 Replies View RelatedWindows 2000 server, service pack 4, RAID 5 array, 2Gb RAM, SQL server 2000.
.Net framework 1.1 installed and runs happily UNTIL you try to access anything to do with data.
I've got a c# page, imported all relevent namespaces etc. This runs fine on other servers and my XP Pro machine. However, when put on this server, all I get is
Exception Details: System.UnauthorizedAccessException: Access is denied.
I've tried explictly setting permissions on the file, directory etc, but nothing I've found can get the file to work, yet other c# pages which don't use SQL connections work fine !
The offending line:
Line 31: SqlCommand sqlCmd = new SqlCommand(sql,sqlCon);
Line 32: sqlCon.Open();
Line 33: SqlDataReader datareader = sqlCmd.ExecuteReader();
Line 34: while (datareader.Read()
is line 32.
STACK TRACE:
[UnauthorizedAccessException: Access is denied.]
System.EnterpriseServices.Platform.Initialize() +497
System.EnterpriseServices.ResourcePool..ctor(TransactionEndDelegate cb) +11
System.Data.SqlClient.ConnectionPool..ctor(DefaultPoolControl ctrl) +797
System.Data.SqlClient.PoolManager.FindOrCreatePool(DefaultPoolControl ctrl) +170
System.Data.SqlClient.SqlConnectionPoolManager.GetPooledConnection(SqlConnectionString options, Boolean& isInTransaction) +356
System.Data.SqlClient.SqlConnection.Open() +384
ASP.test_aspx.Page_Load(Object sender, EventArgs e) in C:Inetpubwwwrootfishfood est.aspx:32
System.Web.UI.Control.OnLoad(EventArgs e) +67
System.Web.UI.Control.LoadRecursive() +35
System.Web.UI.Page.ProcessRequestMain() +731
I've copied this directory and set up another application on another server and it works fine!
Anyone got any ideas?
I have downloaded and installed the forum on my website but I am having a problem with permsissions on one of the SQL tables. The default.aspx page comes up but when I try to view one of the forums I get the following error message.
SELECT permission denied on object forums_Threads database ower dbo
I have used enterprise manager and checked to make sure that the account I log in with listed in the Web.config file has the correct permissions to access this table and all fields within it. Everything looks ok but I still get the error.
Any help would be appreciated
Thanks,
Glenn
I have developer who is working With VB using COM objects for creating a webpage, and he is making a connection to SQL server using NT account. the NT account has datareader,datawriter and exec SP on the database that the COM objects is calling. But he get the following error 'Login failed for user 'NT AUTHORITYANONYMOUS LOGON''when click on the webpage that was creted using VB.
Does anyone know why would this happend.
Thank You,
john
Whne I try to create a procedure in a database , it throws an error saying
"CREATE PROCEDURE permission denied, database 'PUBS', owner 'dbo'"
Though I am a part of db_owner and ddl_admin fixed database role.
What could be the reason behind it?
hello everybody
I created user "MyUser " with rights
1. public for database "Orders"
2. select, update,delete, insert to table Orders.dbo.PersonalInfo
I have table Orders.dbo.PersonalInfoChangeLog
( it keeps information on any update on Orders.dbo.PersonalInfo including
HOST_NAME())
So I don't want anybody to see even structure of this table(Orders.dbo.PersonalInfo ).
if person loged as "Myuser" he can use
1. sp_help PersonalInfoChangeLog
2.Enterpise Manager to see properties of the table
How can limit rights to see structure without generating Application role ?
Thanks
Hi
Is there a way to give a user a Truncate permission on a table without being in sysadmin role or dbo.
Thanks
How do I grant execute permissions on system stored procedures or an extended stored procedure in the master database to a regular user in a different database? Do I need to create the user in the master db also for the permission to given.
thanks