Showing posts with label objects. Show all posts
Showing posts with label objects. Show all posts

Thursday, March 22, 2012

Can user view objects they only have select permission on?

I have a user that belongs to a role. This role only has select permissions
on 10 views. When I log in as this user via Management Studio I cannot see
the views however I can execute queries against them.
On another server that I did not setup, that I'm supposed to be mimicking
the same security, this same user can see the views.
Any ideas what the difference is?
Thanks!Here's the commands that I'm executing in order:
CREATE ROLE [Customers_ROLE] Authorization dbo
CREATE SCHEMA [Customers_Schema] AUTHORIZATION [Customers_Role] Deny
View
Definition to [Customers_Role]
exec sp_adduser 'phenson', 'phenson', [Customers_Role]
GRANT SELECT ON [dbo].[PT_VIEW] TO [Customers_Role]
When I log in as phenson I do not see PT_View but I can query on it. I need
to be able to see it.
"SpankyATL" wrote:

> I have a user that belongs to a role. This role only has select permissio
ns
> on 10 views. When I log in as this user via Management Studio I cannot se
e
> the views however I can execute queries against them.
> On another server that I did not setup, that I'm supposed to be mimicking
> the same security, this same user can see the views.
> Any ideas what the difference is?
> Thanks!|||I thought I'd answer my own question for those of you who come across this
some day. I need to remove the "Deny View Definition" portion and that took
care of it. The user was able to see that view and execute it but could not
see the script.
"SpankyATL" wrote:
[vbcol=seagreen]
> Here's the commands that I'm executing in order:
> CREATE ROLE [Customers_ROLE] Authorization dbo
> CREATE SCHEMA [Customers_Schema] AUTHORIZATION [Customers_Role] De
ny View
> Definition to [Customers_Role]
> exec sp_adduser 'phenson', 'phenson', [Customers_Role]
> GRANT SELECT ON [dbo].[PT_VIEW] TO [Customers_Role]
>
> When I log in as phenson I do not see PT_View but I can query on it. I ne
ed
> to be able to see it.
> "SpankyATL" wrote:
>|||SpankyATL (SpankyATL@.discussions.microsoft.com) writes:
> Here's the commands that I'm executing in order:
> CREATE ROLE [Customers_ROLE] Authorization dbo
> CREATE SCHEMA [Customers_Schema] AUTHORIZATION [Customers_Role] De
ny View
> Definition to [Customers_Role]
> exec sp_adduser 'phenson', 'phenson', [Customers_Role]
> GRANT SELECT ON [dbo].[PT_VIEW] TO [Customers_Role]
>
> When I log in as phenson I do not see PT_View but I can query on it. I
> need to be able to see it.
Why then did you do DENY VIEW DEFINITION to a role that you made phenson a
member of?
Erland Sommarskog, SQL Server MVP, esquel@.sommarskog.se
Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/pr...oads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodin...ions/books.mspx|||I was working from a script that was given to me. The person who developed
it mistakenly thought deny view would only deny the user from viewing the
source code.
"Erland Sommarskog" wrote:

> SpankyATL (SpankyATL@.discussions.microsoft.com) writes:
> Why then did you do DENY VIEW DEFINITION to a role that you made phenson a
> member of?
>
> --
> Erland Sommarskog, SQL Server MVP, esquel@.sommarskog.se
> Books Online for SQL Server 2005 at
> http://www.microsoft.com/technet/pr...oads/books.mspx
> Books Online for SQL Server 2000 at
> http://www.microsoft.com/sql/prodin...ions/books.mspx
>

Tuesday, February 14, 2012

can objects in sql server change your nt login password

hi guys,
i was wondering if there is a bug in sql server 2000 that upon changing settings in the sqlserver agent or sqlserver services that it will actually change your nt user password.
a strange occurence happened to me i switched the sqlmail to a different outlook profile that is MAPI compliant i had to stop and start the sql server agent upon restart it said it could not log me in b/c my nt logon failed (i guess you can figure out by now that i have authentication as NT in my set up of sql server agent). well me knowing microsoft products i was like ah i will just reboot the machine) well upon reboot my administrator password which is empty "null value"no longer is valid.
now noone in the company said that they changed the administrator password and it is not logged into a domain so the machine is not on our companys network. we log in local to the machine as the administrator. the last things that i played around in with sql server was replication setting it up as a publisher and deleteing it and changing a mapi profile. is there anywhere in sql 2000 that messing with any setting that it will actually affect your windows nt user login?? i know i cant be loosing my mind here and i hope someone at my company wouldnt sabotage my machine. right now i have two options i can reinstall win 2000 and choose repair hoping that i will not lose my sql 2000 info or i can try a password cracker. any suggestions that might of cause this to happen?
regards,
Robertof course Microsoft is always providing use with new features, but I doubt this unlikely. What you described sounds exactly as if the user password had been changed at the OS level. The password could have been changed by mistake.

