can i do RDA transfer using integrated security?

or do i need to setup SQL security users and logins.?

The following articles will help you to understand the various ways for configuring security for replication

http://msdn2.microsoft.com/en-us/library/bb226707.aspx

http://msdn2.microsoft.com/en-us/library/ms172917.aspx

Manish Agnihotri

Program Manager

SQL Compact

sql

Can I change from Integrated Security?

When creating my database, I initially set it up to use Integrated Security (Windows Login), however I am having a hard time logging into the database on a consistent basis using this method. Can I now change to a specified user id and password? How would I do that? Would I lose any data in my database? Does the user id and password need to be the same user id and password used when logging into SQL Server?

Thank you.

The Authetication method is global to the server and not specific to the database.

When you change your authentication to mixed mode

The SA account becomes the most powerful account in the Sql server box

and can login in to all the databases in the server by default.

there are no data loss in the change.

reset the password of your SA account and makeuse of it.

|||

You can change the SQL Server security model to allow a SQL Server login

In the Object Explorer window, right-click on the Server, and then click on the [Security] page. Change to SQL Server and Windows Authentication mode. Then click [OK].

However, it is not conisdered a good practice to use the [sa] account. It represents a significant security risk. It is preferred to create a login for your purposes, and provide just enough permissions for that login to do its work.

Lesson 7: Understanding Security and Network Connectivity -from this series may be of help in understanding how to use SQL Server security.

SQL Server 2005 Express Video Learning
http://msdn.microsoft.com/vstudio/express/sql/learning/default.aspx#1

Can a report list available reports? - revisited

We all know its possible to get all our reports w/ .listchildren("/", true)
but how can get properties for that report?
parameters, security info, ect...
?
is it .Role or .Policy?
thanksStandard report properties are listed through ListChildren(). Extended
properties can be retrieved via GetProperties().
Parameter information is available through GetReportParameters()
Security info via GetPolicies().
--
Bryan Keller
Developer Documentation
SQL Server Reporting Services
A friendly reminder that this posting is provided "AS IS" with no
warranties, and confers no rights.
"mgonzales3" <mgonzales3@.discussions.microsoft.com> wrote in message
news:D8BFCEEF-ECAB-4BB6-995A-F020BCE2C9A4@.microsoft.com...
> We all know its possible to get all our reports w/ .listchildren("/",
true)
> but how can get properties for that report?
> parameters, security info, ect...
> ?
> is it .Role or .Policy?
> thanks
>

Can a non-admin user generate "Create database" script using SMO?

I posted this thread in security also. But cross posting here with hope of getting a quick answer.

I am trying to generate the create database script using SMO. The issue is the user account which connects to SQL server is not SA, SMO fails to generate the "Create Database" script with error User ZZZ\User1 does not have permission to run DBCC SHOWFILESTATS.

Is it possible to generate a "Create database" script using SMO when you are connecting to the SQL server using NON-ADMIN account?

The user login is a part of db_Datareader role on the database. I tried following grant permission to the concerned account at server level

Grant view any database, grant view any definition and grant view server state. Still it fails.

Any idea?

One thing you can try is using the Server.ConnectionContext.ConnectionString property to specify the connection string the way we do it in applications and give the sa user id and password.

Other was is to grant dbwriter along with modify schema permission to the user.

|||Thanks Mitesh for your help. The user who connect to the server will be using it ONLY for generating the script. He is not going to create the database on the same server. Once the script is generated, the database will be created using the earlier generated script on other server, where the user has proper permission. There is no way user can be made SA, ONLY for generating the script (and that too only for CREATE DATABASE script). There is no chance of getting sa password on the first server from where user is trying to generate the script, as it is a production server.

Can a Custom Security Extension help me here?

