Showing posts with label privileges. Show all posts
Showing posts with label privileges. Show all posts

Sunday, February 12, 2012

Administrator with No Report Manager Privileges

I am logged on as a user with administrative privileges to
my machine, to the machine housing the report server
database, and to the the web server, yet when I go to
Report Manager, I do not have access to the Home folder,
only one lower folder, and no Site Settings for anything.
How do I add the necessary privileges if I'm already the
administrator?I found that if you have set the Report Server virtual directory to allow
anonymous access in the IIS mgmt console, you may find yourself in the
situation you described. I was experimenting with anonymous and got into the
situation, where I was a local admin but options like create new folders and
upload files were all gone from Report Manager. After I removed anonymous
access, I was able to fully administer Reporting Services via Report Manager
again.
Linchi
"Terry" <anonymous@.discussions.microsoft.com> wrote in message
news:029c01c47a5e$9cc531a0$a601280a@.phx.gbl...
> I am logged on as a user with administrative privileges to
> my machine, to the machine housing the report server
> database, and to the the web server, yet when I go to
> Report Manager, I do not have access to the Home folder,
> only one lower folder, and no Site Settings for anything.
> How do I add the necessary privileges if I'm already the
> administrator?
>|||Linchi, Thanks for your response and you are correct
about the configuration of anonymous access, however,
this site needs anonymous access. Any suggestions on how
to get my rights back and keep anonymous access?
>--Original Message--
>I found that if you have set the Report Server virtual
directory to allow
>anonymous access in the IIS mgmt console, you may find
yourself in the
>situation you described. I was experimenting with
anonymous and got into the
>situation, where I was a local admin but options like
create new folders and
>upload files were all gone from Report Manager. After I
removed anonymous
>access, I was able to fully administer Reporting
Services via Report Manager
>again.
>Linchi
>"Terry" <anonymous@.discussions.microsoft.com> wrote in
message
>news:029c01c47a5e$9cc531a0$a601280a@.phx.gbl...
>> I am logged on as a user with administrative
privileges to
>> my machine, to the machine housing the report server
>> database, and to the the web server, yet when I go to
>> Report Manager, I do not have access to the Home
folder,
>> only one lower folder, and no Site Settings for
anything.
>> How do I add the necessary privileges if I'm already
the
>> administrator?
>
>.
>|||No, I have not found why or how to work around it. In my case, I didn't
really need anonymous access. I hope MS folks can shed some light on this
behavior.
Linchi
"Terry" <anonymous@.discussions.microsoft.com> wrote in message
news:085c01c47af3$75d2fe20$a301280a@.phx.gbl...
> Linchi, Thanks for your response and you are correct
> about the configuration of anonymous access, however,
> this site needs anonymous access. Any suggestions on how
> to get my rights back and keep anonymous access?
>
> >--Original Message--
> >I found that if you have set the Report Server virtual
> directory to allow
> >anonymous access in the IIS mgmt console, you may find
> yourself in the
> >situation you described. I was experimenting with
> anonymous and got into the
> >situation, where I was a local admin but options like
> create new folders and
> >upload files were all gone from Report Manager. After I
> removed anonymous
> >access, I was able to fully administer Reporting
> Services via Report Manager
> >again.
> >
> >Linchi
> >
> >"Terry" <anonymous@.discussions.microsoft.com> wrote in
> message
> >news:029c01c47a5e$9cc531a0$a601280a@.phx.gbl...
> >> I am logged on as a user with administrative
> privileges to
> >> my machine, to the machine housing the report server
> >> database, and to the the web server, yet when I go to
> >> Report Manager, I do not have access to the Home
> folder,
> >> only one lower folder, and no Site Settings for
> anything.
> >> How do I add the necessary privileges if I'm already
> the
> >> administrator?
> >>
> >
> >
> >.
> >|||When you enable anonymous access, all requests come in as the anonymous
user. Since that user does not have any role assignments in the report
server, they cannot see any folders, nor can they perform operations.
We recommend that you do not use anonymous access to the report server, but
enable windows secuirty.
-Lukasz
This posting is provided "AS IS" with no warranties, and confers no rights.
"Linchi Shea" <linchi_shea@.NOSPAM.ml.com> wrote in message
news:eBZrcj1eEHA.2028@.tk2msftngp13.phx.gbl...
> No, I have not found why or how to work around it. In my case, I didn't
> really need anonymous access. I hope MS folks can shed some light on this
> behavior.
> Linchi
> "Terry" <anonymous@.discussions.microsoft.com> wrote in message
> news:085c01c47af3$75d2fe20$a301280a@.phx.gbl...
>> Linchi, Thanks for your response and you are correct
>> about the configuration of anonymous access, however,
>> this site needs anonymous access. Any suggestions on how
>> to get my rights back and keep anonymous access?
>>
>> >--Original Message--
>> >I found that if you have set the Report Server virtual
>> directory to allow
>> >anonymous access in the IIS mgmt console, you may find
>> yourself in the
>> >situation you described. I was experimenting with
>> anonymous and got into the
>> >situation, where I was a local admin but options like
>> create new folders and
>> >upload files were all gone from Report Manager. After I
>> removed anonymous
>> >access, I was able to fully administer Reporting
>> Services via Report Manager
>> >again.
>> >
>> >Linchi
>> >
>> >"Terry" <anonymous@.discussions.microsoft.com> wrote in
>> message
>> >news:029c01c47a5e$9cc531a0$a601280a@.phx.gbl...
>> >> I am logged on as a user with administrative
>> privileges to
>> >> my machine, to the machine housing the report server
>> >> database, and to the the web server, yet when I go to
>> >> Report Manager, I do not have access to the Home
>> folder,
>> >> only one lower folder, and no Site Settings for
>> anything.
>> >> How do I add the necessary privileges if I'm already
>> the
>> >> administrator?
>> >>
>> >
>> >
>> >.
>> >
>

