Advice on security model for XML Web Services for many users in Active Directory role

I am working on the security model for an application that will be used by 100s of users with a dedicated SQL 2005 database for this application and access via SQL XML Web Services.

The client has asked to make it "open" during alpha testing such that anyone can access the web services without having to set them up first. Is there a way to do this? The best I can figure is to use mixed mode security and hard code a login and password. Any method using Windows authentication would require that I add every user at a minimum to the database.

In production, all users will have an active directory role specified that determines if they should have access to the web services or not. However, it is my understanding that to use Windows authentication, I would still need to add each individual user at a minimum as a Login to the SQL Server, and under best practices also as database users with permissions granted to the endpoint.

Am I correct in the above, or is there a more efficient way to achieve these results?

Thanks

-L

Your post seems to have been moved to this forum, as I have not seen it before. Could you please let me know where you posted this originally?

If the individual users are all belonging to a Windows group, you could just grant connection permissions to that group. But I am not familiar with XML Web Services, so I cannot say whether this is the best course of action.

Have you checked the following link?

http://msdn2.microsoft.com/en-us/library/ms191274.aspx

I'd suggest to also post in the XML forum: SQL Server XML

Thanks
Laurentiu

sql

Advice Needed: Where to put ADO Code

I need some advice on a project that I am working on...

First, here is what I am trying to achieve: A Web Form with two controls: A DropDownList with two items added at design time (Fruits and Vegetables) and an empty ListBox. When the user chooses a "category" from the DropDownList, the ListBox will be populated with a list of either "Fruits" or "Vegetables" retrieved from a SQL database. (Note: Since the data in the SQL database must be converted and formatted programatically, simply databinding the ListBox will not work here.)

I believe that I can do this with the following code (stolen from an MSDN article):

'Create ADO.NET objects.Private myConnAs SqlConnectionPrivate myCmdAs SqlCommandPrivate myReaderAs SqlDataReaderPrivate resultsAs String'Create a Connection object. myConn =New SqlConnection("Initial Catalog=Northwind;" & _"Data Source=localhost;Integrated Security=SSPI;")'Create a Command object. myCmd = myConn.CreateCommand myCmd.CommandText ="SELECT FirstName, LastName FROM Employees"'Open the connection. myConn.Open() myReader = myCmd.ExecuteReader()'Concatenate the query result into a string.Do While myReader.Read() results = results & myReader.GetString(0) & vbTab & _ myReader.GetString(1) & vbLfLoop'Display results. MsgBox(results)'Close the reader and the database connection. myReader.Close() myConn.Close()

Now here is the part that I am not sure about: Is the FormLoad event the best place to put this code? If I do, is this not a lot of overhead (creating, opening and closing a connection) everytime there is a page refresh/PostBack? Would I be better off putting this code in the DropDownList SelectedIndexChanged event? Although that seems like it could make the process of selecting a category take a fairly long time.

Finally, if the is a better way of doing this, I am certainly open to suggestions.

All advice is greatly appreciated.

hello,

you may like to read "ASP.Net Tutorial - If Not Page.IsPostBack" article at,

http://aspnet101.com/aspnet101/tutorials.aspx?id=3

ALSO,

i'd like to suggest you to read this too,

1) "Examining the Data Access Application Block" at,

http://aspnet.4guysfromrolla.com/articles/070203-1.aspx

2) "Working with the Enterprise Library's Data Access Application Block" at ,

http://aspnet.4guysfromrolla.com/articles/030905-1.aspx

regards,

Niraj sikotara.

Advice Needed : Nasty Problem PHP/MS SQL Server and Varchar fields > 255 in Length

I am currently working on a PHP based website that needs to be able to draw
from Oracle, MS SQL Server, MySQL and given time and demand other RDBMS. I
took a lot of time and care creating a flexible and solid wrapper and am
deep into coding. The only problem is a noticed VARCHAR fields being drawn
from SQL Server 2000 are being truncated to 255 characters.

I searched around php.net and found the following :

Note to Win32 Users: Due to a limitation in the underlying API used by PHP
(MS DbLib C API), the length of VARCHAR fields is limited to 255. If you
need to store more data, use a TEXT field instead.
(http://www.php.net/manual/en/functi...ield-length.php)

The only problem with this advice is Text fields seem to be limited to 16
characters in length, and I am having similar results in terms of truncation
with other character based fields that can store more than 255 characters.

I am using PHP 4.3.3 running on IIS using the php_mssql.dll extensions and
the functions referenced here http://www.php.net/manual/en/ref.mssql.php.
What are my options here? Has anybody worked around this or am I missing
something obvious?

JamesNo, text fields can handle text string up to 2-Gig. The 16 bytes refers to
the space used up by the string pointer inside the record. The problem with
text/ntext is that they're slow, and you can't use them in ORDER BY or GROUP
BY.

The superlame way of retrieving more than 255 chars from a MSSQL varchar is
to retrieve the field in multiple sections, using the SUBSTR() function,
then concatenate them in PHP:

SELECT SUBSTR(msg, 1, 255) AS msg_1, SUBSTR(msg, 256, 255) AS msg_2, ...

$msg = $row['msg_1'] . $row['msg_2'] . $row['msg_3'] ...

Uzytkownik "James" <jamesstarrittRemovethefollowingtoemailme@.hotmail.c om>
napisal w wiadomosci news:40285e29$1_1@.newspeer2.tds.net...
> I am currently working on a PHP based website that needs to be able to
draw
> from Oracle, MS SQL Server, MySQL and given time and demand other RDBMS.
I
> took a lot of time and care creating a flexible and solid wrapper and am
> deep into coding. The only problem is a noticed VARCHAR fields being
drawn
> from SQL Server 2000 are being truncated to 255 characters.
> I searched around php.net and found the following :
> Note to Win32 Users: Due to a limitation in the underlying API used by PHP
> (MS DbLib C API), the length of VARCHAR fields is limited to 255. If you
> need to store more data, use a TEXT field instead.
> (http://www.php.net/manual/en/functi...ield-length.php)
> The only problem with this advice is Text fields seem to be limited to 16
> characters in length, and I am having similar results in terms of
truncation
> with other character based fields that can store more than 255 characters.
> I am using PHP 4.3.3 running on IIS using the php_mssql.dll extensions and
> the functions referenced here http://www.php.net/manual/en/ref.mssql.php.
> What are my options here? Has anybody worked around this or am I missing
> something obvious?
> James|||James (jamesstarrittRemovethefollowingtoemailme@.hotmail. com) writes:
> The only problem is a noticed VARCHAR fields being drawn
> from SQL Server 2000 are being truncated to 255 characters.
> I searched around php.net and found the following :
> Note to Win32 Users: Due to a limitation in the underlying API used by PHP
> (MS DbLib C API), the length of VARCHAR fields is limited to 255. If you
> need to store more data, use a TEXT field instead.
> (http://www.php.net/manual/en/functi...ield-length.php)
> The only problem with this advice is Text fields seem to be limited to
> 16 characters in length, and I am having similar results in terms of
> truncation with other character based fields that can store more than
> 255 characters.

