Confused About Permission

I read a few articles on best SQL practices and they kept coming back to using a Least Privileged Account. So I did so and gave that account read only permissions. The articles also said to do updates use Stored Procedures - so I created stored procedures for updating/deleting data.

So here's my problem - I connect to the database using the Least Privileged Account, I use the Stored Procedures, but .NET keeps saying I lack permissions. If I GRANT the Least Privileged Account UPDATE/DELETE permission on the table, the Stored Procedures run perfectly. But isn't that EXACTLY what I'm trying to avoid?

My greatest concern is someone hacks my website and using the Least Privileged Account, they delete all my data using that account. So I don't want to give the Least Privileged Account the Update/Delete privileges.

Thanks a MILLION in advance!

Do you grant EXECUTE permission on the stored procedures to the account?

Once that is done you do not need UPDATE/DELETE on the tables for the account.

|||I granted execute permissions to the stored procedures, but it still fails when I check OFF the Update permission on the table (and still works when I check ON the Update permission). Any other ideas?|||

I figured out my problem (thanks to TATWORTH). I was creating the SP's while logging in as the least privileged account, so therefore the SP was [LeastPrivilegedAccount].[StoredProcedureName] - this required the Least privileged user to have the permissions. Now I created the SP's as [dbo].[StoredProcedureName] and granted the Least privileged user EXECUTE permissions.

It works perfectly! Thanks a MILLION!!1

Configuring Users - best Practices

Hello All,
I need to find out the best practices approach for user configuration in SQL
Reporting Services. I have teams of developers, who would be using VS.NET
development and deploying using VS.NET. Whats the best approach I could take
for development...Ideally I would like each team of users to have a folder
and so that they could deploy the reports only to those folders. Also how do
I set VS.NET to deploy a specifc sub folder.
Any thoughts or suggestions would be of good help.
Thanks,
ChrisYou can't deploy to a SubFolder in RS2K. Deployment from VS takes your
project name and uses it when you deploy. Only get one level.
There is a My Report folder you can turn on using the Report Manager under
system settings, but not sure that'll help you solve the problem you've
described.
If you need more, most straight forward approach is to go into Report
Manager after you deploy and move things around. Either that or use Report
Manager to 1st create the directory structure (folders / subfolders)
desired, then as Content Manager use the Upload File button on the tool bar
from within the subfolder to upload your reports.
If you find this to be burdensome, perhaps consider creating a VB script
like the one at
http://msdn.microsoft.com/library/en-us/rsamples/htm/rss_sampleapps_v1_1apd.asp
to automate the deployment process. Note, you could also do this
programmatically using the RS2K SOAP API. Perhaps as a program or daemon
that traverses a directory structure looking for .rdl files and then creates
the equivalent folders in RS to upload the reports to.
--
-- "This posting is provided 'AS IS' with no warranties, and confers no
rights."
jhmiller@.online.microsoft.com
"Christopher Pragash" <chrispragash@.hotmail.com> wrote in message
news:uyCnuc6mEHA.1304@.TK2MSFTNGP09.phx.gbl...
> Hello All,
> I need to find out the best practices approach for user configuration in
> SQL
> Reporting Services. I have teams of developers, who would be using VS.NET
> development and deploying using VS.NET. Whats the best approach I could
> take
> for development...Ideally I would like each team of users to have a folder
> and so that they could deploy the reports only to those folders. Also how
> do
> I set VS.NET to deploy a specifc sub folder.
> Any thoughts or suggestions would be of good help.
> Thanks,
> Chris
>|||John H. Miller wrote:
> You can't deploy to a SubFolder in RS2K. Deployment from VS takes
> your project name and uses it when you deploy. Only get one level.
I don't think that's correct, John. I am able to deploy to any folder I
want in RS2K (SP1) by setting the TargetFolder property under Deployment in
the project's Property Pages.
I would think Chris could set up a separate folder for each developer and
set up permissions that allow a developer to publish only to his/her own
folder. Each developer would simply set the TargetFolder to the virtual
path to his/her folder.
--
Regards,
Jake Marx
MS MVP - Excel
www.longhead.com
[please keep replies in the newsgroup - email address unmonitored]|||Christopher Pragash wrote:
> Hello All,
> I need to find out the best practices approach for user configuration
in SQL
> Reporting Services. I have teams of developers, who would be using
VS.NET
> development and deploying using VS.NET. Whats the best approach I
could take
> for development...Ideally I would like each team of users to have a
folder
> and so that they could deploy the reports only to those folders.
you can:
* create separate security groups containing the various teams of
developers
* create the various target folders on the report server
* assign the pertinent security group to the 'Content Manager' role
(using Report Manager is the easiest way to do this)
the above assumes all users are in a single domain and that you have
the ability to create groups. if not, you can use report manager once
again to create the folders and then add each developer individually to
the content manager role.
> Also how do I set VS.NET to deploy a specifc sub folder.
once you have created a BI project in the VS designer, you right-click
the project and select properties. from there, you can figure the
appropriate subfolder to deploy to, as well as the target server.
hope this helps.
cheers,
~stuart|||John H. Miller:
> You can't deploy to a SubFolder in RS2K. Deployment from VS takes
> your project name and uses it when you deploy. Only get one level.
Jake Marx:
<< I don't think that's correct, John. I am able to deploy to any
folder I
want in RS2K (SP1) by setting the TargetFolder property under
Deployment in
the project's Property Pages. >>
Jake is correct. You can set the targetfolder property to be
arbitrarily deep. if the directory structure doesn't exist, it will be
created on the first deploy.

