Showing posts with label following. Show all posts
Showing posts with label following. Show all posts

Friday, March 30, 2012

Perspectives 64 Bit Standard Edition - Not Supported

I received the following message:

Error1Errors related to feature availability and configuration: The 'Perspectives' feature is not included in the '64 Bit Standard Edition' SKU.

Does the 64 Bit developer Edition Support this?

Any suggestion we need to test and stage on our dev box before deploying to 64 bit enterprise prod box.

Thanks,

The 64 bit developer edition will allow you to create perspectives.

Here is a link with the different features for each edition:

http://msdn2.microsoft.com/en-us/library/ms143761.aspx

|||

Maybe the Deployment Server Edition property isn't set to Enterprise?

http://groups.google.com/group/microsoft.public.sqlserver.olap/browse_frm/thread/36855351fd3096b2/c7107957b1da7a13?#c7107957b1da7a13

>>

Aggregation function None is not allowed in Standard edition

From:

Chris Webb - view profile

Date:

Fri, Oct 20 2006 12:24 pm

Email:

Chris Webb <onlyforpostingtonewsgro...@.crossjoin.co.uk>

Groups:

microsoft.public.sqlserver.olap

Not yet rated

Rating:

show options

Reply | Reply to Author | Forward | Print | Individual Message | Show original | Report Abuse | Find messages by this author

Hi Roger,

Have you set the Deployment Server Edition property appropriately on your project?


http://cwebbbi.spaces.live.com/blog/cns!7B84B0F2C239489A!856.entry

HTH,

Chris
--
Chris Webb, MVP
Analysis Services and MDX Consultancy: http://www.crossjoin.co.uk
Blog: http://cwebbbi.spaces.live.com/

sql

Wednesday, March 28, 2012

Perplexing Problem with tsql join.

I have been trying to figure this out for some time and I am sure there
must be an easier way than using a cursor. Given the following table
(simplified example):
ID CUSTID DTE
1 1 7/1/05
2 1 9/1/05
3 2 6/1/05
4 2 10/25/06
5 3 5/2/05
6 3 5/2/06
7 4 5/5/05
Return the max dte value record for each custid
So ie the return recordset would contain the following:
ID CUSTID DTE
2 1 9/1/05
4 2 10/25/06
6 3 5/2/06
7 4 5/5/05
Thanks in advance.
PaulYou could have more 1 or more records for each custid in my example
table I forgot to create on custid with 3 records.|||The following would work of course but what if you had another column
that could not be calculated by an aggregate column.
select max(id) id,cid,max(dte) dte from fred group by cid
for example lets add the folowing random values to column rnd
ID CUSTID DTE RND
1 1 7/1/05 32
2 1 9/1/05 42
3 2 6/1/05 68
4 2 10/25/06 2
5 3 5/2/05 5
6 3 5/2/06 9
7 4 5/5/05 3
8 3 6/2/06 7
So the return set would now include
ID CUSTID DTE RND
2 1 9/1/05 42
4 2 10/25/06 2
8 3 6/2/06 7
7 4 5/5/05 3|||Try,
select a.*
from t1 as a inner join (select custid, max(dte) as max_dte from t1 group by
custid) as b on a.custid = b.custid and a.dte = b.max_dte
AMB
"firebalrog" wrote:

> I have been trying to figure this out for some time and I am sure there
> must be an easier way than using a cursor. Given the following table
> (simplified example):
> ID CUSTID DTE
> 1 1 7/1/05
> 2 1 9/1/05
> 3 2 6/1/05
> 4 2 10/25/06
> 5 3 5/2/05
> 6 3 5/2/06
> 7 4 5/5/05
> Return the max dte value record for each custid
> So ie the return recordset would contain the following:
> ID CUSTID DTE
> 2 1 9/1/05
> 4 2 10/25/06
> 6 3 5/2/06
> 7 4 5/5/05
> Thanks in advance.
> Paul
>|||Thanks for the quick response. That is exactly what I needed. I forgot
you could use a query as part of the join. And even if I did I don't
think that I would have thought of using it in that way. Thats
beautiful. Now I will have to go through all my stored procedures and
check for places where I was using a cursor method to look for those
records in that type of situation.
Thanks again.

Wednesday, March 21, 2012

Permissions problem accessing external DLL through reports

Hi,
I'm having this wee problem when trying to view my report via the report
manager screen - I get the following error "Request for the permission of
type System.Security.Permissions.SecurityPermission, mscorlib,
Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
failed"...This seems to be due to me trying to access a seperate DLL which in
turn accesses the database that I created for the reports for translation
purposes (I added the DLL to the References collection for each of the
reports). Any suggestions would be greatly appreciated.I am also tring to use an assembly to translate y i got the same message.
I already try to configure my rssvpolicy.config like:
<CodeGroup class="UnionCodeGroup"
version="1"
PermissionSetName="XMLFile_MultiLang_Permission"
Name="MultiLangCodeGroup"
Description="A special code group for my custom assembly.">
<IMembershipCondition class="UrlMembershipCondition"
version="1"
Url="C:\Program Files\Microsoft SQL Server\MSSQL\Reporting
Services\ReportServer\bin\MultLang.dll"/>
</CodeGroup>
but i habe the same error.
Have you found out how to solve it ?
"Rowan Massey" wrote:
> Hi,
> I'm having this wee problem when trying to view my report via the report
> manager screen - I get the following error "Request for the permission of
> type System.Security.Permissions.SecurityPermission, mscorlib,
> Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
> failed"...This seems to be due to me trying to access a seperate DLL which in
> turn accesses the database that I created for the reports for translation
> purposes (I added the DLL to the References collection for each of the
> reports). Any suggestions would be greatly appreciated.sql