As pointed out by Chung Leong, there is room for 2GB of data in text.
The 16 bytes you see is just a pointer.

However, text is fairly cumbersome and not really easy to use. I don't
know anything about PHP, but it's apparent that PHP uses DB-Library to
access SQL Server. And while I think this is a very nice API, Microsoft
does not think so, and has not developed DB-Library since the release of
SQL 6.5, which was seven years ago. The next version of SQL Server, slated
for release this year, will accept connections from DB-Library, but will
not come with files needed for development. You may not even get the DB-
Library run-time DLL:s, but have to find them elsewhere.

Thus, there are all reasons to look into alternative means of connections
for PHP to MS SQL Server.

--
Erland Sommarskog, SQL Server MVP, sommar@.algonet.se

Books Online for SQL Server SP3 at
http://www.microsoft.com/sql/techin.../2000/books.asp|||"Erland Sommarskog" <sommar@.algonet.se> wrote in message
> > Note to Win32 Users: Due to a limitation in the underlying API used by
PHP
> > (MS DbLib C API), the length of VARCHAR fields is limited to 255. If you
> > need to store more data, use a TEXT field instead.
> > (http://www.php.net/manual/en/functi...ield-length.php)
> > The only problem with this advice is Text fields seem to be limited to
> > 16 characters in length, and I am having similar results in terms of
> > truncation with other character based fields that can store more than
> > 255 characters.
> As pointed out by Chung Leong, there is room for 2GB of data in text.
> The 16 bytes you see is just a pointer.
> Thus, there are all reasons to look into alternative means of connections
> for PHP to MS SQL Server.

I believe the Linux PHP builds use that alternate means and the Warning
(given only on one page and not the main PHP MS SQL Server driver page as it
should have been) -- I'll be testing that later on today.

Retrieving a field in chunks may not be such a big issue, it is rare that
this will happen frequently in the app however the possibility is there on
some 60% of the fields and I do need to be able to Group and Order By on the
majority of these fields. I may just have to not support the MS SQL Server
at this time -- the goal was an app that could run on Linux and Windows
webservers and connect to just about any DB alive - its a shame that one of
the staple db's is so poorly supported by the PHP project given that I am
tied to it. My work is with non-profits and we have to be able to utilize
the licensing they already have so demanding the use of particular software
will only drive the pricing up.

Strangley I had similar issues when working with ASP and SQL Server in the
past - fields would simply not show up sometimes if they where over 255
characters in length and it is a known and documented issue that affects
'certain databases' according to MS but I have only ever seen with the SQL
Server and MSDE - never Oracle, MySQL, Postgre or even Access -- its a shame
I like the SQL Server but it seems that everytime I get contracted to use it
with a web back end I run into problems that make it a royal pain in the ass
to work with.

Thanks for the feedback,

J|||James (jamesstarrittRemovethefollowingtoemailme@.hotmail. com) writes:
> Strangley I had similar issues when working with ASP and SQL Server in
> the past - fields would simply not show up sometimes if they where over
> 255 characters in length and it is a known and documented issue that
> affects 'certain databases' according to MS but I have only ever seen
> with the SQL Server and MSDE - never Oracle, MySQL, Postgre or even
> Access -- its a shame I like the SQL Server but it seems that everytime
> I get contracted to use it with a web back end I run into problems that
> make it a royal pain in the ass to work with.

I don't know more about ASP than I know about ASP, but I would expect
ASP today have any problems with longer varchar values.

Of course there was a time when SQL Server did not have anything better
than varchar(255) (and text). If you were accessing ASP from a machine
with a version of ODBC that did not support the new and improved types
in SQL7, then you would be in that boat. But that's long ago.

--
Erland Sommarskog, SQL Server MVP, sommar@.algonet.se

Books Online for SQL Server SP3 at
http://www.microsoft.com/sql/techin.../2000/books.asp

Advice MSDE/ACCESS

I wrote an app that uses MSDE. IT is VB.NET, and there are only 10 users
tops.
To make an MSDE installation and get the database working requires me, which
makes it not really a commercially distributable product.
Would I be better just using an MDB file? Seems like MSDE is really nice
and basically SQL but I need something that installs easy--i.e. my users can
install. I know I can easily install an MDB file.
Would the MDB file be sufficient for 10-20 users tops?
thanks,
Shane
On Sat, 12 Jun 2004 02:36:37 -0500, SStory
<TheStorys@.TAKEOUTTHISSPAMBUSTERsofthome.net> wrote:

> Would the MDB file be sufficient for 10-20 users tops?
That depends on the complexity of your queries and the level of your
requirements. If you're only doing some SELECT statements and occasional
updates/inserts, an .mdb file is certainly enough. You could run into
troubles with locking mechanisms in MS Access though, so take care.
Installing MSDE is not a big deal, you just have to care for populating
the database yourself (ie: from your application) to make it easier for
your users.
Using SECURITYMODE and DBPWD(?) as setup parameters can even set up a
version of MSDE that runs similar to MSDE 1.0 (speaking of access to it)
Stefan
Give a man fire and he is warm for a day.
Set him on fire and he is warm for the rest of his life.

Adversarial Vendors

I'm working with a vendors (Stockamp & Assoc.) We hired them for the Clinic Ontrac application (SQL Server based) and they highly customized it to work in our hospital. They left after implementing the software in 3 of our 46 clinics. As I add more clincs to the system I continuously run into issues. Stockamps response to the problems is : "The system was working fine when we left what have you done with it?"
I'm continually given contradictory solutions to problems, then being blamed for modifying their system.
What are others doing when working with vendors that assume this type of adversarial position?This is difficult to answer - can you be more specific. However, in my experiences - go up the chain until it is addressed and resolved. Also, if possible, make sure you are involved with the contract process (most companies make assumptions and end up getting burned).|||Originally posted by rnealejr
This is difficult to answer - can you be more specific. However, in my experiences - go up the chain until it is addressed and resolved. Also, if possible, make sure you are involved with the contract process (most companies make assumptions and end up getting burned).