I am hoping someone can tell me what I am trying to do is even possible
before I waste several hours of development time. I have read all relevant
posts in this newsgroup, and the Microsoft provided Forms Authentication
example
(http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnsql2k/html/ufairs.asp).
However, I am still unsure if what I want to do will even work.
Here's the setup...
Reporting Services is being deployed on its own box, exposed to the internet.
For this discussion call it http://rs-box
Users are dropped to a "List of Reports" screen (an .aspx page) on this box
via a link clicked from an Apache server. I've handled the appropriate
security issues for this action just fine. What happens is the Apache server
sends the user's information encrypted on the query string:
ex. http://rs-box?userInfo=SomeEncryptedStringOfCharacters
My "List of Reports" .aspx page decryptes the userInfo parameter and
renders the available reports or kicks them back to the Apache server to
login. If the user information is acceptable, it gets dropped into the
HttpSession. That part is easy.
One of the reports shows the user all their account activity for a given
date range. I want them to be able to use the interactive toolbar (via their
web browser) to export to their chosen format, etc. The way the account
activity report is implemented is that one of the parameters it needs to run
is the user's account number. This is basically a parameter passed to the
report.
So here's my question. I need to check (I assume via a custom security
extension) if the account number being passed in along the URL is the same as
the account number stored in the HttpSession (I don't want users manipulating
the URL and calling up the account history for another user). It is a really
easy thing to check, but after a few hours of research I just don't know if
it is possible.
If I'm on the right track any hints as to which functions to override would
be greatly appreciated too...
ryanYes, if your account number is the UserID in your security extension, you
can simply use User!UserID as a parameter when pulling up the history.
That's very similar to what we're doing. Works like a snap -- after much
hassle setting it up. The Forms Authentication sample code is a great
start.
Cheers,
'(' Jeff A. Stucker
\
Business Intelligence
www.criadvantage.com
---
"ryan" <ryan@.discussions.microsoft.com> wrote in message
news:8B7B5537-4D72-4877-AD22-D1783A932674@.microsoft.com...
>I am hoping someone can tell me what I am trying to do is even possible
> before I waste several hours of development time. I have read all
> relevant
> posts in this newsgroup, and the Microsoft provided Forms Authentication
> example
> (http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnsql2k/html/ufairs.asp).
> However, I am still unsure if what I want to do will even work.
> Here's the setup...
> Reporting Services is being deployed on its own box, exposed to the
> internet.
> For this discussion call it http://rs-box
> Users are dropped to a "List of Reports" screen (an .aspx page) on this
> box
> via a link clicked from an Apache server. I've handled the appropriate
> security issues for this action just fine. What happens is the Apache
> server
> sends the user's information encrypted on the query string:
> ex. http://rs-box?userInfo=SomeEncryptedStringOfCharacters
> My "List of Reports" .aspx page decryptes the userInfo parameter and
> renders the available reports or kicks them back to the Apache server to
> login. If the user information is acceptable, it gets dropped into the
> HttpSession. That part is easy.
> One of the reports shows the user all their account activity for a given
> date range. I want them to be able to use the interactive toolbar (via
> their
> web browser) to export to their chosen format, etc. The way the account
> activity report is implemented is that one of the parameters it needs to
> run
> is the user's account number. This is basically a parameter passed to the
> report.
> So here's my question. I need to check (I assume via a custom security
> extension) if the account number being passed in along the URL is the same
> as
> the account number stored in the HttpSession (I don't want users
> manipulating
> the URL and calling up the account history for another user). It is a
> really
> easy thing to check, but after a few hours of research I just don't know
> if
> it is possible.
> If I'm on the right track any hints as to which functions to override
> would
> be greatly appreciated too...
> ryan

Calling Webservice

Hi,
I have set the Reporting WebServices WebService Directory Security in
IIS to Windows Authentication. The authentication setting in the
config file is set to "Windows" with Impersonation set to "true".
I created an account called "RSAdminUser" with which to call the
webservice.
When calling the "ListReportsUsingDataSource" method, after setting
the credentials to this "RSAdminUser", I get the following error:
"System.Web.Services.Protocols.SoapException: The permissions granted
to user 'SERVER\RSAdminUser' are insufficient for performing this
operation. --> Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException:
The permissions granted to user 'SERVER\RSAdminUser' are insufficient
for performing this operation. at
Microsoft.ReportingServices.Library.RSService.ListReportsUsingDataSource(String
path) at Microsoft.ReportingServices.WebServer.ReportingService.ListReportsUsingDataSource(String
DataSource, CatalogItem[]& Reports) -- End of inner exception stack
trace -- at Microsoft.ReportingServices.WebServer.ReportingService.ListReportsUsingDataSource(String
DataSource, CatalogItem[]& Reports)"
I have methodically given this user permissions to all of the relevant
folders and files that I can think of, but the only thing that makes
this work is making "RSAdminUser" a member of the "Administrators"
group. Is it possible that only members of the "Administrators" group
are allowed to execute this method?
Is there an alternative solution? What permissions does this account
need to execute this method?
Thanks in advance,
AmyHi Amy:
Reporting services uses roles based authorization, and the default
setup only places the local administrator into a role.
While RSAdminUser might have rights to access all the files and
folders in the reporting services installation, you still have to put
the user into a "role". Roles are how RS determines who can browse a
folder, who can view a report, who can manage a data source etc.
From your reports home page you can go to Site Settings -> Configure
site wide security (link is at the bottom). Perhaps you should define
a new role for RSAdminUser and grant just enough authorization for the
user to get the things done you need.
Hope this helps,
--
Scott
http://www.OdeToCode.com
On 3 Aug 2004 05:04:48 -0700, amydudley@.webmail.co.za (Amy) wrote:
>Hi,
>I have set the Reporting WebServices WebService Directory Security in
>IIS to Windows Authentication. The authentication setting in the
>config file is set to "Windows" with Impersonation set to "true".
>I created an account called "RSAdminUser" with which to call the
>webservice.
>When calling the "ListReportsUsingDataSource" method, after setting
>the credentials to this "RSAdminUser", I get the following error:
>"System.Web.Services.Protocols.SoapException: The permissions granted
>to user 'SERVER\RSAdminUser' are insufficient for performing this
>operation. --> Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException:
>The permissions granted to user 'SERVER\RSAdminUser' are insufficient
>for performing this operation. at
>Microsoft.ReportingServices.Library.RSService.ListReportsUsingDataSource(String
>path) at Microsoft.ReportingServices.WebServer.ReportingService.ListReportsUsingDataSource(String
>DataSource, CatalogItem[]& Reports) -- End of inner exception stack
>trace -- at Microsoft.ReportingServices.WebServer.ReportingService.ListReportsUsingDataSource(String
>DataSource, CatalogItem[]& Reports)"
>I have methodically given this user permissions to all of the relevant
>folders and files that I can think of, but the only thing that makes
>this work is making "RSAdminUser" a member of the "Administrators"
>group. Is it possible that only members of the "Administrators" group
>are allowed to execute this method?
>Is there an alternative solution? What permissions does this account
>need to execute this method?
>Thanks in advance,
>Amy