Administrator does not have any privileges

I am logged on as a user with administrative privileges to my machine, yet when I go to the Report Manager, I have no tabs or Site Settings. How do I add the necessary privileges if I'm already the administrator?Are you using a custom security extension?
-Lukasz
--
This posting is provided "AS IS" with no warranties, and confers no rights.
"Patrick_McD" <Patrick_McD@.discussions.microsoft.com> wrote in message
news:56D7FB04-7279-4193-A809-E12D46827F6A@.microsoft.com...
> I am logged on as a user with administrative privileges to my machine, yet
when I go to the Report Manager, I have no tabs or Site Settings. How do I
add the necessary privileges if I'm already the administrator?|||No. I have everything set up very generically.
"Lukasz Pawlowski [MSFT]" wrote:
> Are you using a custom security extension?
> -Lukasz
> --
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Patrick_McD" <Patrick_McD@.discussions.microsoft.com> wrote in message
> news:56D7FB04-7279-4193-A809-E12D46827F6A@.microsoft.com...
> > I am logged on as a user with administrative privileges to my machine, yet
> when I go to the Report Manager, I have no tabs or Site Settings. How do I
> add the necessary privileges if I'm already the administrator?
>
>|||Are you loggedin locally? Your user is a memeber of the local
administrators group?
-Lukasz
This posting is provided "AS IS" with no warranties, and confers no rights.
"Patrick_McD" <Patrick_McD@.discussions.microsoft.com> wrote in message
news:EC031FF7-BDCB-46B4-98E2-2E8787C030A6@.microsoft.com...
> No. I have everything set up very generically.
> "Lukasz Pawlowski [MSFT]" wrote:
> > Are you using a custom security extension?
> >
> > -Lukasz
> >
> > --
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> >
> >
> >
> > "Patrick_McD" <Patrick_McD@.discussions.microsoft.com> wrote in message
> > news:56D7FB04-7279-4193-A809-E12D46827F6A@.microsoft.com...
> > > I am logged on as a user with administrative privileges to my machine,
yet
> > when I go to the Report Manager, I have no tabs or Site Settings. How
do I
> > add the necessary privileges if I'm already the administrator?
> >
> >
> >|||Yes. I am logged on as a member of the Administrators group. Thanks!
"Lukasz Pawlowski [MSFT]" wrote:
> Are you loggedin locally? Your user is a memeber of the local
> administrators group?
> -Lukasz
>
> --
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Patrick_McD" <Patrick_McD@.discussions.microsoft.com> wrote in message
> news:EC031FF7-BDCB-46B4-98E2-2E8787C030A6@.microsoft.com...
> > No. I have everything set up very generically.
> >
> > "Lukasz Pawlowski [MSFT]" wrote:
> >
> > > Are you using a custom security extension?
> > >
> > > -Lukasz
> > >
> > > --
> > > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > >
> > >
> > >
> > > "Patrick_McD" <Patrick_McD@.discussions.microsoft.com> wrote in message
> > > news:56D7FB04-7279-4193-A809-E12D46827F6A@.microsoft.com...
> > > > I am logged on as a user with administrative privileges to my machine,
> yet
> > > when I go to the Report Manager, I have no tabs or Site Settings. How
> do I
> > > add the necessary privileges if I'm already the administrator?
> > >
> > >
> > >
>
>|||Was this ever resolved? I am having the same problem.
>--Original Message--
>Yes. I am logged on as a member of the Administrators
group. Thanks!
>"Lukasz Pawlowski [MSFT]" wrote:
>> Are you loggedin locally? Your user is a memeber of
the local
>> administrators group?
>> -Lukasz
>>
>> --