Here is my latest example. They have a form that allows me to add new clinics and specifics for that clinic. I added 2 new clinics into a test system and it failed. After spending 8 hours running through the whole process of adding a clinic (many forms are used and they have drop down boxes that are very error prone) , checking my data entry and trying to understand the strange error I was receiving, I finally sent an email to their tech support with the error, what I had done and asked for recommendations.
It turns out the forms' data are sent through to a SQL variable that only holds 8000 characters. Stockamp & Associates had known of the problem for many months and had not notified us, posted an issue to a log ... I escalated the problem up their ladder and the response from the high ups is that I should have been monitoring the number of characters I put into their form. I asked for documentation or a utility for monitoring the characters and they have none. They fixed the problem and now the variable holds 16,000 characters. I now have 16 of 46 clinics clinics in the system so I'm less than half way done, so even though they have doubled the limitation I am certain to hit the limit again. To monitor I will now have to count characters in their cludgy forms and hope I don't accidently modify something in the dropdowns and pray that I don't lose count!

In another instance, I was testing adding a new clinic and had modified one of Stockamps' stored procedures in a test database to view dates beyond those available in their forms (as I was shown by their trainer). One of Stockamps' analysts is also working on fixing other bugs. I had no idea they were using my test database because I set up a different database for them to use. The next day when I was told they implemented some fixes into our live server. By 10AM the live server was no longer functioning. I started looking into the problem and found that the analyst had modified some lines of the same stored procedure, gotten them to work, then replaced the sproc on the live server with the entire sproc from the test server - which included my modification. I found the problem and asked that they fix it (I'm afraid to touch sprocs in the live server for fear of blame) and was told that I had created the problem and needed to fix it myself, and that I was not communicating modifications I was making.

In another instance Stockamps DBA told me I could run sp_spaceused and truncate any large history tables to recoop some space (the system grows over 100 mb/day and although they have a purge, I was told it didn't function properly so I was not to use it). I truncated some tables in my test database to see the results. Again Stockamp used my test database to test some of their fixes and they kept failing. I found the problem and realized that the truncation was causing the problem. Again I was told that the problem was caused by me and the modifications I was making to their system.

I acknowledge that my truncation caused the problem, but I was acting under Stockamps directions and when the problem arose I researched the problem and figured it out. I admit my fault and want to move on and keep working with them to get the system functional, but anytime something goes wrong I am blamed.|||Well part of the problem seems to be that they are unwilling to take blame/responsibility for anything...

The first step in resolving this is to get them to document everything they recommend to you. Get everything in writing and communicate back to them in writing. Then when an issue arises you can point to the communication that has taken place and show that they were at fault. Then they realy have no choice but to accept some responsibility (or look like total dickheads).|||I would start an email chain - letting the tech support know that you will email any recommendations from them for confirmation. Next, disable their ability to touch YOUR test database - that will eliminate both of you from overlapping code. Lastly, email their vp of sales/tech support with the list of issues - carbon copy the highest ranking official in your company that was responsible for the contract with the vendor(s) (but communicate with this person the problems and get their support). As far as the forms issue - that I would let your company know as a major flaw in the product. They should have validation on the forms based on their limitations - which should also be documented in their product. I would investigate that further.

AdventureWorks Samples Not working

I've installed and deployed the AdventureWorks Sample reports to Report
Manager in RS 2005. When I click on any of the reports, the report just
spins away and never returns the report information. I eventually (10
minutes later) just stop the browser. I made sure I have permissions to all
the data sources as well. Has anyone else had this problem or know where I
can look to see where the report(s) are hanging?
System Information:
Windows XP Pro
IIS 5.x
SQL Server 2005 Std.
VS 2005 Pro
Reporting Services 2005Verify that the dataset(s) in a report are actually working.
"Michael" wrote:
> I've installed and deployed the AdventureWorks Sample reports to Report
> Manager in RS 2005. When I click on any of the reports, the report just
> spins away and never returns the report information. I eventually (10
> minutes later) just stop the browser. I made sure I have permissions to all
> the data sources as well. Has anyone else had this problem or know where I
> can look to see where the report(s) are hanging?
> System Information:
> Windows XP Pro
> IIS 5.x
> SQL Server 2005 Std.
> VS 2005 Pro
> Reporting Services 2005
>|||I'm pretty sure the dataset is working since when I preview in VS2005 I can
get the sample to work with no problem. Strangely also, when I use VS2005 to
deploy and open the Samples folder, I can click on a sample report and it
works as expected. Only when I go to http://localhost/reports/home.aspx ->
AdventureWorks Samples -> Sample report does it just spin away.
"Bing Bing Yu" wrote:
> Verify that the dataset(s) in a report are actually working.
>
> "Michael" wrote:
> > I've installed and deployed the AdventureWorks Sample reports to Report
> > Manager in RS 2005. When I click on any of the reports, the report just
> > spins away and never returns the report information. I eventually (10
> > minutes later) just stop the browser. I made sure I have permissions to all
> > the data sources as well. Has anyone else had this problem or know where I
> > can look to see where the report(s) are hanging?
> >
> > System Information:
> > Windows XP Pro
> > IIS 5.x
> > SQL Server 2005 Std.
> > VS 2005 Pro
> > Reporting Services 2005
> >
> >

Advantages of Reporting Services 2005

Hello,

I am working on the Reporting Services 2005, I don' know anything about Business Object.

Please let me know what are the advantages of Reporting Services 2005 over the Business Object.

Any specific link will be useful for me.

Thanks in advance.

Bye.

If you already have a SQL Server 2005 box...SSRS is free. That is usually a very compelling argument. Check with MS on your specific licensing scenario though.

The next is Report Builder which is a user friendly ad-hoc tool for analysts to build their own reports without the learning curve of Visual Studio (although the learning curve is really not that high on RS).

|||

Hello Davind,

I agree with you on the advantage you have mentioned above but I have question?

Reporing services have direct connection to the database there is know any middle tire, and I throught that because of this the processing of report might be slow. In the same case Business Object have some middletire I don't know exactly.