Permissions on sp_OASetProperty

We have a request to be able to execute the following from an application:
declare @.languageValue varchar(1000)
exec sp_OASetProperty @.languageValue, 'CharSet', 'Shift-JIS'
Currently the developer is unable to because they get an "EXECUTE permission
denied on object 'sp_OASetProperty', database 'master', owner 'dbo'." when
running this.
We have no users (other than dbo & guest) in the master database. How can
this be setup with the least amount of permissions being given.
I appreciate any suggestions.
thanks
Meenal> We have no users (other than dbo & guest) in the master database. How can
> this be setup with the least amount of permissions being given.
Assuming SQL 2000 SP3 or above, you can use cross-database ownership
chaining to allow limited access to the sp_OA* procs and other potentially
dangerous master procs. Note that you should enable 'db chaining' in an
sa-owned database when only sysadmin role members are permitted to create
dbo-owned objects in that database.
1) From Enterprise Manager, uncheck 'only uses with sysadmin...' under
Management-->SQL Server Agent-->Job System and specify a Windows proxy
account when prompted. This proxy account is used as the OS security
context for access to external resources.
2) Change your user database owner to 'sa':
USE MyDatabase
EXEC sp_changedbowner 'sa'
3) Enable the 'db chaining' database option
EXEC sp_dboption 'MyDatabase', 'db chaining', true
4) Create a proc to wrap the needed functionality:
CREATE PROC dbo.usp_DoSomething
@.MyData
AS
--initialization code, including sp_OACreate
EXEC sp_OASetProperty
@.token,
@.languageValue,
'CharSet',
'Shift-JIS'
--other code, including sp_OADestroy
GO
5) Create execute permission to users:
GRANT EXEC ON dbo.usp_DoSomething TO MyRole
This will provide an unbroken ownership chain because all of the objects
involved have the same owner (dbo) and both database owners are owned by the
same login (sa).
It is important that the proc be constructed in such a way as to prevent
ad-hoc execution of unintended commands.
Hope this helps.
Dan Guzman
SQL Server MVP
"Meenal Dhody" <meenal_dhody@.hotmail.com> wrote in message
news:%23EjS4BkaGHA.3992@.TK2MSFTNGP05.phx.gbl...
> We have a request to be able to execute the following from an application:
> declare @.languageValue varchar(1000)
> exec sp_OASetProperty @.languageValue, 'CharSet', 'Shift-JIS'
> Currently the developer is unable to because they get an "EXECUTE
> permission
> denied on object 'sp_OASetProperty', database 'master', owner 'dbo'." when
> running this.
> We have no users (other than dbo & guest) in the master database. How can
> this be setup with the least amount of permissions being given.
> I appreciate any suggestions.
> thanks
> Meenal
>
>
>|||Thanks alot for you suggestion- just a question or 2.
If the database is owned by an nt account and we use mixed mode for SQL
authenticate would I just set the proxy account up using the SQL NT login?
thanks
Meenal
"Dan Guzman" <guzmanda@.nospam-online.sbcglobal.net> wrote in message
news:OBMImNsaGHA.1812@.TK2MSFTNGP04.phx.gbl...
can[vbcol=seagreen]
> Assuming SQL 2000 SP3 or above, you can use cross-database ownership
> chaining to allow limited access to the sp_OA* procs and other potentially
> dangerous master procs. Note that you should enable 'db chaining' in an
> sa-owned database when only sysadmin role members are permitted to create
> dbo-owned objects in that database.
> 1) From Enterprise Manager, uncheck 'only uses with sysadmin...' under
> Management-->SQL Server Agent-->Job System and specify a Windows proxy
> account when prompted. This proxy account is used as the OS security
> context for access to external resources.
> 2) Change your user database owner to 'sa':
> USE MyDatabase
> EXEC sp_changedbowner 'sa'
> 3) Enable the 'db chaining' database option
> EXEC sp_dboption 'MyDatabase', 'db chaining', true
> 4) Create a proc to wrap the needed functionality:
> CREATE PROC dbo.usp_DoSomething
> @.MyData
> AS
> --initialization code, including sp_OACreate
> EXEC sp_OASetProperty
> @.token,
> @.languageValue,
> 'CharSet',
> 'Shift-JIS'
> --other code, including sp_OADestroy
> GO
> 5) Create execute permission to users:
> GRANT EXEC ON dbo.usp_DoSomething TO MyRole
>
> This will provide an unbroken ownership chain because all of the objects
> involved have the same owner (dbo) and both database owners are owned by
the
> same login (sa).
> It is important that the proc be constructed in such a way as to prevent
> ad-hoc execution of unintended commands.
> --
> Hope this helps.
> Dan Guzman
> SQL Server MVP
> "Meenal Dhody" <meenal_dhody@.hotmail.com> wrote in message
> news:%23EjS4BkaGHA.3992@.TK2MSFTNGP05.phx.gbl...
application:[vbcol=seagreen]
when[vbcol=seagreen]
can[vbcol=seagreen]
>|||I'm not sure why you ask this question. The proxy account is used as the
external OS security context when non-sysadmin users execute the sp_OA*
procs. That Windows account doesn't even need access to SQL Server.
Setting unless the code invoked via sp_OA* connects to SQL using a trusted
connection.
Unless you specify 'sa' as the user database owner, you'll need to add the
users to the master database and grant execute permissions on the sp_OA*
procs. It is technically possible to simply grant execute permissions to
guest or public but that's a very bad security practice.
Hope this helps.
Dan Guzman
SQL Server MVP
"Meenal Dhody" <meenal_dhody@.hotmail.com> wrote in message
news:eEF4P6UbGHA.3812@.TK2MSFTNGP04.phx.gbl...
> Thanks alot for you suggestion- just a question or 2.
> If the database is owned by an nt account and we use mixed mode for SQL
> authenticate would I just set the proxy account up using the SQL NT login?
> thanks
> Meenal
> "Dan Guzman" <guzmanda@.nospam-online.sbcglobal.net> wrote in message
> news:OBMImNsaGHA.1812@.TK2MSFTNGP04.phx.gbl...
> can
> the
> application:
> when
> can
>

Tuesday, March 20, 2012

permissions issue with http driven report in web iframe

Hi there,

I need to understand why I am getting the following error when I run my deployed (remote) report embedded in an iframe within a page of my web application.

error:
An

error has occurred during report processing. (rsProcessingAborted)
Query

execution failed for data set 'cnMOOR'. (rsErrorExecutingCommand)For

more information about this error navigate to the report server on the local

server machine, or enable remote error

This happens when I fire the following code from a commandbutton:
AppSettingsReader cfgApp = new AppSettingsReader();

string prefix = Convert.ToString(cfgApp.GetValue("reporturlprefix", typeof(System.String)));

string reporturl = prefix + "Client&rs:Command=Render&rs:Format=HTML4.0&rc:Parameters=False&supplierid=" + Session["supplierId"].ToString() + "&clientid=" + ddlClient.SelectedItem.Value + "&startdate=" + txtStartDate.Text + "&enddate=" + txtEndDate.Text + "&ownertype=1";

SpecificClient.Attributes.Add("src", reporturl);

SpecificClient is the ID of the Iframe

on the same page I created a link - which runs the report perfectly - no permission problems.
<a href="http://server2003msrs/reportserver?/moorreports/Client&rs:Command=Render&rs:Format=HTML4.0&rc:Parameters=False&supplierid=28&clientid=71&startdate=2007-01-01&enddate=2007-02-16&ownertype=1">Test</a>

I don't understand why these two controls are behaving differently.

I'd appreciate some guidance with this as the deadline looms...

Helen


  • Hi there,

    something that I didn't mention - this error only happened when I changed the connection string properties. Previously both controls had worked fine.

    I eventually fixed it by creating a new report whilst pointing at the new database.

    suddenly all of them worked as before.

    weird, but that's what solved the issue.

    regards Helen

  • permissions issue with http driven report in web iframe

    Hi there,

    I need to understand why I am getting the following error when I run my deployed (remote) report embedded in an iframe within a page of my web application.

    error:
    An

    error has occurred during report processing. (rsProcessingAborted)
    Query

    execution failed for data set 'cnMOOR'. (rsErrorExecutingCommand)For

    more information about this error navigate to the report server on the local

    server machine, or enable remote error

    This happens when I fire the following code from a commandbutton:
    AppSettingsReader cfgApp = new AppSettingsReader();

    string prefix = Convert.ToString(cfgApp.GetValue("reporturlprefix", typeof(System.String)));

    string reporturl = prefix + "Client&rs:Command=Render&rs:Format=HTML4.0&rc:Parameters=False&supplierid=" + Session["supplierId"].ToString() + "&clientid=" + ddlClient.SelectedItem.Value + "&startdate=" + txtStartDate.Text + "&enddate=" + txtEndDate.Text + "&ownertype=1";

    SpecificClient.Attributes.Add("src", reporturl);

    SpecificClient is the ID of the Iframe

    on the same page I created a link - which runs the report perfectly - no permission problems.
    <a href="http://server2003msrs/reportserver?/moorreports/Client&rs:Command=Render&rs:Format=HTML4.0&rc:Parameters=False&supplierid=28&clientid=71&startdate=2007-01-01&enddate=2007-02-16&ownertype=1">Test</a>

    I don't understand why these two controls are behaving differently.

