Post New Web Links

Verifying GRANT permissions on Service Broker CONTRACT and Queue

Posted By: Posted Date: October 07, 2010 Points: 0 Category :Sql Server

I am setting up SqlDependency and wish to verify that the permissions have been applied correctly.

One of the commands that should be run to grant permissions is to grant references on a contract for the user:

GRANT REFERENCES on CONTRACT::[http://schemas.microsoft.com/SQL/Notifications/PostQueryNotification] to [sql_dependency_subscriber]

How can I check whether the user e.g. 'databaseUser' has this REFERENCES granted on this contract? Which view/stored proc. to use?

The other command is similar (also required for SqlDependency) but grants permission "RECEIVE":

GRANT RECEIVE ON QueryNotificationErrorsQueue TO [sql_dependency_subscriber]

How could I verify that the RECEIVE permission has been granted?

I have currently used this command:

SELECT
[permission_name],
[state_desc],
[name]
FROM
sys.database_permissions AS prmssn
INNER JOIN sys.database_principals AS grantee_principal
ON grantee_principal.principal_id = prmssn.grantee_principal_id
WHERE prmssn.class = 0

With this command I can see some permissions (such as CREATE PROCEDURE, CREATE QUEUE, etc.) but the above permissions related to the contract and queue do not seem to show in the results from sys.database_permissions.

Thankful for any advice!

View Complete Post

More Related Resource Links

Service Broker Queue message activates stored Proc as SA but the stored proc is unable to access oth

I have a queue whose activation I defined as below

ALTER QUEUE SomeInitiatorQueue
WITH ACTIVATION
( STATUS = ON,
PROCEDURE_NAME = usp_SomeProc,
MAX_QUEUE_READERS = 30,
EXECUTE AS OWNER)

Now I am trying to access another database in usp_SomeProc as below

Select SomeColumn SomeOtherDb.dbo.SomeTable

Here I am getting this error "The server principal "sa" is not able to access the database "SomeOtherDb" under the current security context."

It never allows unless I grant all permissions on the database to all.

what is the solution?

Message Orientation: Decouple Applications with SQL Server Service Broker

John Charles Olamendy

MSDN Magazine September 2009

Service Station: Techniques for Contract-First Development

In my May 2005 column, I discussed contract-first development and appropriate times to use it (see Service Station: Contract-First Service Development). In this second part, I'm going to focus on some techniques for contract-first development within the ASMX framework.

Aaron Skonnard

MSDN Magazine June 2005

Service Station: Contract-First Service Development

In one of my previous columns on Service Orientation (SO), I introduced the concept of "contract-first" service development (see Service Station: SOA: More Integration, Less Renovation). Over the next two installments of this column, I'm going to cover the topic in depth.

Aaron Skonnard

MSDN Magazine May 2005

WCF Needs? How to Communicate Multiple Contract via Single Service?

why it needs. i have many business objects how could i serve to my web application via single service. i have nearly 500 different business objects. how could contract implement into client web applicatoin.

SQL Agent - service account permissions - SQL Server 2008

Hi @ all I installed two SQL Server 2008 on Server 2008 R2 Std (principal and mirror) and an AD Server 2008, with sperate service accounts, connect as SA, localy all works fine. I created some agent tasks (PowerShell, T-SQL), but I get some Error massages in the history, that service account of SQL Agent didn't have the permission to query a remote machine(access denied for wmi (HRESULT: 0x80070005 (E_ACCESSDENIED)) and linked database(SQLSTATE 42000 Error(7314)). The simple query with SA permissions on the remote machine works and the powershell scripts with the local domain user works too. But not with the SQL Agent. WHY?? Where ist the different between the user account permisions and service account permissions? Which settings are needed? Example: get-wmiobject -class win32_service -computername 192.168.xxx.xxx| where {$_.name -like '*SQL*'} Powershell Console: works SQL Agent Job: access denied I tried some solutions with user rights, group policies and security permissions but nothing works. like: Configuration -Service Accounts, SQL Server or SQL Server Agent service account http://support.microsoft.com/kb/283811/en-us http://msdn2.microsoft.com/

User Profile Service account Write to AD Permissions

I followed this guide here (http://www.harbar.net/articles/sp2010ups.aspx) to provision the UPS service in sharepoint 2010. I found the guide very helpful and informative. Everything is working correctly except for the write back to AD I've followed the steps and have assigned the listed permissions to the UPS service account, however I still get permissiong errors in the FIM GUI Our AD is running in a 2008 environment but is in 2003 mode, so I made sure to add the UPS account to Pre Windows 2000 Compatible access built in group and restart the server so that the new group settings would take affect. Do I need to reprovision the UPS service or something? Or am I missing something completely. (Hopefully the latter lol!) Thanks RKB

Permissions issue for custom web service in the _vti_bin folder.