Any help in this will be appreciated.

|||

check this blog for all the Resources link on Reporting services.

http://blogs.sqlxml.org/vinodkumar/archive/2007/09/14/sql-rs-resources-links.aspx

Madhu

|||

Yes, when you look at BO, Cognos, SAS BI etc.. it is understood that you will build some middle tier...like an OLAP cube to report.

The difference with SSRS is that it is purely a reporting tool, abstract from a datasource. So think of it this way, you CAN report directly against a live OLTP database. To your point, you may have some performance considerations to make. But you CAN also build reports against a datawarehouse (SQL) or against Cubes that have been defined.

It goes beyond that...You can also build reports directly against other datasources like Oracle, Access..I've developed real-time SSRS reports against Lawson (Oracle hosted on Unix) for example.

Lastly, you can build reports based upon Models or even SSIS. SSIS can be thought of as a middle-ware...very robust ETL tool on steroids. So think of being able to mix DW data with say..live RSS feeds or data from a web service, or some real time ETL integration?

A report model is entirely different in that you can build a report from a user friendly definition without having to have a knowledge of the table structures, field names, business rules and joins (of course that 'model' must be defined first by someone who does)..that then leaves report building in the hands of analysts..not programmers.

So the biggest thing that I see is choice..you have deep choices to make in the datasets you consume and are not limited solely to OLAP datasources or MDX code. Plus the technology is primarily standard across the Microsoft framework. Meaning, the models can be used in SSRS or even Report Builder. The OLAP cubes or datasources can of course be consumed in SSRS, but also Excel PivotTable, ProClarity...basically any cube viewer tool of choice. Those should be additional measuring sticks when looking at other vendor solutions in BI.

advanced parameter tutorial, lesson 5, multipart identifier error

Hello,

Hope I'm asking this question in the correct forum.

I'm a newbie in Reporting Services and currently working my way through the tutorials with AdventureWorks. Came across this error while doing the MSDN tutorial for Advanced Features, lesson 5 - user defined functions.

http://msdn2.microsoft.com/en-us/library/aa337435.aspx

Created a new report, copied the following to the query screen:

SELECT udf.ContactID, udf.FirstName + N' ' + udf.LastName AS Name,
c.Phone, c.EmailAddress, udf.JobTitle, udf.ContactType
FROM ufnGetContactInformation(@.ContactID) udf
JOIN Person.Contact c ON ufn.ContactID = c.ContactID

I'm following the directions to the letter, and consistently get the following error:

"The multi-part identifier "ufn.ContactID" could not be bound."

"The multip-part identifier "ufn.ContactID" could not be bound. (Microsoft SQL Server, Error: 4104)"

I'm running SQL 2005 Enterprise on Windows XP.

Any help you can give will be much appreciated! Thank you.

Looks like typo in a sample query

try udf.ContactID instead of ufn.ContactID

|||Thank you very much! Now it works.

Advance Tab not available (Greyed Out)

Hello I am working on a sql express table and while configuring the steps after I select the data source and the selectment statement window shows, I want to use the advanced tab but it is greyed out. I want to be able to add edit and delete my data. I have administrator rights for this project and the workstation so thats not the issue. What I am tryng to accomplish is extending a website to manage it's content and users. Also the table has colums and the colums has test data within them I tested a query and the connection had a successful return. Maybe it's a configuration thing I am unaware of.

DKB

Hi,

you can not edit data directly from Management Studio, refer http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=178581&SiteID=1&PageID=1

Hemantgiri S. Goswami

|||

This is the process of setting up a grid for a new database being implemented. I expected to be able to select, edit, update or, delete for the grid. Although this has been a couple of days ago I will try to recreate the issue and record my actions and report the issue and sbmit it to msdn and see what come up.

DKB

ADP Problem

Hi All,

I have a server that contains sqlserver 2000 and ms access 2000.
Everything were working fine when i ran my adp file in the server side,
and i faced some problem when i ran it on the client computer.

After checking my adp file, i found all of my stored procedures added by
comma and number at the behind. For example i have a stored procedure
p_rpt_supp_list in the server, but i found p_rpt_supp_list;1 in my ms
access.

Does anyone know how to solve this?

Thanks in advance,
Rudy

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!Hi

The number is the version number see:
http://msdn.microsoft.com/library/d...create_4hk5.asp

This can be seen as the number column in syscomments see books online:
mk:@.MSITStore:C:\Program%20Files\Microsoft%20SQL%2 0Server\80\Tools\Books\tsq
lref.chm::/ts_sys-c_2y2b.htm

According to SQL Server 2000 Performance Tuning Technical Reference (P322)
;1 is assummed no number is stated. If version 1 is hard coded, then the
only way I can think of re-creating a version 1 is to drop all versions of
the procedure and recreate it (without a version number of explicitly at
version 1).

John

"rudy susanto" <rsantolee@.yahoo.com.sg> wrote in message
news:401f2a8d$0$70306$75868355@.news.frii.net...
> Hi All,
> I have a server that contains sqlserver 2000 and ms access 2000.
> Everything were working fine when i ran my adp file in the server side,
> and i faced some problem when i ran it on the client computer.
> After checking my adp file, i found all of my stored procedures added by
> comma and number at the behind. For example i have a stored procedure
> p_rpt_supp_list in the server, but i found p_rpt_supp_list;1 in my ms
> access.
> Does anyone know how to solve this?
>
> Thanks in advance,
> Rudy
>
> *** Sent via Developersdex http://www.developersdex.com ***
> Don't just participate in USENET...get rewarded for it!|||Hi John,

I never created any stored procedures using ; separator.

I always drop the procedure if it's exists before creating it.

The problem is office 2k (without service pack) but everything is
working fine in office xp.

Thank very much for your response John. :)

Warmest Regards,
Rudy

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!|||Hi

I am not sure what is happening then as your stored procedures will
always be a version 1. You may want to try SQL Profiler and view what
commands are being sent to the server. If you can update/patch the
version of office it may help.

John

rudy <rudy@.mail.com> wrote in message news:<4026f768$0$193$75868355@.news.frii.net>...
> Hi John,
> I never created any stored procedures using ; separator.
> I always drop the procedure if it's exists before creating it.
> The problem is office 2k (without service pack) but everything is
> working fine in office xp.
> Thank very much for your response John. :)
> Warmest Regards,
> Rudy
> *** Sent via Developersdex http://www.developersdex.com ***
> Don't just participate in USENET...get rewarded for it!|||rudy susanto (rsantolee@.yahoo.com.sg) writes:
> I have a server that contains sqlserver 2000 and ms access 2000.
> Everything were working fine when i ran my adp file in the server side,
> and i faced some problem when i ran it on the client computer.
> After checking my adp file, i found all of my stored procedures added by
> comma and number at the behind. For example i have a stored procedure
> p_rpt_supp_list in the server, but i found p_rpt_supp_list;1 in my ms
> access.