    I'd appreciate some guidance with this as the deadline looms...

    Helen


  • Hi there,

    something that I didn't mention - this error only happened when I changed the connection string properties. Previously both controls had worked fine.

    I eventually fixed it by creating a new report whilst pointing at the new database.

    suddenly all of them worked as before.

    weird, but that's what solved the issue.

    regards Helen

  • permissions granted to user '<domain\username>' are insufficient for performing th

    When deploying to my production report server, I am getting the
    following error:
    The permissions granted to user '<domain\username>'are insufficient for
    performing this operation.
    1> my domain/user acct is a member of the report server machine's
    administrator's account.
    2> my domain/user has "content manager" and "publisher" rights in
    Report Manager for the appropriate directories; in this case, "Models"
    and "Home."
    3> I am deploying from VS 2005 to a server in the domain
    4> my domain/user can see all administrative components when I view the
    Report Manager.
    Not sure what to try next. Any suggestions?
    Thanks.Evidently (at least in my case), Content Manager is not by default set
    to manage models. After configuring the Content Manager role, it works
    fine. To configure the content manager role:
    Site Settings > Configure item-level role definititions > Content
    Manager
    select: "manage models" and "view models"
    Rob

    Monday, March 12, 2012

    permissions for sp_OASetProperty

    We have a request to be able to execute the following from an application:
    declare @.languageValue varchar(1000)
    exec sp_OASetProperty @.languageValue, 'CharSet', 'Shift-JIS'
    Currently the developer is unable to because they get an "EXECUTE permission
    denied on object 'sp_OASetProperty', database 'master', owner 'dbo'." when
    running this.
    We have no users (other than dbo & guest) in the master database. How can
    this be setup with the least amount of permissions being given.
    I appreciate any suggestions.
    thanks
    MeenalI answered your question in the security group.
    Hope this helps.
    Dan Guzman
    SQL Server MVP
    "Meenal Dhody" <meenal_dhody@.hotmail.com> wrote in message
    news:eQW9OItaGHA.5108@.TK2MSFTNGP05.phx.gbl...
    > We have a request to be able to execute the following from an application:
    > declare @.languageValue varchar(1000)
    > exec sp_OASetProperty @.languageValue, 'CharSet', 'Shift-JIS'
    > Currently the developer is unable to because they get an "EXECUTE
    > permission
    > denied on object 'sp_OASetProperty', database 'master', owner 'dbo'." when
    > running this.
    > We have no users (other than dbo & guest) in the master database. How can
    > this be setup with the least amount of permissions being given.
    > I appreciate any suggestions.
    > thanks
    > Meenal
    >
    >
    >
    >

    permissions for sp_OASetProperty

    We have a request to be able to execute the following from an application:
    declare @.languageValue varchar(1000)
    exec sp_OASetProperty @.languageValue, 'CharSet', 'Shift-JIS'
    Currently the developer is unable to because they get an "EXECUTE permission
    denied on object 'sp_OASetProperty', database 'master', owner 'dbo'." when
    running this.
    We have no users (other than dbo & guest) in the master database. How can
    this be setup with the least amount of permissions being given.
    I appreciate any suggestions.
    thanks
    MeenalI answered your question in the security group.
    --
    Hope this helps.
    Dan Guzman
    SQL Server MVP
    "Meenal Dhody" <meenal_dhody@.hotmail.com> wrote in message
    news:eQW9OItaGHA.5108@.TK2MSFTNGP05.phx.gbl...
    > We have a request to be able to execute the following from an application:
    > declare @.languageValue varchar(1000)
    > exec sp_OASetProperty @.languageValue, 'CharSet', 'Shift-JIS'
    > Currently the developer is unable to because they get an "EXECUTE
    > permission
    > denied on object 'sp_OASetProperty', database 'master', owner 'dbo'." when
    > running this.
    > We have no users (other than dbo & guest) in the master database. How can
    > this be setup with the least amount of permissions being given.
    > I appreciate any suggestions.
    > thanks
    > Meenal
    >
    >
    >
    >

    permissions for developers not working after 2005 upgrade

    Prior to our move to 2005...permissions were granted to developers by adding them to the following fixed database roles...db_ddladmin, db_datareader, db_datawriter, and db_securityadmin. They created their objects using 'dbo' as the owner.

    After upgrading to 2005, suddently they are having difficulty accessing their objects with this same security. Do they need permissions on the dbo schema?

    Can you please elaborate on the access difficulty? Are you encountering errors and, if yes, what are those errors? It would help if you could give us an example of some action that used to work and now doesn't, and of what is the system response in this case.

    Thanks
    Laurentiu

    |||

    They are making a connection through Visual Studio using the MS OLE DB Provider for SQL Server with their domain account and receiving the following error...

    SELECT permission denied on object 'Contact_Info', database 'GetLean', schema 'dbo'.

    |||

    Could you check what is the current execution context at the time when this error is obtained? You can use Profiler to figure out what is the current execution context.

    There are two possibilities:

    (1) current execution context is not a member of db_datareader, so you do not have SELECT permission.

    (2) current execution context is explicitly denied SELECT permission on the Contact_Info table.

    If you determine the current execution context, then you can check whether it's a member of db_datareader by looking at the sys.database_role_members catalog. You can check for the SELECT permission being denied by looking at the sys.database_permissions catalog.

    Thanks
    Laurentiu

    |||

    They are a member of the db_datareader, db_datawriter, db_ddladmin, and db_securityadmin roles. There are no permissions explicitly denied in this database.

    Even though they have db_datareader, db_datawriter, db_ddladmin, and db_securityadmin rights....must I still assign them to the dbo schema?

    |||

    db_datareader grants select on the entire database, hence on the dbo schema as well (http://msdn2.microsoft.com/en-us/library/ms189612.aspx). You don't need to do a special permission grant for the dbo schema.

    Can you try a little experiment? Create a test table in the dbo schema and then verify if those members of db_datareader can access it. Also, create a separate schema and a table in it and see if there is the same behavior for it as for the dbo schema.

    Also, does this happen for all those developers or only for some? If some of them were added to db_denydatareader role, then that would prevent them from selecting from anything. Are they members of other roles than those four that you mentioned?

    Thanks
    Laurentiu

    |||

    It turned out not to be a DBA problem. Sorry, should have posted the resolution earlier.

    It turned out to be a developer issue...a combination of failing to practice current standards and inexperience with Visual Studio. Aargh!

    Friday, March 9, 2012

    Permissions

    Have the following table (IV00101) with the following fields(itemnmbr, itemname etc.) .

    IV00101
    ----
    ItemNmbr
    ItemName
    ...

