i run a sqlserver 2000 and im having problems setting a permission a
column in a table..
under a database i have a User that has dataread rights on each table
in the database, but in one table i want to prevent the user from
seeing a column in one perticular table.
i have created the user under security and then i choose the database
user - properties..and i set a X in the specified column...
when i log on as the datareader user i cant see any colummn at all in
the table..
Can someone explain to me how to go about adding column permissions to a new column in SQL server 2005? I added a new column to an existing table, to which I want to add security. Thanks in advance!
I know you can set permissions on a column via T-SQL, can it be done via Enterprise Manager? If so, how do you do it? I've looked everywhere but dont seem to be able to find how to do in EM.
We have a user who is set to following permission on a DB,
server role: public db permission: db_datareader
But when user tries to use following query on xml column he getting error as below,
SELECT ticket_id FROM dbo.Form WITH(NOLOCK) WHERE LEN(form_document.value('(/Form_Fields/Form_Field[@field_type_desc="Number"]/@field_value)[1]','varchar(100)')) > 0
Error: The EXECUTE permission was denied on the object 'testDB_Form_Schema', database 'testDB', schema 'dbo'.Do i have provide any additional permissions to query xml content ?
Using SQL Server 2k5 sp1, Is there a way to deny users access to a specific column in a table and deny that same column to all stored procedures and views that use that column? I have a password field in a database in which I do not want anyone to have select permissions on (except one user). I denied access in the table itself, however the views still allow for the user to select that password. I know I can go through and set this on a view by view basis, but I am looking for something a little more global.
I have a excel file which has a column called "Code" and their values are A,B,C,D,E,F,G,H. I want to create a new column called "status" based on the values of "Code".
Code:
A B C D E F G H
If A,C,E,G then "status" = "Active" else if B,D,F,H then "Status" = "Inactive". I like to do it using "Derived Column".
The requirement is to have a table say 'child_table', with an Identity column to refer another column from a table say 'Parent_table'..
i cannot implement this constraint, it throws the error when i execute the below Alter query,
ALTER TABLE child_table ADD CONSTRAINT fk_1_ct FOREIGN KEY (child_id) REFERENCES parent_table (parent_id) ON DELETE CASCADE
the error thrown is : Failed to execute alter table query: 'ALTER TABLE child_table ADD CONSTRAINT fk_1_ct FOREIGN KEY (child_id) REFERENCES parent_table (parent_id) ON DELETE CASCADE '. Message: java.sql.SQLException: Cascading foreign key 'fk_1_ct' cannot be created where the referencing column 'child_table.child_id' is an identity column.
Hi guys, If I have a temporary table called #CTE With the columns [Account] [Name] [RowID Table Level] [RowID Data Level] and I need to change the column type for the columns: [RowID Table Level] [RowID Data Level] to integer, and set the column [RowID Table Level] as Identity (index) starting from 1, incrementing 1 each time. What will be the right syntax using SQL SERVER 2000?
I am trying to solve the question in the link below: http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=2093921&SiteID=1
Thanks in advance, Aldo.
I have tried the code below, but getting syntax error...
ALTER TABLE #CTE ALTER COLUMN [RowID Table Level] INT IDENTITY(1,1), [RowID Data Level] INT;
I have also tried:
ALTER TABLE #CTE MODIFY [RowID Table Level] INT IDENTITY(1,1), [RowID Data Level] INT;
I am working http location and using sql server 2005 ,it is showing an error as " DELETE permission denied on object 'CourseDetails', database 'LOGIN', schema 'dbo'." CourseDetails is my table name and LOGIN is my database name.
I am trying to setup a BCP command in a stored procedure it workds for me an administrator. i'm using a user's account in the username and password in the BCP command of a user that has DBO rights on the database i'm extracting the dat from. I can execute the stored procedure from my workstation and the server using my login account in QA. Using the username of the dbo account in QA i can get it to work at the server but not at my workstation orher workstation. my thoughts were that it was network permission related but i bumped her account to that of a domain admin and it still will only work on the server. it generates the following error. The name specified is not recognized as an internal or external command, operable program or batch file.
this is what i'm executing with the names changed to protect the innocent
EXEC MASTER..XP_CMDSHELL 'bcp file_test..table_out out C:filej.txt -U username -P password -c' the environment is SQL7 on a 2000 Advanced server and we are running active directory.
i'm guessing it's something i'm just overlooking. i hope. any help would be most appreciated.