That may just be the way Access lists the procedures. As John said, the ;1
is there. Saying

EXEC my_proc;1

is the same as

EXEC my_proc

--
Erland Sommarskog, SQL Server MVP, sommar@.algonet.se

Books Online for SQL Server SP3 at
http://www.microsoft.com/sql/techin.../2000/books.asp

AdomdConnection Exception ........

Hi

I had created a dataminig model using "Asociattion Rules " , as the model is now working i want to get the rules out of it , so I try the following query in SQL 2005 Managanment Studio and its working fine

SELECT NODE_RULE FROM [Credit Card Table].CONTENT

Now I have to do this through code so used following code from book "DataMining using SQL Server 2005" , but the code gives error in making connection and says

"Either VMWINXP/Adminsittrator dont have right on the database SmartRulesApps or database not exsists" , now i use same credentials to run query in SQL 2005 Managmnet Studio and its working ! can you guys give me some hint whats i done wrong . One more point I check the database secuirty folder for my database SmartRulesApps and it contains dbo but how can i add VMWINXP/Adminsittrator(which is already my system admin ) to this security users ? i tried but its not working. Please let me know any thing you find that can help , you can also send me email at razi_rais@.yahoo.com

private void OpenConnection()
{
AdomdConnection con = new AdomdConnection("location=localhost;Initial Catalog=SmartRulesEngine;Integrated Security=SSPI");
// AdomdConnection("location=VMWINXP;Effective UserName=VMWINXP\\Administrator;Initial Catalog=SmartRulesEngine;");

try
{
con.Open();

AdomdCommand cmd = new AdomdCommand();

cmd.CommandText = "SELECT NODE_RULE FROM [Credit Card Table].CONTENT";
cmd.Connection = con;
AdomdDataReader reader;

reader = cmd.ExecuteReader();
System.Collections.ArrayList lst = new System.Collections.ArrayList();
int i = 0;
while (reader.Read())
{
lst.Add(reader.GetValue(i++).ToString());
}
reader.Close();
}
catch (System.Exception exp)
{

}
finally
{
con.Close();
}
}

This looks really strange, given that your error message mentions the SmartRulesApps catalog, while your code seems to use the SmartRulesEngine catalog.

What is the actual catalog name?

AdomdConnection Exception ........

Hi

I had created a dataminig model using "Asociattion Rules " , as the model is now working i want to get the rules out of it , so I try the following query in SQL 2005 Managanment Studio and its working fine

SELECT NODE_RULE FROM [Credit Card Table].CONTENT

Now I have to do this through code so used following code from book "DataMining using SQL Server 2005" , but the code gives error in making connection and says

"Either VMWINXP/Adminsittrator dont have right on the database SmartRulesApps or database not exsists" , now i use same credentials to run query in SQL 2005 Managmnet Studio and its working ! can you guys give me some hint whats i done wrong . One more point I check the database secuirty folder for my database SmartRulesApps and it contains dbo but how can i add VMWINXP/Adminsittrator(which is already my system admin ) to this security users ? i tried but its not working. Please let me know any thing you find that can help , you can also send me email at razi_rais@.yahoo.com

private void OpenConnection()
{
AdomdConnection con = new AdomdConnection("location=localhost;Initial Catalog=SmartRulesEngine;Integrated Security=SSPI");
// AdomdConnection("location=VMWINXP;Effective UserName=VMWINXP\\Administrator;Initial Catalog=SmartRulesEngine;");

try
{
con.Open();

AdomdCommand cmd = new AdomdCommand();

cmd.CommandText = "SELECT NODE_RULE FROM [Credit Card Table].CONTENT";
cmd.Connection = con;
AdomdDataReader reader;

reader = cmd.ExecuteReader();
System.Collections.ArrayList lst = new System.Collections.ArrayList();
int i = 0;
while (reader.Read())
{
lst.Add(reader.GetValue(i++).ToString());
}
reader.Close();
}
catch (System.Exception exp)
{

}
finally
{
con.Close();
}
}

This looks really strange, given that your error message mentions the SmartRulesApps catalog, while your code seems to use the SmartRulesEngine catalog.

What is the actual catalog name?

ADOMD.NET Compression Not Working

I am using AdomdConnection to connect to analysis services over http through the msmdpump.dll in IIS. Here's my connection string...

connectionString="Provider=MSOLAP.3;user id=auserid;password=apassword;Data Source=http://servername/olap/msmdpump.dll; Initial Catalog=CatalogName; Transport Compression=Compressed; Compression Level=9;"

Everything works but some of the cellsets returned are large and I need compression. It is not returning a compressed http response. When I sniff the http request I do not see 'Accept-Encoding: gzip,deflate'. If I hit a regular web page with IE I see this in the http request headers and the content returned is compressed.

Any ideas anyone?

Thanks ahead of time.

Rich

This is a known problem and will be fixed in SP1.

_-_-_ Dave

ADO.NET - I just dont get it!

Hi

I'm pulling my hair out with this one! I wrote the code below on a different computer, got it working fine, but when I copied it into another VB ASP.NET 2.0 web site - it doesn't work - no value is returned and I've checked the SQL is fine??? It doesn't through any errors, just doesn't work - can anyone see anything obvious?

ProtectedSub Page_Load(ByVal senderAsObject,ByVal eAs System.EventArgs)HandlesMe.Load

Dim connAsNew Data.SqlClient.SqlConnection(ConfigurationManager.ConnectionStrings("ConnectionString").ConnectionString)

Dim SQLAsString =String.Format("SELECT photosLink FROM viewEvents WHERE eventID = 17")

Dim commAsNew Data.SqlClient.SqlCommand

Dim drAs Data.SqlClient.SqlDataReader

Dim photosLinkAsString =""Using conn

Try

conn.Open()

comm.Connection = conn

comm.CommandType = Data.CommandType.Text

comm.CommandText = SQL

dr = comm.ExecuteReader

DoWhile dr.Read

photosLink = dr("photosLink")

Loop

Catch exAs Exception

'err message is capture by assigning a variable to ex.Message

Finally

conn.Close()

EndTry

EndUsing

Label1.Text ="test " & photosLink

EndSub

Many thanks
Richard

Perhaps the database on the new web site doesn't have a photosLink WHERE eventID = 17

|||

Yea, it does, I've made absolutely sure. ??L

|||

The only other thing that looks suspect to me is the exception handler. As it is now, if there is an exception, it is masked and not reported.