    The following lines work.
    PRINT PERMISSIONS()
    PRINT PERMISSIONS(OBJECT_ID('tblItem'))

    The following line should. but doesn't
    PRINT PERMISSIONS(OBJECT_ID('tblItem','ItemNmbr'))

    Anyone have any ideas here?Nm, Figured it out. The 2nd parameter belongs to the permissions function instead of the Object_ID.

    permissions

    Hello
    I want to give the following permissions to a user:
    * Can read sql server tables through Microsoft Access
    odbc links, but cannot write using this method
    * Can insert, update or delete rows in sql server tables
    through stored procedures or an aplicattion
    Can I do that? How?
    Thanks for your helpJefferson
    From BOL
    GRANT INSERT, UPDATE, DELETE
    ON authors
    TO Mary, John, Tom
    GO
    Also consider using Application Role (for more details please refer to BOL)
    "Jefferson" <jeff_cm@.yahoo.com> wrote in message
    news:0bb201c37160$5ee5e670$a401280a@.phx.gbl...
    > Hello
    > I want to give the following permissions to a user:
    > * Can read sql server tables through Microsoft Access
    > odbc links, but cannot write using this method
    > * Can insert, update or delete rows in sql server tables
    > through stored procedures or an aplicattion
    > Can I do that? How?
    > Thanks for your help
    >|||If they can read all data, add the users to the
    db_datareader role. To insert, update or delete through
    stored procedures, just give execute permissions on the
    stored procedures only and no insert, update or delete on
    the tables. You will need to make sure you maintain
    ownership chains as well.
    If you want it managed through an application only, you
    would want to look at Application Roles.
    -Sue
    On Tue, 2 Sep 2003 07:42:01 -0700, "Jefferson"
    <jeff_cm@.yahoo.com> wrote:
    >Hello
    >I want to give the following permissions to a user:
    > * Can read sql server tables through Microsoft Access
    >odbc links, but cannot write using this method
    > * Can insert, update or delete rows in sql server tables
    >through stored procedures or an aplicattion
    >Can I do that? How?
    >Thanks for your help

    Wednesday, March 7, 2012

    Permission tracking

    Hi all,
    i'm facing the following situation: user rights must be granted for a very
    short period of time, so that the user does his insert/update/delete job.
    The problem is that there are many users who have requests and giving &
    revoking permissions are taking a lot of time. Did anybody implemented an
    automated tracking system, and if yes, could you give me a hint please? A
    good way to implement permission tracking would be triggers but unluckily,
    in Sql 2000, they can't be used on system tables...:-(
    --
    Tudor Sofron
    MCSE, MCSA
    Ipsos- NMRTudot
    I am not sure what did you mean?
    Do you want the users to be able INSERT/UPDATE/DELETE operations for a short
    time?
    What is a short time ( one an hour, two minutes) ?
    I suggest you using STORED PROCEDURES for security reasons. Don't grant
    access on underlying tables ,instead grant EXECUTE permissions for the users
    on stored procedures that they need to be run.
    "Tudor Sofron" <tsofron@.cluj.astral.rom> wrote in message
    news:uc9kgMXxEHA.1988@.TK2MSFTNGP12.phx.gbl...
    > Hi all,
    > i'm facing the following situation: user rights must be granted for a very
    > short period of time, so that the user does his insert/update/delete job.
    > The problem is that there are many users who have requests and giving &
    > revoking permissions are taking a lot of time. Did anybody implemented an
    > automated tracking system, and if yes, could you give me a hint please? A
    > good way to implement permission tracking would be triggers but unluckily,
    > in Sql 2000, they can't be used on system tables...:-(
    > --
    > Tudor Sofron
    > MCSE, MCSA
    > Ipsos- NMR
    >
    >|||Well...
    this is the table i've created:
    CREATE TABLE [User_RightsGranted] (
    [User_Name] [varchar] (200) COLLATE SQL_Latin1_General_CP1_CI_AS NOT
    NULL ,
    [User_ID] [smallint] NULL ,
    [User_SID] [varbinary] (85) NULL ,
    [DB_Name] [varchar] (255) COLLATE SQL_Latin1_General_CP1_CI_AS NOT N
    ULL ,
    [Object_Name] [varchar] (200) COLLATE SQL_Latin1_General_CP1_CI_AS N
    ULL ,
    [Db_Owner] [tinyint] NULL ,
    [Data_Reader] [tinyint] NULL ,
    [Data_Writer] [tinyint] NULL ,
    [Exec] [tinyint] NULL ,
    [Select] [tinyint] NULL ,
    [Insert] [tinyint] NULL ,
    [Update] [tinyint] NULL ,
    [Delete] [tinyint] NULL ,
    [DateStart] [datetime] NOT NULL CONSTRAINT [DF_User_Rights_DateS
    tart]
    DEFAULT (getdate()),
    [DateEnd] [datetime] NULL ,
    [OpDate] [datetime] NOT NULL CONSTRAINT [DF_User_Rights_OpDate]
    DEFAULT
    (getdate()),
    [OpUser] [varchar] (200) COLLATE SQL_Latin1_General_CP1_CI_AS NOT NU
    LL
    CONSTRAINT [DF_User_Rights_OpUser] DEFAULT (suser_sname() + '.' +
    host_name())
    ) ON [PRIMARY]
    GO
    The column names are pretty explicit so it's no need to explain their
    function. The problem I have is that I can't automatize the whole process,
    so I have to complete the table manually. So...did anybody faced such
    problems, and if yes, how did you solved them? See my comments to your post
    below...
    Thanks,
    Tudor Sofron
    MCSE, MCSA
    Ipsos- NMR
    "Uri Dimant" <urid@.iscar.co.il> wrote in message
    news:eUVFySXxEHA.2040@.tk2msftngp13.phx.gbl...
    > Tudot
    > I am not sure what did you mean?
    > Do you want the users to be able INSERT/UPDATE/DELETE operations for a
    short
    > time?
    yes. I grant users INSERT/UPDATE/DELETE rights and complete the above table.
    > What is a short time ( one an hour, two minutes) ?
    about 30 minutes, after that I revoke the granted permissions...but I have
    to do that manually...and update a similar table...

    > I suggest you using STORED PROCEDURES for security reasons. Don't grant
    > access on underlying tables ,instead grant EXECUTE permissions for the
    users
    > on stored procedures that they need to be run.
    well...it's not that easy to implement the use of sp's...
    >
    >
    > "Tudor Sofron" <tsofron@.cluj.astral.rom> wrote in message
    > news:uc9kgMXxEHA.1988@.TK2MSFTNGP12.phx.gbl...
    very[vbcol=seagreen]
    job.[vbcol=seagreen]
    an[vbcol=seagreen]
    A[vbcol=seagreen]
    unluckily,[vbcol=seagreen]
    >|||Tudor
    I am sorry but the table looks like a mess.
    There is no primary key, lots of colums does allow NULL's

    > The problem I have is that I can't automatize the whole process,
    > so I have to complete the table manually
    You mean that you would like to insert into the table all DML that users do?
    If so, create a trigger on this table and start to manipuilate with DELETED
    and INSERTED virtual tables
    In my opinion I'd create an AUDIT table that will be gathering all info
    about new/old columns
    Something like that
    create trigger tru_MyTable on MyTable after update
    as
    if @.@.ROWCOUNT = 0
    return
    insert MyAuditTable
    select
    i.ID
    , d.MyColumn
    , i.MyColumn
    from
    inserted i
    join
    deleted d on d.ID = o.Id
    go
    "Tudor Sofron" <tsofron@.cluj.astral.rom> wrote in message
    news:%23QH8akXxEHA.3896@.TK2MSFTNGP10.phx.gbl...
    > Well...
    > this is the table i've created:
    > CREATE TABLE [User_RightsGranted] (
    > [User_Name] [varchar] (200) COLLATE SQL_Latin1_General_CP1_CI_AS NOT NULL