>> This posting is provided "AS IS" with no warranties,
and confers no rights.
>>
>> "Patrick_McD" <Patrick_McD@.discussions.microsoft.com>
wrote in message
>> news:EC031FF7-BDCB-46B4-98E2-
2E8787C030A6@.microsoft.com...
>> > No. I have everything set up very generically.
>> >
>> > "Lukasz Pawlowski [MSFT]" wrote:
>> >
>> > > Are you using a custom security extension?
>> > >
>> > > -Lukasz
>> > >
>> > > --
>> > > This posting is provided "AS IS" with no
warranties, and confers no
>> rights.
>> > >
>> > >
>> > >
>> > > "Patrick_McD"
<Patrick_McD@.discussions.microsoft.com> wrote in message
>> > > news:56D7FB04-7279-4193-A809-
E12D46827F6A@.microsoft.com...
>> > > > I am logged on as a user with administrative
privileges to my machine,
>> yet
>> > > when I go to the Report Manager, I have no tabs or
Site Settings. How
>> do I
>> > > add the necessary privileges if I'm already the
administrator?
>> > >
>> > >
>> > >
>>
>.
>|||Are the /reportserver and /reports virtual directories configured to use
integrated security and *no* anonymous access?
--
Tudor Trufinescu
Dev Lead
Sql Server Reporting Services
This posting is provided "AS IS" with no warranties, and confers no rights.
"Patrick_McD" <PatrickMcD@.discussions.microsoft.com> wrote in message
news:3086AADF-A3F3-4698-88E1-5AE6B2689424@.microsoft.com...
> Yes. I am logged on as a member of the Administrators group. Thanks!
> "Lukasz Pawlowski [MSFT]" wrote:
> > Are you loggedin locally? Your user is a memeber of the local
> > administrators group?
> >
> > -Lukasz
> >
> >
> > --
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> >
> >
> >
> > "Patrick_McD" <Patrick_McD@.discussions.microsoft.com> wrote in message
> > news:EC031FF7-BDCB-46B4-98E2-2E8787C030A6@.microsoft.com...
> > > No. I have everything set up very generically.
> > >
> > > "Lukasz Pawlowski [MSFT]" wrote:
> > >
> > > > Are you using a custom security extension?
> > > >
> > > > -Lukasz
> > > >
> > > > --
> > > > This posting is provided "AS IS" with no warranties, and confers no
> > rights.
> > > >
> > > >
> > > >
> > > > "Patrick_McD" <Patrick_McD@.discussions.microsoft.com> wrote in
message
> > > > news:56D7FB04-7279-4193-A809-E12D46827F6A@.microsoft.com...
> > > > > I am logged on as a user with administrative privileges to my
machine,
> > yet
> > > > when I go to the Report Manager, I have no tabs or Site Settings.
How
> > do I
> > > > add the necessary privileges if I'm already the administrator?
> > > >
> > > >
> > > >
> >
> >
> >|||Tudor;
There is another thread on this same issue. I wonder whether you know why
setting anonymous access would result in this behavior, and whether there is
a way to retain both the admin privileges for the local admin and anonymous
access.
Linchi
"Tudor Trufinescu (MSFT)" <tudortr@.ms.com> wrote in message
news:eyJlrcyeEHA.2848@.TK2MSFTNGP10.phx.gbl...
> Are the /reportserver and /reports virtual directories configured to use
> integrated security and *no* anonymous access?
> --
> Tudor Trufinescu
> Dev Lead
> Sql Server Reporting Services
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> "Patrick_McD" <PatrickMcD@.discussions.microsoft.com> wrote in message
> news:3086AADF-A3F3-4698-88E1-5AE6B2689424@.microsoft.com...
> > Yes. I am logged on as a member of the Administrators group. Thanks!
> >
> > "Lukasz Pawlowski [MSFT]" wrote:
> >
> > > Are you loggedin locally? Your user is a memeber of the local
> > > administrators group?
> > >
> > > -Lukasz
> > >
> > >
> > > --
> > > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > >
> > >
> > >
> > > "Patrick_McD" <Patrick_McD@.discussions.microsoft.com> wrote in message
> > > news:EC031FF7-BDCB-46B4-98E2-2E8787C030A6@.microsoft.com...
> > > > No. I have everything set up very generically.
> > > >
> > > > "Lukasz Pawlowski [MSFT]" wrote:
> > > >
> > > > > Are you using a custom security extension?
> > > > >
> > > > > -Lukasz
> > > > >
> > > > > --
> > > > > This posting is provided "AS IS" with no warranties, and confers
no
> > > rights.
> > > > >
> > > > >
> > > > >
> > > > > "Patrick_McD" <Patrick_McD@.discussions.microsoft.com> wrote in
> message
> > > > > news:56D7FB04-7279-4193-A809-E12D46827F6A@.microsoft.com...
> > > > > > I am logged on as a user with administrative privileges to my
> machine,
> > > yet
> > > > > when I go to the Report Manager, I have no tabs or Site Settings.
> How
> > > do I
> > > > > add the necessary privileges if I'm already the administrator?
> > > > >
> > > > >
> > > > >
> > >
> > >
> > >
>|||Yes, allowing anonymous access would result in this behavior.
Allowing anonymous access means all users will be seen as the same user, the
server won't even ask them to provide their authentication information.
You can't have both anonymous and non anonymous on the same virtual
directories. I presume you could create two virtual directories one allowing
anonymous access, the other not.
--
Tudor Trufinescu
Dev Lead
Sql Server Reporting Services
This posting is provided "AS IS" with no warranties, and confers no rights.
"Linchi Shea" <linchi_shea@.NOSPAM.ml.com> wrote in message
news:ebSCkhBfEHA.3520@.TK2MSFTNGP10.phx.gbl...
> Tudor;
> There is another thread on this same issue. I wonder whether you know why
> setting anonymous access would result in this behavior, and whether there
is
> a way to retain both the admin privileges for the local admin and
anonymous
> access.
> Linchi
> "Tudor Trufinescu (MSFT)" <tudortr@.ms.com> wrote in message
> news:eyJlrcyeEHA.2848@.TK2MSFTNGP10.phx.gbl...
> > Are the /reportserver and /reports virtual directories configured to use
> > integrated security and *no* anonymous access?
> >
> > --
> > Tudor Trufinescu
> > Dev Lead
> > Sql Server Reporting Services
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >
> > "Patrick_McD" <PatrickMcD@.discussions.microsoft.com> wrote in message
> > news:3086AADF-A3F3-4698-88E1-5AE6B2689424@.microsoft.com...
> > > Yes. I am logged on as a member of the Administrators group. Thanks!
> > >
> > > "Lukasz Pawlowski [MSFT]" wrote:
> > >
> > > > Are you loggedin locally? Your user is a memeber of the local
> > > > administrators group?
> > > >
> > > > -Lukasz
> > > >
> > > >
> > > > --
> > > > This posting is provided "AS IS" with no warranties, and confers no
> > rights.
> > > >
> > > >
> > > >
> > > > "Patrick_McD" <Patrick_McD@.discussions.microsoft.com> wrote in
message
> > > > news:EC031FF7-BDCB-46B4-98E2-2E8787C030A6@.microsoft.com...
> > > > > No. I have everything set up very generically.
> > > > >
> > > > > "Lukasz Pawlowski [MSFT]" wrote:
> > > > >
> > > > > > Are you using a custom security extension?
> > > > > >
> > > > > > -Lukasz
> > > > > >
> > > > > > --
> > > > > > This posting is provided "AS IS" with no warranties, and confers
> no
> > > > rights.
> > > > > >
> > > > > >
> > > > > >
> > > > > > "Patrick_McD" <Patrick_McD@.discussions.microsoft.com> wrote in
> > message
> > > > > > news:56D7FB04-7279-4193-A809-E12D46827F6A@.microsoft.com...
> > > > > > > I am logged on as a user with administrative privileges to my
> > machine,