Sunday, February 12, 2012

Can not start server after setting open objects to 2147483647

SQL Server 2000 Enterprise installed on Windows 2000 Advanced Server.
I set open objects to 2147483647 for research purpose. After I did it, I can
not start the server any more, nor can I set open objects to a smaller value.
The error message I got was:
[Shared Memory]SQL Server does not exist or access denied.
[Shared Memory]ConnectionOpen (Connect()).
What should I do to be able to start the server again?
Thank you,
TammyTry starting the server using the -f option, then change this value back to 0.
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
Blog: http://solidqualitylearning.com/blogs/tibor/
"Tammy" <Tammy@.discussions.microsoft.com> wrote in message
news:C97AD036-A6FA-4120-861F-19FEDD921EE2@.microsoft.com...
> SQL Server 2000 Enterprise installed on Windows 2000 Advanced Server.
> I set open objects to 2147483647 for research purpose. After I did it, I can
> not start the server any more, nor can I set open objects to a smaller value.
> The error message I got was:
> [Shared Memory]SQL Server does not exist or access denied.
> [Shared Memory]ConnectionOpen (Connect()).
> What should I do to be able to start the server again?
> Thank you,
> Tammy|||That solves the problem. Thank you, Tibor.
"Tibor Karaszi" wrote:
> Try starting the server using the -f option, then change this value back to 0.
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
> Blog: http://solidqualitylearning.com/blogs/tibor/
>
> "Tammy" <Tammy@.discussions.microsoft.com> wrote in message
> news:C97AD036-A6FA-4120-861F-19FEDD921EE2@.microsoft.com...
> > SQL Server 2000 Enterprise installed on Windows 2000 Advanced Server.
> >
> > I set open objects to 2147483647 for research purpose. After I did it, I can
> > not start the server any more, nor can I set open objects to a smaller value.
> > The error message I got was:
> > [Shared Memory]SQL Server does not exist or access denied.
> > [Shared Memory]ConnectionOpen (Connect()).
> >
> > What should I do to be able to start the server again?
> >
> > Thank you,
> > Tammy
>

Can not start server after setting open objects to 2147483647

SQL Server 2000 Enterprise installed on Windows 2000 Advanced Server.
I set open objects to 2147483647 for research purpose. After I did it, I can
not start the server any more, nor can I set open objects to a smaller value.
The error message I got was:
[Shared Memory]SQL Server does not exist or access denied.
[Shared Memory]ConnectionOpen (Connect()).
What should I do to be able to start the server again?
Thank you,
Tammy
Try starting the server using the -f option, then change this value back to 0.
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
Blog: http://solidqualitylearning.com/blogs/tibor/
"Tammy" <Tammy@.discussions.microsoft.com> wrote in message
news:C97AD036-A6FA-4120-861F-19FEDD921EE2@.microsoft.com...
> SQL Server 2000 Enterprise installed on Windows 2000 Advanced Server.
> I set open objects to 2147483647 for research purpose. After I did it, I can
> not start the server any more, nor can I set open objects to a smaller value.
> The error message I got was:
> [Shared Memory]SQL Server does not exist or access denied.
> [Shared Memory]ConnectionOpen (Connect()).
> What should I do to be able to start the server again?
> Thank you,
> Tammy
|||That solves the problem. Thank you, Tibor.
"Tibor Karaszi" wrote:

> Try starting the server using the -f option, then change this value back to 0.
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
> Blog: http://solidqualitylearning.com/blogs/tibor/
>
> "Tammy" <Tammy@.discussions.microsoft.com> wrote in message
> news:C97AD036-A6FA-4120-861F-19FEDD921EE2@.microsoft.com...
>

Can not start server after setting open objects to 2147483647

SQL Server 2000 Enterprise installed on Windows 2000 Advanced Server.
I set open objects to 2147483647 for research purpose. After I did it, I can
not start the server any more, nor can I set open objects to a smaller value
.
The error message I got was:
[Shared Memory]SQL Server does not exist or access denied.
[Shared Memory]ConnectionOpen (Connect()).
What should I do to be able to start the server again?
Thank you,
TammyTry starting the server using the -f option, then change this value back to
0.
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
Blog: http://solidqualitylearning.com/blogs/tibor/
"Tammy" <Tammy@.discussions.microsoft.com> wrote in message
news:C97AD036-A6FA-4120-861F-19FEDD921EE2@.microsoft.com...
> SQL Server 2000 Enterprise installed on Windows 2000 Advanced Server.
> I set open objects to 2147483647 for research purpose. After I did it, I c
an
> not start the server any more, nor can I set open objects to a smaller val
ue.
> The error message I got was:
> [Shared Memory]SQL Server does not exist or access denied.
> [Shared Memory]ConnectionOpen (Connect()).
> What should I do to be able to start the server again?
> Thank you,
> Tammy|||That solves the problem. Thank you, Tibor.
"Tibor Karaszi" wrote:

> Try starting the server using the -f option, then change this value back t
o 0.
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
> Blog: http://solidqualitylearning.com/blogs/tibor/
>
> "Tammy" <Tammy@.discussions.microsoft.com> wrote in message
> news:C97AD036-A6FA-4120-861F-19FEDD921EE2@.microsoft.com...
>