    ,
    > [User_ID] [smallint] NULL ,
    > [User_SID] [varbinary] (85) NULL ,
    > [DB_Name] [varchar] (255) COLLATE SQL_Latin1_General_CP1_CI_AS NO
    T NULL ,
    > [Object_Name] [varchar] (200) COLLATE SQL_Latin1_General_CP1_CI_A
    S NULL ,
    > [Db_Owner] [tinyint] NULL ,
    > [Data_Reader] [tinyint] NULL ,
    > [Data_Writer] [tinyint] NULL ,
    > [Exec] [tinyint] NULL ,
    > [Select] [tinyint] NULL ,
    > [Insert] [tinyint] NULL ,
    > [Update] [tinyint] NULL ,
    > [Delete] [tinyint] NULL ,
    > [DateStart] [datetime] NOT NULL CONSTRAINT [DF_User_Rights_Da
    teStart]
    > DEFAULT (getdate()),
    > [DateEnd] [datetime] NULL ,
    > [OpDate] [datetime] NOT NULL CONSTRAINT [DF_User_Rights_OpDat
    e] DEFAULT
    > (getdate()),
    > [OpUser] [varchar] (200) COLLATE SQL_Latin1_General_CP1_CI_AS NOT
    NULL
    > CONSTRAINT [DF_User_Rights_OpUser] DEFAULT (suser_sname() + '.' +
    > host_name())
    > ) ON [PRIMARY]
    > GO
    > The column names are pretty explicit so it's no need to explain their
    > function. The problem I have is that I can't automatize the whole process,
    > so I have to complete the table manually. So...did anybody faced such
    > problems, and if yes, how did you solved them? See my comments to your
    post
    > below...
    > Thanks,
    > Tudor Sofron
    > MCSE, MCSA
    > Ipsos- NMR
    >
    > "Uri Dimant" <urid@.iscar.co.il> wrote in message
    > news:eUVFySXxEHA.2040@.tk2msftngp13.phx.gbl...
    > short
    > yes. I grant users INSERT/UPDATE/DELETE rights and complete the above
    table.
    > about 30 minutes, after that I revoke the granted permissions...but I have
    > to do that manually...and update a similar table...
    >
    grant[vbcol=seagreen]
    > users
    > well...it's not that easy to implement the use of sp's...
    > very
    > job.
    &[vbcol=seagreen]
    > an
    please?[vbcol=seagreen]
    > A
    > unluckily,
    >|||well...the table design is in 'development phase' :-)...but i hope that soon
    this will be done.
    Tudor Sofron
    MCSE, MCSA
    Ipsos- NMR
    "Uri Dimant" <urid@.iscar.co.il> wrote in message
    news:uuqlkwXxEHA.1264@.TK2MSFTNGP12.phx.gbl...
    > Tudor
    > I am sorry but the table looks like a mess.
    > There is no primary key, lots of colums does allow NULL's
    >
    >
    > You mean that you would like to insert into the table all DML that users
    do?
    > If so, create a trigger on this table and start to manipuilate with
    DELETED
    > and INSERTED virtual tables
    > In my opinion I'd create an AUDIT table that will be gathering all info
    > about new/old columns
    > Something like that
    > create trigger tru_MyTable on MyTable after update
    > as
    > if @.@.ROWCOUNT = 0
    > return
    > insert MyAuditTable
    > select
    > i.ID
    > , d.MyColumn
    > , i.MyColumn
    > from
    > inserted i
    > join
    > deleted d on d.ID = o.Id
    > go
    >
    >
    > "Tudor Sofron" <tsofron@.cluj.astral.rom> wrote in message
    > news:%23QH8akXxEHA.3896@.TK2MSFTNGP10.phx.gbl...
    NULL[vbcol=seagreen]
    > ,
    ,[vbcol=seagreen]
    ,[vbcol=seagreen]
    process,[vbcol=seagreen]
    > post
    > table.
    have[vbcol=seagreen]
    > grant
    a[vbcol=seagreen]
    giving[vbcol=seagreen]
    > &
    implemented[vbcol=seagreen]
    > please?
    >

    Permission to execute fn_get_sql

    Dear All,

    I want to assign privelege to execute the following in SQL Server 2000 SP4 + 2187

    select * from ::fn_get_sql(0x01000700AC38820138A1786C0400000000000000)

    I have tried the following:-

    use master

    go

    grant select on fn_get_sql to <user>

    I am getting error:

    Server: Msg 208, Level 16, State 11, Line 1
    Invalid object name 'fn_get_sql'.

    I believe that ::fn_get_sql is an administrative use only function, and that permission is limited to either sysadmin or db_databaseowner. (I think the former...)

    |||

    You require VIEW SERVER STATE permission to use it. Please refer to BOL (http://msdn2.microsoft.com/en-us/library/ms189451.aspx) for detailed information.

    -Raul Garcia

    SDE/T

    SQL Server Engine

    Saturday, February 25, 2012

    Permission problem

    I get the following error at times:

    The permissions granted to user 'PMS\rforkner' are insufficient for performing this operation. (rsAccessDenied) (Report Services SOAP Proxy Source)

    The user is me and I am the administrator and owner of the SQL Server 2005 database. SQL Server is running on Windows 2003 Server Enterprise SP1. How is it I don’t have permission to change a change a permission. For the past several days I have added users and set the permissions (in Report Server). What I had done was uncheck Browser for my account and that worked. When I tried to check Browser and OK is when I got the error.

    Any ideas, suggestions, or comments are certainly welcome

    Roy

    Hi RoyAF,
    i guess it is possible that when you check Browser (I really don't know the exact place where you do that) you are using another user. It is just as logging with your NT user accnt and surfing by the built-in accnt for IIS; that built-in accnt is NOT admin on the Report Server and this is why you get the error.
    I have posted a question on about the same problem - it seems that you must have admin rights on the RS to do anything (including viewing reports).
    I am waiting for someone to confirm that this problem goes away if you uninstall SP1 for W2K3.
    If you get to talk to anybody and can shed more light, please post back,
    thanks,
    kowalsky|||kowalsky,
    I have full privilages to the server, sql server and of course RS. I have sa rights. The strange thing is, that it worked until I unchecked browser on I had rights then but, a few minutes later when I tried to check browser on built in I no longer had the rights.
    It is really frustrating and I have no idea where to get answers other than here. I have posted numerous questions about problems and I have had only 2 answers. Maybe my questions are so easy no one wants to bother answering.
    I really like the product and I know it is beta but it seems to work for some; I just wish I could make it work for me.
    Roy
    |||This is crazy; today all the permission problems have disappeared and all is working as it should. The face that yesterday was a problem and today isn't makes me wonder what is happening.|||

    RS has to call out to the Domain Controller to ensure you are who you say you are. If the network connectivity between the DC and RS is unstable, this kind of issue can occur.

    Removing the Browser role should not affect your ability to set permissions because the default definition of Browser does not grant you this right.

    Hope that helps,

    -Lukasz


    This posting is provided "AS IS" with no warranties, and confers no rights.