> > > > yet
> > > > > > when I go to the Report Manager, I have no tabs or Site
Settings.
> > How
> > > > do I
> > > > > > add the necessary privileges if I'm already the administrator?
> > > > > >
> > > > > >
> > > > > >
> > > >
> > > >
> > > >
> >
> >
>|||Tudor;
Could you please elaborate how you can create two virtual directories and
work the way you described, when it comes to Reporting Services?
Linchi
"Tudor Trufinescu (MSFT)" <tudortr@.ms.com> wrote in message
news:uXhU5KKfEHA.140@.TK2MSFTNGP12.phx.gbl...
> Yes, allowing anonymous access would result in this behavior.
> Allowing anonymous access means all users will be seen as the same user,
the
> server won't even ask them to provide their authentication information.
> You can't have both anonymous and non anonymous on the same virtual
> directories. I presume you could create two virtual directories one
allowing
> anonymous access, the other not.
> --
> Tudor Trufinescu
> Dev Lead
> Sql Server Reporting Services
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> "Linchi Shea" <linchi_shea@.NOSPAM.ml.com> wrote in message
> news:ebSCkhBfEHA.3520@.TK2MSFTNGP10.phx.gbl...
> > Tudor;
> >
> > There is another thread on this same issue. I wonder whether you know
why
> > setting anonymous access would result in this behavior, and whether
there
> is
> > a way to retain both the admin privileges for the local admin and
> anonymous
> > access.
> >
> > Linchi
> >
> > "Tudor Trufinescu (MSFT)" <tudortr@.ms.com> wrote in message
> > news:eyJlrcyeEHA.2848@.TK2MSFTNGP10.phx.gbl...
> > > Are the /reportserver and /reports virtual directories configured to
use
> > > integrated security and *no* anonymous access?
> > >
> > > --
> > > Tudor Trufinescu
> > > Dev Lead
> > > Sql Server Reporting Services
> > > This posting is provided "AS IS" with no warranties, and confers no
> > rights.
> > >
> > > "Patrick_McD" <PatrickMcD@.discussions.microsoft.com> wrote in message
> > > news:3086AADF-A3F3-4698-88E1-5AE6B2689424@.microsoft.com...
> > > > Yes. I am logged on as a member of the Administrators group.
Thanks!
> > > >
> > > > "Lukasz Pawlowski [MSFT]" wrote:
> > > >
> > > > > Are you loggedin locally? Your user is a memeber of the local
> > > > > administrators group?
> > > > >
> > > > > -Lukasz
> > > > >
> > > > >
> > > > > --
> > > > > This posting is provided "AS IS" with no warranties, and confers
no
> > > rights.
> > > > >
> > > > >
> > > > >
> > > > > "Patrick_McD" <Patrick_McD@.discussions.microsoft.com> wrote in
> message
> > > > > news:EC031FF7-BDCB-46B4-98E2-2E8787C030A6@.microsoft.com...
> > > > > > No. I have everything set up very generically.
> > > > > >
> > > > > > "Lukasz Pawlowski [MSFT]" wrote:
> > > > > >
> > > > > > > Are you using a custom security extension?
> > > > > > >
> > > > > > > -Lukasz
> > > > > > >
> > > > > > > --
> > > > > > > This posting is provided "AS IS" with no warranties, and
confers
> > no
> > > > > rights.
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > "Patrick_McD" <Patrick_McD@.discussions.microsoft.com> wrote in
> > > message
> > > > > > > news:56D7FB04-7279-4193-A809-E12D46827F6A@.microsoft.com...
> > > > > > > > I am logged on as a user with administrative privileges to
my
> > > machine,
> > > > > yet
> > > > > > > when I go to the Report Manager, I have no tabs or Site
> Settings.
> > > How
> > > > > do I
> > > > > > > add the necessary privileges if I'm already the administrator?
> > > > > > >
> > > > > > >
> > > > > > >
> > > > >
> > > > >
> > > > >
> > >
> > >
> >
> >
>