Hi , MY sysadministrator gave a sysadmin permissions to my login..,but i am not getting those permissions... when i check syspermissions system table it is showing my login id is having sysadming permissions... when we checked his machine , in security serverroles sysadministrators---properties--there it is showing my login-id.. but when i trying to click properties of servers it showing '' ONLY MEMBERS OF THS SYSADMIN CAN ACCESS THIS FEATURE'''' why it is happening pls let me know..
When I restore a database, I lose login permission and role permissions. I end up going into the login and unselect and reselect the database to make sure that the login works with the database. Is there a way to get around this??
One other question:: I have added 65 new tables to a database and want to give select only to all logins to those specific table -- is there an easy way of doing this???
WHat kind of permissions do you need to create a new job? It looks like I am the only one that can since I have full administator rights. So I created the job and then changed ownership to another user, but he cannot add a new step. WHen he tried to created a job he received message ERROR 229 EXECUTE permission denied on object 'sp_enum-Sqlagent_subsystem' database 'MSDB' owner DBO I gave the user access to MSDB as DBO but it didn't make any difference.
Can anyone help me with this problem? Is it possible for a user that runs one application against database A to update a table via a stored procedure i database B during runtime without beeing entered as a user in that database, i.e execute that stored procedure with a default or given user. The reason is that we don't want to administrate an unknown number of users that will have no access to that database except via that stored procedure.
what does it meant if I go and look at the permissions on a user and in one item (say a stored procedure) there is a green check giving permissions but the check cannot be removed. How can I remove that?
What are the minimum permissions required to be able to read the application log in the event viewer & run perfformance monitor? Do you have to have NT admin rights on the server? thanks!
To all, I need some help understanding some things about SQL permissions. Login ID A is a login mapped to the dbo of database A and B. Login ID B is aliased to dbo. Why when running a transfer from database A to B, it runs OK when run by Login A, but fails as Login B. In the failure situation, I get error 15244, only sa or dbo can set database permissions. I thought by virtue of the aliasing I had dbo permissions. This SQL stuff is more confusing than any TCP/IP or Cisco stuff I have ever done.
1) Administrator access to the local box on running SQL 2) The ability to access the SQLData directory directly through drive mappings
We are attempting to create as secure an environment as possible and keep everything locked down. In my opinion, they do not need these type of accesses. They do have sa priviliges to the SQL server but I see no reason to give them Windows 2000 administrator priviliges. Also, to further the security on the servers (they are publicly accessible), we are trying to eliminate all shares including admin shares. Seems to me they should be able to accomplish everything using the SQL tools. Am I off base on this?
I have a database with sql as the engine and access is on the client side. my problem is that when more then one person gets into the database it comes up read only. They are on sql as a users, not sure whats going on
I'm developing a DTS package which will be scheduled and will write files out to a LAN share. When I execute the package manually from enterprise manager it works just fine. But when scheduled..fails with a access denied. Can someone point me towards the area I need to fix this? I'm running the SQL server under the System account.
I have a vendor that needs to remote in to our SQL 2005 Enterprise server and connect to their database. I have created them a username and password in SQL and they can VPN into our network and connect to their database using Management Studio just fine. So far so good! The issue is this: They need to be able to see the processes of an application that connects to their database. When they run 'sp_who2' all they can see is themselves running 'Management Studio'.
What else do I need to give them permission to in order for them to see all processes that are tied to their database? I need to do this without giving them permissions to other databases. I have several databases on this server.
Yogesh writes "1. A user is member of public role and sales role.Public role has the permissions to select on all the table,and sales role,which doesn't have a select permissions on some of the tables.Will that user be able to select from all tables ?
Q 2 Describe application role and explain a scenario when you will use it ?
Q 3
I have a SP names YourSP and have the a select stmt inside the SP. I also have a user named YourUser.What permissions i have give him for accessing the SP ?"
I have a bunch of sp's I need to push out to the server. I need to grant permissions to each so that the calling application will be able to execute them. I currently open each one, and manually add the user permission. Is there a script that i can run that will do this (there are over 100 sp's) Thanks
my computer = NZ3 (sql Server) my computer = the report server
I can design / view / publish to local host (myserver) others in domain can only view local host (myserver) and no content
so to test added one person - as content manager he can now see all reports - but when he goes to run gets the error cannot create a connection to the datasource?
I am using sql server 2005 standard
where else should I be changing or setting permissions
1) how to give executable permission on all the store procedures to particular user/login on selected database ? 2) how to give executable permissions to all the functions in sql server 2005 3) how to give truncate table right on all the tables