    Permission problem

    I get the following error at times:

    The permissions granted to user 'PMS\rforkner' are insufficient for performing this operation. (rsAccessDenied) (Report Services SOAP Proxy Source)

    The user is me and I am the administrator and owner of the SQL Server 2005 database. SQL Server is running on Windows 2003 Server Enterprise SP1. How is it I don’t have permission to change a change a permission. For the past several days I have added users and set the permissions (in Report Server). What I had done was uncheck Browser for my account and that worked. When I tried to check Browser and OK is when I got the error.

    Any ideas, suggestions, or comments are certainly welcome

    Roy

    Hi RoyAF,
    i guess it is possible that when you check Browser (I really don't know the exact place where you do that) you are using another user. It is just as logging with your NT user accnt and surfing by the built-in accnt for IIS; that built-in accnt is NOT admin on the Report Server and this is why you get the error.
    I have posted a question on about the same problem - it seems that you must have admin rights on the RS to do anything (including viewing reports).
    I am waiting for someone to confirm that this problem goes away if you uninstall SP1 for W2K3.
    If you get to talk to anybody and can shed more light, please post back,
    thanks,
    kowalsky|||kowalsky,
    I have full privilages to the server, sql server and of course RS. I have sa rights. The strange thing is, that it worked until I unchecked browser on I had rights then but, a few minutes later when I tried to check browser on built in I no longer had the rights.
    It is really frustrating and I have no idea where to get answers other than here. I have posted numerous questions about problems and I have had only 2 answers. Maybe my questions are so easy no one wants to bother answering.
    I really like the product and I know it is beta but it seems to work for some; I just wish I could make it work for me.
    Roy
    |||This is crazy; today all the permission problems have disappeared and all is working as it should. The face that yesterday was a problem and today isn't makes me wonder what is happening.|||

    RS has to call out to the Domain Controller to ensure you are who you say you are. If the network connectivity between the DC and RS is unstable, this kind of issue can occur.

    Removing the Browser role should not affect your ability to set permissions because the default definition of Browser does not grant you this right.

    Hope that helps,

    -Lukasz


    This posting is provided "AS IS" with no warranties, and confers no rights.

    permission issue with tempdb works fine in SQL2000 but not SQL2005

    the following SQL works fine in SQL2000 but gets a permissions error when run on SQL2005:

    IF not exists (SELECT * FROM tempdb.dbo.sysindexes WHERE NAME = 'PK_tblGuidContractMove')

    BEGIN

    IF @.DEBUG = 1 PRINT 'airsp_CopyContracts.PK_tblGuidContractMove'

    EXECUTE('ALTER TABLE #tblGuidContractMove ALTER COLUMN guidSource GUID NOT NULL')

    EXECUTE('ALTER TABLE #tblGuidContractMove ALTER COLUMN guidDestination GUID NOT NULL')

    EXECUTE('ALTER TABLE #tblGuidContractMove ALTER COLUMN guidContractMove GUID NOT NULL')

    EXECUTE('ALTER TABLE #tblGuidContractMove WITH NOCHECK ADD

    CONSTRAINT [PK_tblGuidContractMove] PRIMARY KEY CLUSTERED

    (

    [guidSource],

    [guidDestination],

    [guidContractMove]

    ) ON [PRIMARY]')

    END

    The user permissions are set the same in both 2000 and 2005 can you please explain what changed and what are the minimum permissions need for the user to be able to make these changes to the temporary table which the user created.

    Moving to Transact-SQL from SSIS.

    permission issue with temp db

    the following SQL works fine in SQL2000 but gets a permissions error when run on SQL2005:

    IF not exists (SELECT * FROM tempdb.dbo.sysindexes WHERE NAME = 'PK_tblGuidContractMove')

    BEGIN

    IF @.DEBUG = 1 PRINT 'airsp_CopyContracts.PK_tblGuidContractMove'

    EXECUTE('ALTER TABLE #tblGuidContractMove ALTER COLUMN guidSource GUID NOT NULL')

    EXECUTE('ALTER TABLE #tblGuidContractMove ALTER COLUMN guidDestination GUID NOT NULL')

    EXECUTE('ALTER TABLE #tblGuidContractMove ALTER COLUMN guidContractMove GUID NOT NULL')

    EXECUTE('ALTER TABLE #tblGuidContractMove WITH NOCHECK ADD

    CONSTRAINT [PK_tblGuidContractMove] PRIMARY KEY CLUSTERED

    (

    [guidSource],

    [guidDestination],

    [guidContractMove]

    ) ON [PRIMARY]')

    END

    The user permissions are set the same in both 2000 and 2005 can you please explain what changed and what are the minimum permissions need for the user to be able to make these changes to the temporary table which the user created.


    Can you post a repro and the exact error message. 'alter table' right must be granted on the table for the user to change the meta data.

    Monday, February 20, 2012

    Permission Error again

    I am using an ERP system with SQL Server as the back end. When our user tried to run a function in ERP system, they got the following error:

    229,"42000",[Microsoft][ODBC SQL Server Driver][SQL Server]SELECT permission denied on object 'Grant', database 'HEI', owner 'dbo'

    I ran "sp_helprotect Grant" to check the permission, it looks okay.

    When I used the administrator's User ID to login to the machine and ran the same function in ERP, it works fine.

    Anyone knows how to fix it?

    The error means that the principal used by your system to connect to SQL Server and SELECT from object [Grant] doesn’t have permission to select on that object.

    When you connect as an administrator and try to select from the same object, the system will use your current context (administrator) and allow the call, but most likely (and actually I would recommend against it) your ERP system is not using administrator credentials and it requires explicit permissions in order to execute the SELECT statement.

    Can you tell us what was the result of the sp_helprpotect call? It should be similar to this output:

    OwnerObjectGranteeGrantor ProtectType ActionColumn

    -- -- - -- --

    dboGrant<<ERP user>> dboGrantSelect .

    As an additional note: choosing an object name that may conflict with SQL Server syntax (such as [Grant]) is not a practice I would personally recommend as it may cause conflicts when parsing the statements (forcing you to always use the quoted [] name form) and making the statements a lot more difficult to read.

