Granting User Privileges??

I have setup an SQL MSDE instance on my PC and I currently finished working
on the BE in an access 2003 project. I believe it is now time to define
roles, users and grant each one its privileges, but how do I do that?
I know about GRANT, REVOKE etc, but
1. Where do I type these?
2. Is all this information encrypted?
3. When installing the MSDE I set a password what is this all about? Will
it have any impact on user level security?
4. Is there a visual tool to handle user level security, such as in an
Access database?
5. As I indend to create a distributed database application is these
security scheme in accordance to that?
6 and final. How can I let the superuser (aka the superior user of the
client) grant privileges to other users, after granting him the option to
grant? eg form?
Some answers inline
"Dimitrios Tanis" <jtanis@.mycosmos.gr> wrote in message news:O%23XXjhBnFHA.3608@.TK2MSFTNGP15.phx.gbl...
>I have setup an SQL MSDE instance on my PC and I currently finished working on the BE in an access 2003 project. I
>believe it is now time to define roles, users and grant each one its privileges, but how do I do that?
> I know about GRANT, REVOKE etc, but
> 1. Where do I type these?
In a script, run with osql.exe against the database is one way.
Query Analyser from a developer pc or pc with sql server installed is another

> 2. Is all this information encrypted?
Not unless it is embedded in your application, and only run locally or through an encrypted connection.
Even if it was scripting the database will get this configuration type of information back. The encyption in
SQL Server 2000 / MSDE is for view, triggers and stored procedures - i.e. code, and is crackable anyway.

> 3. When installing the MSDE I set a password what is this all about? Will it have any impact on user level security?
Depends on what authentication mode you use - with windows authentication, the only password you
have to worry about is the sa one on the install, and this is only a problem if someone at some stage
changes the security to SQL/Mixed.

> 4. Is there a visual tool to handle user level security, such as in an Access database?
If you map windows groups to the SQL database roles, then your user management is done under windows itself.
The beta for SQL 2005 Express includes a GUI tool, and there is a web based one for 2000.
http://www.microsoft.com/downloads/d...displaylang=en
http://www.microsoft.com/downloads/d...DisplayLang=en
Apart from them there is osql.exe for the masochistic, Enterprise Manager for the licensed, or your application
doing sql calls behind the scenes.

> 5. As I indend to create a distributed database application is these security scheme in accordance to that?
Well you are going to have to enable the network libraries, which immediatly gives you an order of magnitude
more security worries. For example a breach in your install of MSDE can grant full access to the PC (xp_cmdshell).
Integrated security is Microsoft's recommendation, but you still need to think about changing network ports and
firewalling.

> 6 and final. How can I let the superuser (aka the superior user of the client) grant privileges to other users, after
> granting him the option to grant? eg form?
see 4)
also suggest reading security related info from
http://msdn.microsoft.com/library/de...stsql_84xl.asp
Regards
AJ

Grant login to remotemachine\ASPNET

Hello Group,
I am working on an ASP.Net project. It will work on the same server that
runs SQL Server. For that reason all I did was grant the server's ASPNet
account access to the database. The problem is that when I am debugging
(from my remote machine) I can't connect because my station's ASPNet account
is not recognized by the server, as it only accept its own server\ASPNet
account.
How can I grant login to my remotemachine\ASPNet Account to that SQL Server?
Thanks ahead for all replies!
Giovanni BassiHi,
For debugging,USE domain user (Not remotemachine\ASPNet)
--
SHINICHI YONEDA MXL04371@.nifty.ne.jp
Microsoft Most Valuable Professional
MVP for SQL Server 2002-2003
"Giovanni Bassi" <gbassi@.coair.com> wrote in message
news:e66XMvNlDHA.1708@.TK2MSFTNGP12.phx.gbl...
> Hello Group,
> I am working on an ASP.Net project. It will work on the same server that
> runs SQL Server. For that reason all I did was grant the server's ASPNet
> account access to the database. The problem is that when I am debugging
> (from my remote machine) I can't connect because my station's ASPNet
account
> is not recognized by the server, as it only accept its own server\ASPNet
> account.
> How can I grant login to my remotemachine\ASPNet Account to that SQL
Server?
> Thanks ahead for all replies!
> Giovanni Bassi
>sql

Globalization & Localization in sql server reporting services.

Hi All,

I am new to sql server reporting services. I am planning to use sql server reporting services for one of my project. But i have some doubts. Please any one help me.

1) Is it possible to localize sql server reporting services?

2) Is it possible to read and display the search labels and other column headers from resource file?

3) Will it display numeric, date and sort based on culture?

4) If it is possible then where we have to make the setting for that? I mean in the sql server or in the asp.net code behind file?

5) Is there any samples available in the net.

Thanks in advance.

I'm new to reporting services as well but i'll try to answer a few of your questions.

3. it will display the data based on the language setting on the computer that is hosting the file I believe

Check out this article for some more infohttp://www.sqljunkies.com/WebLog/tpagel/archive/2005/07/24/16197.aspx

4. see the article above (just a heads up but there are no code behind files in reporting services)

5. there are some samples located on the msdn site (herehttp://msdn.microsoft.com/sql/bi/reporting/default.aspx also a good place to start for info )

|||Thanks saiham|||

Hi Vinoth, I am also new to this reporting service and now struggling with the globalization issue. Have you found out the answer to your second question "Is it possible to read and display search label and other column headrs from resource file"?

The report designer has a section for developer to create custom function or refernce to function from external assemblies. I wonder whether we can use this section to read the resource file. Any idea? I have zero knowledge on the Resource File. I'll highly appreciate any input. Thanks

Best regards,
Jess

|||

Hi jess, I posted this in many forums but not found any useful answers. I will get back to you if i found any.

|||

Hi, I wanna share with you guys, what I done on localization by making use of resource file.
I am new on this programming world, feel free to correct me.

Given the fact that we can add custom assembly to our report, my idea is to create a function (can be in any language) outside the report, which will return locale value for particular key. Then, create an assembly of the code, and add reference to the assembly from the report designer

The function I used as this:

Public shared Function ReturnString (ByVal myValue As String, ByVal myCI as Stirng) As String
Dim ci As New CultureInfo (myCI)
Dim rm As ResourceManager
rm = ResourceManager.CreateFileBasedResourceManager ("MyStrings", "e:\resources\", Nothing)
Return rm.GetString(myValue, ci)
End Function

Where MyStrings is my resource file name and "e:\resources" is the location where i stored all my resource files.

One thing to take note when adding custom assembly to report. The assembly we are referencing to, must be copied to report designer and report server. For SSRS 2005, copy the assembly to these 2 locations:

C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies
C:\Program Files\Microsoft SQL Server\MSSQL.3\Reporting Services\ReportServer\bin

Hope this can be input to anyone who is looking for using resource file for localization for SSRS. If you have a better solution, please share with me.