Catch exAs Exception

'err message is capture by assigning a variable to ex.Message

Finally

|||

Good idea! (I'm fairly new to ASP.NET - as I'm sure you've guessed!).

The error comes up with 'Conversion from type 'DBNull' to type 'String' is not valid.'

How do I get round this one?

Thanks
Richard

|||

Hi,

From the error message you got, I think the cause of the problem is the following code:

photosLink = dr("photosLink")

What you got from dr("photosLink") is an Object typed value, and I guess currently the returned row according to your sql command is 0. So the return of dr("photoLink") has turned to be a System.DBNull typed object. And you are assigning the object to a string typed variable, which is not valid.

So please try to convert the object typed value to a string and then assign it to the local variable, See

photosLink = dr("photosLink").ToString()

Thanks.

|||

Thanks - that's fixed it! Thank you for taking the time to explain in detail, I've a big learning curve and appreciate your time.

Thanks again
Richard

ADO Using ODBC vs. OLEDB

I am working on a large ASP application(s) which uses SQL Server 2K on the back end, ADO 2.7 for Data Access. The current connection strings are setup to use older ODBC drivers. I wanted to change them to OLEDB for performance gains and better support in the future.

The problem encountered is that once the driver is changed the pages become riddled with errors. There are many piece of ADO code that are supported using the new driver. Many are cursor issues or code dealing with identity columns.

Has anyone else gone through this process?

Is there a comprehensive listing of those methods that are not compliant between these two drivers?

Any input would be appreciated...ThanksCan you post the error message you got?|||Is this an asp or asp.net application ? Yes and please post the errors and the code it is failing on.|||It definitely sounds like all your back-end code sits on the front-end, right? You would save a lot of time if instead of cleaning it up try to move to where it belongs, - back-end.|||Thanks for responding to my post.

I am using standard ASP pages not ASP.NET.

The applications I am working with are comprised of roughly 10K pages altogether. There are many errors that occur and I am able to address them as they arise. It really has to do with a lack of support from one driver to another through ADO.

I really was looking for some resources on this topic not solutions to specific code errors.

If I listed each error and code sample here it could take a long time.

Thanks|||One place you might find useful is the recordset.supports method, it will tell you if a particular method is supported by the recordset or not.

You will find differences with transaction handling too I expect.

The dynamic recordset & connection properties change too.

You could get a copy of Adoanywher browser, it displays the supported functionality of your recordsets and allows you to open multiple connections with multiple recordsets. Full support for transactions. It displays all available recordset and connection properties.

I basically use it to compare drivers just as you are attempting to do.

The browser is currently free if you register quickly at the forum :

http://www.adoanywhere.com/forum

Mike.

ADO Schema Rowsets and "identity"

Hi there,
I'm working on an ADO generic application that tries to get as much info as
possible
from the ADO schema rowsets.
Is it possible - somehow - to know if a column is defined with the
"identity" property?
I cannot seem to find it ...
With regards,
Martijn Tonies
Database Workbench - developer tool for InterBase, Firebird, MySQL & MS SQL
Server
Upscene Productions
http://www.upscene.com
Hi
I don't know much about ADO schema rowsets
But using T-SQL like
SELECT o.name, c.name FROM syscolumns c, sysobjects o
WHERE c.id = o.id AND (c.status & 128) = 128
or
SELECT COLUMNPROPERTY( OBJECT_ID('authors'),'au_lname',IsIdentity)
you can easily return the info about IDENTITY existence.
"Martijn Tonies" <m.tonies@.upscene-removethis.nospam.com> wrote in message
news:upL2I4ySFHA.3176@.TK2MSFTNGP09.phx.gbl...
> Hi there,
> I'm working on an ADO generic application that tries to get as much info
as
> possible
> from the ADO schema rowsets.
> Is it possible - somehow - to know if a column is defined with the
> "identity" property?
> I cannot seem to find it ...
> --
> With regards,
> Martijn Tonies
> Database Workbench - developer tool for InterBase, Firebird, MySQL & MS
SQL
> Server
> Upscene Productions
> http://www.upscene.com
>
|||
> I don't know much about ADO schema rowsets
> But using T-SQL like
> SELECT o.name, c.name FROM syscolumns c, sysobjects o
> WHERE c.id = o.id AND (c.status & 128) = 128
> or
> SELECT COLUMNPROPERTY( OBJECT_ID('authors'),'au_lname',IsIdentity)
> you can easily return the info about IDENTITY existence.
Yes, I know ... :-)
But this would defeat part of the "generic-ness" of the application. But if
this
the only way to go, then it's the only way to go ...
With regards,
Martijn Tonies
Database Workbench - developer tool for InterBase, Firebird, MySQL & MS SQL
Server
Upscene Productions
http://www.upscene.com
|||Martin
What is "generic-ness" of the application?
"Martijn Tonies" <m.tonies@.upscene-removethis.nospam.com> wrote in message
news:uC6C$AzSFHA.2324@.TK2MSFTNGP10.phx.gbl...
>
> Yes, I know ... :-)
> But this would defeat part of the "generic-ness" of the application. But
if
> this
> the only way to go, then it's the only way to go ...
>
> --
> With regards,
> Martijn Tonies
> Database Workbench - developer tool for InterBase, Firebird, MySQL & MS
SQL
> Server
> Upscene Productions
> http://www.upscene.com
>
|||> What is "generic-ness" of the application?
By using the ADO schema rowsets, I'm trying not to use any database engine
specific SQL and let the ADO driver figure it out.
So the application is generic... Or at least, should be.
With regards,
Martijn Tonies
Database Workbench - developer tool for InterBase, Firebird, MySQL & MS SQL
Server
Upscene Productions
http://www.upscene.com

ADO Schema Rowsets and "identity"