    I hope this information helps

    -Raul Garcia

    SDE/T

    SQL Server Engine

    Permission Denied error

    Windows Pro
    VS.Net
    .Net Framework
    ASP.NET
    My 1st time using Web Forms in .Net
    1st time using SQL
    I am receiving the following error:
    System.Data.SqlClient.SqlException: CREATE DATABASE permission denied in
    database 'master'. Could not attach database 'pubs' to file 'D:\Program
    Files\Microsoft SQL Server\MSSQL$NETSDK\Data\pubs.mdf'.
    I tried the following:
    Reboot 4-5 times
    Share the folder
    Web share the folder
    Here is some advanced help from another SQL forum.
    sp_helpsrvrolemember 'sysadmin' --> command is not on my box.
    isql /usa/p/server\sdk -i\instpubs.sql --> did not work. isql is not a
    command found on my box.
    Any ideas?
    Thanks for your help,
    THello,
    What are you trying to do here? Can you post the commands
    To create databases you need system administrator rights and dbcreator
    Permissions (from BOL)
    CREATE DATABASE permission defaults to members of the sysadmin and dbcreator
    fixed server roles. Members of the sysadmin and securityadmin fixed server
    roles can grant CREATE DATABASE permissions to other logins. Members of the
    sysadmin and dbcreator fixed server role can add other logins to the
    dbcreator role. The CREATE DATABASE permission must be explicitly granted;
    it is not granted by the GRANT ALL statement.
    CREATE DATABASE permission is usually limited to a few logins to maintain
    control over disk usage on an instance of SQL Server.
    I wouldn't suggest granting the owner of a .NET IIS app either of these
    rights
    I hope this helps
    regards
    Greg O MCSD
    http://www.ag-software.com/ags_scribe_index.aspx. SQL Scribe Documentation
    Builder, the quickest way to document your database
    http://www.ag-software.com/ags_SSEPE_index.aspx. AGS SQL Server Extended
    Property Extended properties manager for SQL 2000
    http://www.ag-software.com/IconExtractionProgram.aspx. Free icon extraction
    program
    http://www.ag-software.com. Free programming tools
    "Taishi" <taishi_bak@.hotmail.com> wrote in message
    news:eJuJfV16DHA.360@.TK2MSFTNGP12.phx.gbl...
    > Windows Pro
    > VS.Net
    > .Net Framework
    > ASP.NET
    > My 1st time using Web Forms in .Net
    > 1st time using SQL
    > I am receiving the following error:
    > System.Data.SqlClient.SqlException: CREATE DATABASE permission denied in
    > database 'master'. Could not attach database 'pubs' to file 'D:\Program
    > Files\Microsoft SQL Server\MSSQL$NETSDK\Data\pubs.mdf'.
    > I tried the following:
    > Reboot 4-5 times
    > Share the folder
    > Web share the folder
    > Here is some advanced help from another SQL forum.
    > sp_helpsrvrolemember 'sysadmin' --> command is not on my box.
    > isql /usa/p/server\sdk -i\instpubs.sql --> did not work. isql is not a
    > command found on my box.
    >
    > Any ideas?
    > Thanks for your help,
    > T
    >|||How can I check the permissions/rights?
    How can I grant the correct permissions/rights?
    Thanks,
    T
    "Greg Obleshchuk" <greg-n-o-s-p-a-m-@.ag-s-o-f-t-w-a-r-e.com> wrote in
    message news:udfB$CE7DHA.2568@.TK2MSFTNGP10.phx.gbl...
    > Hello,
    > What are you trying to do here? Can you post the commands
    > To create databases you need system administrator rights and dbcreator
    > Permissions (from BOL)
    > CREATE DATABASE permission defaults to members of the sysadmin and
    dbcreator
    > fixed server roles. Members of the sysadmin and securityadmin fixed server
    > roles can grant CREATE DATABASE permissions to other logins. Members of
    the
    > sysadmin and dbcreator fixed server role can add other logins to the
    > dbcreator role. The CREATE DATABASE permission must be explicitly granted;
    > it is not granted by the GRANT ALL statement.
    > CREATE DATABASE permission is usually limited to a few logins to maintain
    > control over disk usage on an instance of SQL Server.
    > I wouldn't suggest granting the owner of a .NET IIS app either of these
    > rights
    >
    > --
    > I hope this helps
    > regards
    > Greg O MCSD
    > http://www.ag-software.com/ags_scribe_index.aspx. SQL Scribe
    Documentation
    > Builder, the quickest way to document your database
    > http://www.ag-software.com/ags_SSEPE_index.aspx. AGS SQL Server Extended
    > Property Extended properties manager for SQL 2000
    > http://www.ag-software.com/IconExtractionProgram.aspx. Free icon
    extraction
    > program
    > http://www.ag-software.com. Free programming tools
    >
    >
    > "Taishi" <taishi_bak@.hotmail.com> wrote in message
    > news:eJuJfV16DHA.360@.TK2MSFTNGP12.phx.gbl...
    > > Windows Pro
    > > VS.Net
    > > .Net Framework
    > > ASP.NET
    > > My 1st time using Web Forms in .Net
    > > 1st time using SQL
    > > I am receiving the following error:
    > >
    > > System.Data.SqlClient.SqlException: CREATE DATABASE permission denied in
    > > database 'master'. Could not attach database 'pubs' to file 'D:\Program
    > > Files\Microsoft SQL Server\MSSQL$NETSDK\Data\pubs.mdf'.
    > >
    > > I tried the following:
    > >
    > > Reboot 4-5 times
    > > Share the folder
    > > Web share the folder
    > >
    > > Here is some advanced help from another SQL forum.
    > > sp_helpsrvrolemember 'sysadmin' --> command is not on my box.
    > > isql /usa/p/server\sdk -i\instpubs.sql --> did not work. isql is not
    a
    > > command found on my box.
    > >
    > >
    > > Any ideas?
    > >
    > > Thanks for your help,
    > > T
    > >
    > >
    >|||Hi Tashi!
    You can ue Enterprise manager to set the rights. Locate the table, and right
    click. Select All Tasks, then Manage Permissions. Locate the user that you
    are using in your connection object, and then grant the rights. I agree with
    Greg that the web user should not normally have that level of permission.
    One false move and your server and data could be toast. If you are really
    trying to create a table, or attach a database, you should be doing that
    through Enterprise Manager, and not the web interface.
    Sloan
    "Taishi" <taishi_bak@.hotmail.com> wrote in message
    news:u54GDcN7DHA.1428@.TK2MSFTNGP12.phx.gbl...
    > How can I check the permissions/rights?
    > How can I grant the correct permissions/rights?
    > Thanks,
    > T
    > "Greg Obleshchuk" <greg-n-o-s-p-a-m-@.ag-s-o-f-t-w-a-r-e.com> wrote in
    > message news:udfB$CE7DHA.2568@.TK2MSFTNGP10.phx.gbl...
    > > Hello,
    > > What are you trying to do here? Can you post the commands
    > >
    > > To create databases you need system administrator rights and dbcreator
    > >
    > > Permissions (from BOL)
    > > CREATE DATABASE permission defaults to members of the sysadmin and
    > dbcreator
    > > fixed server roles. Members of the sysadmin and securityadmin fixed
    server
    > > roles can grant CREATE DATABASE permissions to other logins. Members of
    > the
    > > sysadmin and dbcreator fixed server role can add other logins to the
    > > dbcreator role. The CREATE DATABASE permission must be explicitly
    granted;
    > > it is not granted by the GRANT ALL statement.
    > >
    > > CREATE DATABASE permission is usually limited to a few logins to
    maintain
    > > control over disk usage on an instance of SQL Server.
    > >
    > > I wouldn't suggest granting the owner of a .NET IIS app either of these
    > > rights
    > >
    > >
    > > --
    > > I hope this helps
    > > regards
    > > Greg O MCSD
    > > http://www.ag-software.com/ags_scribe_index.aspx. SQL Scribe