Hello, I have created a custom ASMX webservice that returns in JSON format so that I can call the data from JQuery on SharePoint page content. I placed it in the ISAPI (_vti_bin) folder and it works just fine when I go directly to the web service and call it the way JQuery calls it: /_vti_bin/ServiceabilityCheck.asmx/GetSystemIDByZIPCode?ipaddress=127.0.0.1&zipcode=85004&promocode= Which returns: <string>{"SystemID":"5"}</string> When I try to call it from the SharePoint site with JQuery, it errors out and gives an unspecified error. Fiddler shows {"Message":"Authentication failed.","StackTrace":null,"ExceptionType":"System.InvalidOperationException"} as the response from the web service call. When I have the webservice on an IIS web app outside of SharePoint, it works fine. I have anonymous access enabled on the SharePoint site, why would it give me this error?John Chapman | Blog: http://www.johnchapman.name

separating service level data from business data in servcie contract

Hi I have read that service level data (like requestId, client name etc. required for tracing/auditing) should be separated from business data(required for actual business operation) ie. differencing "Message Header" from "message payload". When we say 'separation", does that mean service level data should not be defined/declared in my contract class. If so how clients will know what header info they have to pass? I can't enforce header info as part of my contract. i think http://blogs.microsoft.co.il/blogs/bursteg/archive/2006/04/23/141.aspx this is based on assumption that clients are aware what they have to pass in header. Regardssinghhome

WITH GRANT permissions

Now, we have released the select 'WITH GRANT' on view for some power user. Then, the power user can release the select rights to other user. However, when the power user try to do so, they could not see the user list in the SQL server. How to solve this? Thanks

Permissions:disable controls by roles(access pages too)(dynamically :each new role has special grant

HelloI have an application of many pages of consultation and same time I have a module of adding users by roles and creating accounts by role.(the application is ready but i cant manage the roles)the tutorials that i found are very useful to manage roles but its roles fixed before(administrators,supervisors)(http://www.asp.net/security/tutorials/creating-and-managing-roles-vb) if I add a new role (agent) i want to grant to this new role a new access to pages(different access than admin and supervisor) and disable new controlswhy not using checkbox to every new role checking a field related to databaseis it possible?if yes ,how can i begin?Thanks

Single class with service and callback contract

Can a single class implement service and callback contract. Thanks-= JL =-

Workflow - Same Contract used in two service - Conversion problem

Hello, I'm trying at the moment to use WF to create a basic Workflow, and face a conversion problem. Here's the setup : Service 1 : Create objects based on a defined Data Contract Service 2 : Apply an operation on objects of type defined in service 1. Service 1 is imported as Service reference. I created a simple Workflow which imports both services. It first call Service one to get an object, and then send it to Service 2 to apply the operation. But when I try to do this I receive an error of type : 'WF.Service1.Entity' cannot be converted to 'WF.Service2.Entity'. The Contract used is only defined in the Service 1 and reused in Service 2, so it's the same object. The only difference is in the proxy client generated which creates both definitions, each one in it's specific namespace (Service1 and Service2). Do you see any solution to this situation ? Except creating an activity that copy every property from one object to another :-) P.S. : I uploaded the basic setup here : http://www.mediafire.com/?e6j9c2dv4rvcdoh

Meetings.asmx web service to inherit parent site permissions

Hi,

I am using the Meetings.asmx web service to create a sub site. Unfortunately this does not provide a mechanism to inherit parent site permissions, it just creates a sub site with unique permissions which is not what I want. In order to inherit the parent permissions I am using the Permissions.asmx. Can someone please provide some sample code on how to do this, I tried various mechanims through the Permissions.asmx but does not seem to be able to get it right.

Thanks

Arjuna.

MOSS 2007 can only grant permissions to users in the local domain...

Greetings all,

Where ever I go and attempt to add a user to a group or to grant permissions to a user I am never able to select users from other domains. The only users I can select are users in the domain where MOSS 2007 was installed. Is there a setting in MOSS that I need to change to be able to add users from other domains to groups in SharePoint?

Thanks for any and all insights.

Marc

svcutil /metadata - how to export metadata for service contract that has generic type

Hi,

I am using svcutil /metadata to get metadata for a WCF service project assembly, the service class implements the IChildServiceContract below, and the IChildServiceContract interface implements a base interface which accept a generic type.

public interface IChildServiceContract : IServiceBaseContract<string>

I can generate metadata for IChildServiceContract , I am curious and also want to try generate meta data for base interface, an error come up which seems have problem with the generic based contract:

There was an error exporting the contract loaded from the type: xxx.xxx.xxx.IServiceBaseContract`1

Is it possible to generate metadata in this situation?

Thanks in advanced

WCF - Service Contract Namespace

Hi,

When we are defining a service contract type it will already be specified in a well defined namespace in code.Then why namespace property in service contract attrib ?

What is the purpose of using namespace property in service contract ? When and how we can see the benefit of it ?

Many Thanks

Vijaykishan | http://v2attechhorizon.blogspot.com


Categories:

ASP.Net	Windows Application	.NET Framework	C#	VB.Net	ADO.Net
Sql Server	SharePoint	Silverlight	Others	All