Hi there,
I'm working on an ADO generic application that tries to get as much info as
possible
from the ADO schema rowsets.
Is it possible - somehow - to know if a column is defined with the
"identity" property?
I cannot seem to find it ...
--
With regards,
Martijn Tonies
Database Workbench - developer tool for InterBase, Firebird, MySQL & MS SQL
Server
Upscene Productions
http://www.upscene.comHi
I don't know much about ADO schema rowsets
But using T-SQL like
SELECT o.name, c.name FROM syscolumns c, sysobjects o
WHERE c.id = o.id AND (c.status & 128) = 128
or
SELECT COLUMNPROPERTY( OBJECT_ID('authors'),'au_lname',IsIdentity)
you can easily return the info about IDENTITY existence.
"Martijn Tonies" <m.tonies@.upscene-removethis.nospam.com> wrote in message
news:upL2I4ySFHA.3176@.TK2MSFTNGP09.phx.gbl...
> Hi there,
> I'm working on an ADO generic application that tries to get as much info
as
> possible
> from the ADO schema rowsets.
> Is it possible - somehow - to know if a column is defined with the
> "identity" property?
> I cannot seem to find it ...
> --
> With regards,
> Martijn Tonies
> Database Workbench - developer tool for InterBase, Firebird, MySQL & MS
SQL
> Server
> Upscene Productions
> http://www.upscene.com
>|||> I don't know much about ADO schema rowsets
> But using T-SQL like
> SELECT o.name, c.name FROM syscolumns c, sysobjects o
> WHERE c.id = o.id AND (c.status & 128) = 128
> or
> SELECT COLUMNPROPERTY( OBJECT_ID('authors'),'au_lname',IsIdentity)
> you can easily return the info about IDENTITY existence.
Yes, I know ... :-)
But this would defeat part of the "generic-ness" of the application. But if
this
the only way to go, then it's the only way to go ...
With regards,
Martijn Tonies
Database Workbench - developer tool for InterBase, Firebird, MySQL & MS SQL
Server
Upscene Productions
http://www.upscene.com|||Martin
What is "generic-ness" of the application?
"Martijn Tonies" <m.tonies@.upscene-removethis.nospam.com> wrote in message
news:uC6C$AzSFHA.2324@.TK2MSFTNGP10.phx.gbl...
> > I don't know much about ADO schema rowsets
> > But using T-SQL like
> > SELECT o.name, c.name FROM syscolumns c, sysobjects o
> > WHERE c.id = o.id AND (c.status & 128) = 128
> >
> > or
> > SELECT COLUMNPROPERTY( OBJECT_ID('authors'),'au_lname',IsIdentity)
> > you can easily return the info about IDENTITY existence.
> Yes, I know ... :-)
> But this would defeat part of the "generic-ness" of the application. But
if
> this
> the only way to go, then it's the only way to go ...
>
> --
> With regards,
> Martijn Tonies
> Database Workbench - developer tool for InterBase, Firebird, MySQL & MS
SQL
> Server
> Upscene Productions
> http://www.upscene.com
>|||> What is "generic-ness" of the application?
By using the ADO schema rowsets, I'm trying not to use any database engine
specific SQL and let the ADO driver figure it out.
So the application is generic... Or at least, should be.
With regards,
Martijn Tonies
Database Workbench - developer tool for InterBase, Firebird, MySQL & MS SQL
Server
Upscene Productions
http://www.upscene.com

ADO Schema Rowsets and "identity"

Hi there,
I'm working on an ADO generic application that tries to get as much info as
possible
from the ADO schema rowsets.
Is it possible - somehow - to know if a column is defined with the
"identity" property?
I cannot seem to find it ...
With regards,
Martijn Tonies
Database Workbench - developer tool for InterBase, Firebird, mysql & MS SQL
Server
Upscene Productions
http://www.upscene.comHi
I don't know much about ADO schema rowsets
But using T-SQL like
SELECT o.name, c.name FROM syscolumns c, sysobjects o
WHERE c.id = o.id AND (c.status & 128) = 128
or
SELECT COLUMNPROPERTY( OBJECT_ID('authors'),'au_lname',IsIdenti
ty)
you can easily return the info about IDENTITY existence.
"Martijn Tonies" <m.tonies@.upscene-removethis.nospam.com> wrote in message
news:upL2I4ySFHA.3176@.TK2MSFTNGP09.phx.gbl...
> Hi there,
> I'm working on an ADO generic application that tries to get as much info
as
> possible
> from the ADO schema rowsets.
> Is it possible - somehow - to know if a column is defined with the
> "identity" property?
> I cannot seem to find it ...
> --
> With regards,
> Martijn Tonies
> Database Workbench - developer tool for InterBase, Firebird, mysql & MS
SQL
> Server
> Upscene Productions
> http://www.upscene.com
>|||
> I don't know much about ADO schema rowsets
> But using T-SQL like
> SELECT o.name, c.name FROM syscolumns c, sysobjects o
> WHERE c.id = o.id AND (c.status & 128) = 128
> or
> SELECT COLUMNPROPERTY( OBJECT_ID('authors'),'au_lname',IsIdenti
ty)
> you can easily return the info about IDENTITY existence.
Yes, I know ... :-)
But this would defeat part of the "generic-ness" of the application. But if
this
the only way to go, then it's the only way to go ...
With regards,
Martijn Tonies
Database Workbench - developer tool for InterBase, Firebird, mysql & MS SQL
Server
Upscene Productions
http://www.upscene.com|||Martin
What is "generic-ness" of the application?
"Martijn Tonies" <m.tonies@.upscene-removethis.nospam.com> wrote in message
news:uC6C$AzSFHA.2324@.TK2MSFTNGP10.phx.gbl...
>
> Yes, I know ... :-)
> But this would defeat part of the "generic-ness" of the application. But
if
> this
> the only way to go, then it's the only way to go ...
>
> --
> With regards,
> Martijn Tonies
> Database Workbench - developer tool for InterBase, Firebird, mysql & MS
SQL
> Server
> Upscene Productions
> http://www.upscene.com
>|||> What is "generic-ness" of the application?
By using the ADO schema rowsets, I'm trying not to use any database engine
specific SQL and let the ADO driver figure it out.
So the application is generic... Or at least, should be.
With regards,
Martijn Tonies
Database Workbench - developer tool for InterBase, Firebird, mysql & MS SQL
Server
Upscene Productions
http://www.upscene.com