    > Documentation
    > > Builder, the quickest way to document your database
    > > http://www.ag-software.com/ags_SSEPE_index.aspx. AGS SQL Server
    Extended
    > > Property Extended properties manager for SQL 2000
    > > http://www.ag-software.com/IconExtractionProgram.aspx. Free icon
    > extraction
    > > program
    > > http://www.ag-software.com. Free programming tools
    > >
    > >
    > >
    > >
    > > "Taishi" <taishi_bak@.hotmail.com> wrote in message
    > > news:eJuJfV16DHA.360@.TK2MSFTNGP12.phx.gbl...
    > > > Windows Pro
    > > > VS.Net
    > > > .Net Framework
    > > > ASP.NET
    > > > My 1st time using Web Forms in .Net
    > > > 1st time using SQL
    > > > I am receiving the following error:
    > > >
    > > > System.Data.SqlClient.SqlException: CREATE DATABASE permission denied
    in
    > > > database 'master'. Could not attach database 'pubs' to file
    'D:\Program
    > > > Files\Microsoft SQL Server\MSSQL$NETSDK\Data\pubs.mdf'.
    > > >
    > > > I tried the following:
    > > >
    > > > Reboot 4-5 times
    > > > Share the folder
    > > > Web share the folder
    > > >
    > > > Here is some advanced help from another SQL forum.
    > > > sp_helpsrvrolemember 'sysadmin' --> command is not on my box.
    > > > isql /usa/p/server\sdk -i\instpubs.sql --> did not work. isql is
    not
    > a
    > > > command found on my box.
    > > >
    > > >
    > > > Any ideas?
    > > >
    > > > Thanks for your help,
    > > > T
    > > >
    > > >
    > >
    > >
    >|||Sloan,
    I found the following url.
    http://www.aspenterprisemanager.com/
    Is Enterprise Manager free?
    If so, where can I download it?
    Thanks so much for the help,
    T.
    "Sloan Thrasher" <cst2000@.comcast.net> wrote in message
    news:cuQUb.232283$I06.2592550@.attbi_s01...
    > Hi Tashi!
    > You can ue Enterprise manager to set the rights. Locate the table, and
    right
    > click. Select All Tasks, then Manage Permissions. Locate the user that you
    > are using in your connection object, and then grant the rights. I agree
    with
    > Greg that the web user should not normally have that level of permission.
    > One false move and your server and data could be toast. If you are really
    > trying to create a table, or attach a database, you should be doing that
    > through Enterprise Manager, and not the web interface.
    > Sloan
    > "Taishi" <taishi_bak@.hotmail.com> wrote in message
    > news:u54GDcN7DHA.1428@.TK2MSFTNGP12.phx.gbl...
    > > How can I check the permissions/rights?
    > >
    > > How can I grant the correct permissions/rights?
    > >
    > > Thanks,
    > > T
    > >
    > > "Greg Obleshchuk" <greg-n-o-s-p-a-m-@.ag-s-o-f-t-w-a-r-e.com> wrote in
    > > message news:udfB$CE7DHA.2568@.TK2MSFTNGP10.phx.gbl...
    > > > Hello,
    > > > What are you trying to do here? Can you post the commands
    > > >
    > > > To create databases you need system administrator rights and dbcreator
    > > >
    > > > Permissions (from BOL)
    > > > CREATE DATABASE permission defaults to members of the sysadmin and
    > > dbcreator
    > > > fixed server roles. Members of the sysadmin and securityadmin fixed
    > server
    > > > roles can grant CREATE DATABASE permissions to other logins. Members
    of
    > > the
    > > > sysadmin and dbcreator fixed server role can add other logins to the
    > > > dbcreator role. The CREATE DATABASE permission must be explicitly
    > granted;
    > > > it is not granted by the GRANT ALL statement.
    > > >
    > > > CREATE DATABASE permission is usually limited to a few logins to
    > maintain
    > > > control over disk usage on an instance of SQL Server.
    > > >
    > > > I wouldn't suggest granting the owner of a .NET IIS app either of
    these
    > > > rights
    > > >
    > > >
    > > > --
    > > > I hope this helps
    > > > regards
    > > > Greg O MCSD
    > > > http://www.ag-software.com/ags_scribe_index.aspx. SQL Scribe
    > > Documentation
    > > > Builder, the quickest way to document your database
    > > > http://www.ag-software.com/ags_SSEPE_index.aspx. AGS SQL Server
    > Extended
    > > > Property Extended properties manager for SQL 2000
    > > > http://www.ag-software.com/IconExtractionProgram.aspx. Free icon
    > > extraction
    > > > program
    > > > http://www.ag-software.com. Free programming tools
    > > >
    > > >
    > > >
    > > >
    > > > "Taishi" <taishi_bak@.hotmail.com> wrote in message
    > > > news:eJuJfV16DHA.360@.TK2MSFTNGP12.phx.gbl...
    > > > > Windows Pro
    > > > > VS.Net
    > > > > .Net Framework
    > > > > ASP.NET
    > > > > My 1st time using Web Forms in .Net
    > > > > 1st time using SQL
    > > > > I am receiving the following error:
    > > > >
    > > > > System.Data.SqlClient.SqlException: CREATE DATABASE permission
    denied
    > in
    > > > > database 'master'. Could not attach database 'pubs' to file
    > 'D:\Program
    > > > > Files\Microsoft SQL Server\MSSQL$NETSDK\Data\pubs.mdf'.
    > > > >
    > > > > I tried the following:
    > > > >
    > > > > Reboot 4-5 times
    > > > > Share the folder
    > > > > Web share the folder
    > > > >
    > > > > Here is some advanced help from another SQL forum.
    > > > > sp_helpsrvrolemember 'sysadmin' --> command is not on my box.
    > > > > isql /usa/p/server\sdk -i\instpubs.sql --> did not work. isql is
    > not
    > > a
    > > > > command found on my box.
    > > > >
    > > > >
    > > > > Any ideas?
    > > > >
    > > > > Thanks for your help,
    > > > > T
    > > > >
    > > > >
    > > >
    > > >
    > >
    > >
    >|||You can use MSDE and Access as a backend for a website.
    I am uninitiated but I know this for a fact.
    "Sloan Thrasher" <cst2000@.comcast.net> wrote in message
    news:b3FVb.259176$na.418905@.attbi_s04...
    > Hi Tashi!
    > I haven't installed MSDE, but it should have asked for a sa password
    during
    > installation. If so, and you remember it, you could use asp to connect and
    > add the DBs you need, but definately not something for the uninitiated.
    > Also, I'm not sure, but I don't think you're allowed to use MSDE as a
    > backend for a web site.
    > Since you're new to ASP.net, SQL, etc. you might want to start out with
    > something a bit simplier, like an Access DB (if you have MS Office, you
    have
    > Access) That way you have a GUI to create your database and tables in and
    > you can focus on one thing at a time.
    > If you really want to move forward with MSDE, then look at this link:
    >
    http://msdn.microsoft.com/library/?url=/library/en-us/distsql/distsql_84xl.a
    > sp?frame=true
    > The topic is Customizing MDSE Setup.exe. In there you will see how to
    setup
    > the SA password, the default directory for your data files, and a lot
    more.
    > I found it by D/L the app and the HTML readme file.
    > Sloan
    >
    > "Taishi" <taishi_bak@.hotmail.com> wrote in message
    > news:#zV2Aes7DHA.3804@.tk2msftngp13.phx.gbl...
    > > Sloan,
    > >
    > > I installed the MSDE 2000 from the following web site:
    > >
    > > ww.microsoft.com/downloads
    > >
    > > Featured download
    > > Microsoft SQL Server 2000
    > > Desktop Engine(MSDE 2000) Release A
    > >
    > > I don't have the SQL server disks.
    > >
    > > Any ideas?
    > >
    > > Thanks,
    > > T.
    > >
    > > "Sloan Thrasher" <cst2000@.comcast.net> wrote in message
    > > news:J1EVb.125043$U%5.607067@.attbi_s03...
    > > > Hi Tashi!
    > > >
    > > > Enterprise Manager comes with SQL Server. You should be able to
    install
    > it
    > > > from the MS SQL Server CDs
    > > >
    > > > Sloan
    > > >
    >