Administration

Hi All
In Oracle Administration we will be having the users with normal and administrative privileges.
These privileges will be maintained in pre or user defined roles. Dba grants These roles to the users.

My doubt is in Sqlserver how to maintain the security . Plz help me
I know that in sqlserver also we will be having users,roles and schemas. How to apply these things
Waiting for reply
Sri

Login Name

Login identifiers (Ids) are associated with users when they connect to Microsoft? SQL Server? 2000. Login IDs are the accounts that control access to the SQL Server system. A user cannot connect to SQL Server without first specifying a valid login ID. Members of the sysadmin fixed server role define login IDs.

Purpose : It is used to connect the SQL server.

sp_addlogin (sql server authentication)

sp_grantlogin (NT authentication)

User Name

A user identifier (ID) identifies a user within a database. All permissions and ownership of objects in the database are controlled by the user account. User accounts are specific to a database; the xyz user account in the sales database is different from the xyz user account in the inventory database, even though both accounts have the same ID. User IDs are defined by members of the db_owner fixed database role.

A login ID by itself does not give a user permissions to access objects in any databases. A login ID must be associated with a user ID in each database before anyone connecting with that login ID can access objects in the databases. If a login ID has not been explicitly associated with any user ID in a database, it is associated with the guest user ID. If a database has no guest user account, a login cannot access the database unless it has been associated with a valid user account.

When a user ID is defined, it is associated with a login ID. For example, a member of the db_owner role can associate the Microsoft? Windows? 2000 login NETDOMAIN\Joe with user ID abc in the sales database and user ID def in the employee database. The default is for the login ID and user ID to be the same.

Purpose : If specific login wants to access on specific database they should be added into the database.

sp_grantdbaccess

Schema Name

It is inside the database; specific to Table and View permission aginst to the User(not login). It will describe the permission(s) on the Table and View. In otherword it is inline permission statement while creating Tables and Views.

Purpose: You can grant permission while creating (or just before creating) the Table or View. Here there is no specific order where the grant statement should appear(ie, you can first give the permission before creating table or view).

CREATE SCHEMA AUTHORIZATION

So, the Top level is Login name, to connect the SQL Server, User Name is the access permission to the Database, Schema Names are inline access permissions while creating the database. Database objects are named using UserName.ObjectName. UserName and LoginName may not be identical. ie., you can change the UserName for any login name. By default the Username and LoginName are same. (ex. DBO is username of SA loginname)

|||Thank u for u r valuable reply
Baba