ADO Integrated Security Pass Through Again

The previous thread died so I'm sorry for the repost.
I am working on making my application inherit the workstation login user
information so that users aren't presented with multiple logins.
Does anyone have any experience linking internal application user management
(ie: USERS table) with windows authentication?
I have access rights that a specific to my application such as menu
options, reports, specific actions, etc. The application was developed 8
years ago and supported multiple database platforms. We have moved to only
supporting MS SQL Server 7, 2000 and 2005.
What's the best way to link these together since DBAs wouldn't be able to
assign my application specific access rights via MS SQL Server Management
Studio/Enterprise Manager?
Any comments or suggestions would be great.Hi!
First, your application should use ADO connection string like
"SERVER=mymssql; Integrated Security=SSPI;"
thus application will connect to SQL with current logged user
credentials. Naturally, user must have some rights on SQL server.
You can set those right for NT group, not for individual user accounts.
The user account name is accessible in t-sql and you can build some
additional logic:
CREATE PROC GetCustomUserRights
AS
declare @.NT_login varchar(64)
set @.NT_login = SYSTEM_USER
select UserRightName,UserRightValue from USERS where UserName = @.NT_login
RETURN 0
GO
implying the table USERS has structure and data like:
UserName, UserRightName, UserRightValue
"ACME\user1", "AdvancedMenu", "True"
"ACME\user2", "AdvancedMenu ", "False"
...
Best regards, Anatoli
"Isaac Alexander" <isaacNOSPAM@.goNOSPAMprocura.com> wrote

> The previous thread died so I'm sorry for the repost.
> I am working on making my application inherit the workstation login user
> information so that users aren't presented with multiple logins.
> Does anyone have any experience linking internal application user
> management
> (ie: USERS table) with windows authentication?
> I have access rights that a specific to my application such as menu
> options, reports, specific actions, etc. The application was developed 8
> years ago and supported multiple database platforms. We have moved to only
> supporting MS SQL Server 7, 2000 and 2005.
> What's the best way to link these together since DBAs wouldn't be able to
> assign my application specific access rights via MS SQL Server Management
> Studio/Enterprise Manager?
> Any comments or suggestions would be great.
>|||"Anatoli Dontsov" <Anatoli@.dontsov.com> wrote in message
news:eXg$wQOvGHA.4296@.TK2MSFTNGP06.phx.gbl...
> Hi!
> First, your application should use ADO connection string like
> "SERVER=mymssql; Integrated Security=SSPI;"
> thus application will connect to SQL with current logged user
> credentials. Naturally, user must have some rights on SQL server.
> You can set those right for NT group, not for individual user accounts.
> The user account name is accessible in t-sql and you can build some
> additional logic:
> CREATE PROC GetCustomUserRights
> AS
> declare @.NT_login varchar(64)
> set @.NT_login = SYSTEM_USER
> select UserRightName,UserRightValue from USERS where UserName = @.NT_login
> RETURN 0
> GO
> implying the table USERS has structure and data like:
> UserName, UserRightName, UserRightValue
> "ACME\user1", "AdvancedMenu", "True"
> "ACME\user2", "AdvancedMenu ", "False"
> ...
Thanks. Has anyone had any experience creating the list of users for the
access rights? For example: a user logs in and I check their access rights,
is the best solution to have admin type in the NT login name into my app and
add access rights? Or can I provide a dropdown of users based in some
network query?

ADO Integrated Security Pass Through Again

The previous thread died so I'm sorry for the repost.
I am working on making my application inherit the workstation login user
information so that users aren't presented with multiple logins.
Does anyone have any experience linking internal application user management
(ie: USERS table) with windows authentication?
I have access rights that a specific to my application such as menu
options, reports, specific actions, etc. The application was developed 8
years ago and supported multiple database platforms. We have moved to only
supporting MS SQL Server 7, 2000 and 2005.
What's the best way to link these together since DBAs wouldn't be able to
assign my application specific access rights via MS SQL Server Management
Studio/Enterprise Manager?
Any comments or suggestions would be great.Hi!
First, your application should use ADO connection string like
"SERVER=mymssql; Integrated Security=SSPI;"
thus application will connect to SQL with current logged user
credentials. Naturally, user must have some rights on SQL server.
You can set those right for NT group, not for individual user accounts.
The user account name is accessible in t-sql and you can build some
additional logic:
CREATE PROC GetCustomUserRights
AS
declare @.NT_login varchar(64)
set @.NT_login = SYSTEM_USER
select UserRightName,UserRightValue from USERS where UserName = @.NT_login
RETURN 0
GO
implying the table USERS has structure and data like:
UserName, UserRightName, UserRightValue
"ACME\user1", "AdvancedMenu", "True"
"ACME\user2", "AdvancedMenu ", "False"
...
Best regards, Anatoli
"Isaac Alexander" <isaacNOSPAM@.goNOSPAMprocura.com> wrote
> The previous thread died so I'm sorry for the repost.
> I am working on making my application inherit the workstation login user
> information so that users aren't presented with multiple logins.
> Does anyone have any experience linking internal application user
> management
> (ie: USERS table) with windows authentication?
> I have access rights that a specific to my application such as menu
> options, reports, specific actions, etc. The application was developed 8
> years ago and supported multiple database platforms. We have moved to only
> supporting MS SQL Server 7, 2000 and 2005.
> What's the best way to link these together since DBAs wouldn't be able to
> assign my application specific access rights via MS SQL Server Management
> Studio/Enterprise Manager?
> Any comments or suggestions would be great.
>|||"Anatoli Dontsov" <Anatoli@.dontsov.com> wrote in message
news:eXg$wQOvGHA.4296@.TK2MSFTNGP06.phx.gbl...
> Hi!
> First, your application should use ADO connection string like
> "SERVER=mymssql; Integrated Security=SSPI;"
> thus application will connect to SQL with current logged user
> credentials. Naturally, user must have some rights on SQL server.
> You can set those right for NT group, not for individual user accounts.
> The user account name is accessible in t-sql and you can build some
> additional logic:
> CREATE PROC GetCustomUserRights
> AS
> declare @.NT_login varchar(64)
> set @.NT_login = SYSTEM_USER
> select UserRightName,UserRightValue from USERS where UserName = @.NT_login
> RETURN 0
> GO
> implying the table USERS has structure and data like:
> UserName, UserRightName, UserRightValue
> "ACME\user1", "AdvancedMenu", "True"
> "ACME\user2", "AdvancedMenu ", "False"
> ...
Thanks. Has anyone had any experience creating the list of users for the
access rights? For example: a user logs in and I check their access rights,
is the best solution to have admin type in the NT login name into my app and
add access rights? Or can I provide a dropdown of users based in some
network query?