Thursday, February 16, 2012

Access Issue in in 2005

I have some software that connects to SQL Server using Integrated Security in my connection string. My users are members of an active directory group. In SQL Server 2005, I've added the AD group to Logins, checked the User Mapping for the database, and checked role memberships db_datareader, db_datawriter and public.

When I look at Properties->Permissions of the database, the AD group is listed under Users or roles. I checked Connect, Execute, Select, Insert and Update are checked.

The users in the AD group still cannot access the data. 2 questions:

-Is there a log that will tell me why they're getting blocked?

-Is there a better way to give access to a new group of people?

Thanks!

Brian

I think you're going down the right route adding the user to pre defined roles. However, can you clarify whether users of the group are able to login to the SQL Server or do they just have permission denied on the objects within the specific database? What message do you receive back when one of these users attempts to login and read the data?

|||

>> What message do you receive back when one of these users attempts to login and read the data?

I was attempting to answer this question (by adding better exception handling) when things started working. The last thing I did in SQL Server was checked the SELECT and INSERT boxes under the role. I didn't think it fixed the problem because the app still crashed, but there must have been a problem in the code that I fixed too.

Thanks!

Brian

No comments:

Post a Comment