configuring sql server (best practice)

Hello,
I was wondering how i could optimize sql server for best practices.
I have looked at the parameters, but what can i do with the memory resources
for example.
Zeke
It depends on what version of SQL Server and what specific
issues you are seeing or are trying to address. For the most
part, you'd want to leave the server configuration settings
alone on SQL Server 7 and above. There are some situations
where modifying the default settings can help but these are
generally implemented to address specific issues and should
be thoroughly tested before implementing on a production
server. You can find some information on the server
configuration settings in the following articles:
HOW TO: Determine Proper SQL Server Configuration Settings
http://support.microsoft.com/?id=319942
Tips for Performance Tuning
SQL Server's Configuration Settings
http://www.sql-server-performance.co...n_settings.asp
-Sue
On Tue, 1 Jun 2004 13:59:53 +0200, "Ezekil"
<ezekiel@.lycos.nl> wrote:

>Hello,
>I was wondering how i could optimize sql server for best practices.
>I have looked at the parameters, but what can i do with the memory resources
>for example.
>Zeke
>
|||Hi Sue,
I'm working with sql server 2000 and it runs with other large dbms's like
oracle. What i would like to achieve is finetune the server so that both
databases runs fully optimized.
Greetings,
Zeke
"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
news:4osob0t3i2t96uguuv72feb95e2l1n7k29@.4ax.com...
> It depends on what version of SQL Server and what specific
> issues you are seeing or are trying to address. For the most
> part, you'd want to leave the server configuration settings
> alone on SQL Server 7 and above. There are some situations
> where modifying the default settings can help but these are
> generally implemented to address specific issues and should
> be thoroughly tested before implementing on a production
> server. You can find some information on the server
> configuration settings in the following articles:
> HOW TO: Determine Proper SQL Server Configuration Settings
> http://support.microsoft.com/?id=319942
> Tips for Performance Tuning
> SQL Server's Configuration Settings
>
http://www.sql-server-performance.co...n_settings.asp[vbcol=seagreen]
> -Sue
> On Tue, 1 Jun 2004 13:59:53 +0200, "Ezekil"
> <ezekiel@.lycos.nl> wrote:
resources
>
|||You wouldn't necessarily use the server configurations to
fine tune things. The default settings work fine in most
cases, changing the settings just to try tweaking things
generally causes more problems. Server settings generally
isn't the first place to go in trying to tuning things up.
You'd want to look at the applications using the databases,
run profiler, pay to indexing/index usage, do overall
monitoring to check for potential server bottlenecks using
PerfMon, etc.
You may want to go through some of the articles at:
www.sql-server-performance.com
-Sue
On Tue, 1 Jun 2004 14:27:12 +0200, "Ezekil"
<ezekiel@.lycos.nl> wrote:

>Hi Sue,
>I'm working with sql server 2000 and it runs with other large dbms's like
>oracle. What i would like to achieve is finetune the server so that both
>databases runs fully optimized.
>Greetings,
>Zeke
>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>news:4osob0t3i2t96uguuv72feb95e2l1n7k29@.4ax.com.. .
>http://www.sql-server-performance.co...n_settings.asp
>resources
>
|||Ezekil,
Have you looked into Best Practices Analyzer? It has just been released:
http://www.microsoft.com/downloads/d...displaylang=en
Tinyurl:
http://tinyurl.com/35cb4
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Ezekil wrote:

> Hello,
> I was wondering how i could optimize sql server for best practices.
> I have looked at the parameters, but what can i do with the memory resources
> for example.
> Zeke
>

configuring sql server (best practice)

Hello,
I was wondering how i could optimize sql server for best practices.
I have looked at the parameters, but what can i do with the memory resources
for example.
ZekeIt depends on what version of SQL Server and what specific
issues you are seeing or are trying to address. For the most
part, you'd want to leave the server configuration settings
alone on SQL Server 7 and above. There are some situations
where modifying the default settings can help but these are
generally implemented to address specific issues and should
be thoroughly tested before implementing on a production
server. You can find some information on the server
configuration settings in the following articles:
HOW TO: Determine Proper SQL Server Configuration Settings
http://support.microsoft.com/?id=319942
Tips for Performance Tuning
SQL Server's Configuration Settings
http://www.sql-server-performance.c...on_settings.asp
-Sue
On Tue, 1 Jun 2004 13:59:53 +0200, "Ezekil"
<ezekiel@.lycos.nl> wrote:

>Hello,
>I was wondering how i could optimize sql server for best practices.
>I have looked at the parameters, but what can i do with the memory resource
s
>for example.
>Zeke
>|||Hi Sue,
I'm working with sql server 2000 and it runs with other large dbms's like
oracle. What i would like to achieve is finetune the server so that both
databases runs fully optimized.
Greetings,
Zeke
"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
news:4osob0t3i2t96uguuv72feb95e2l1n7k29@.
4ax.com...
> It depends on what version of SQL Server and what specific
> issues you are seeing or are trying to address. For the most
> part, you'd want to leave the server configuration settings
> alone on SQL Server 7 and above. There are some situations
> where modifying the default settings can help but these are
> generally implemented to address specific issues and should
> be thoroughly tested before implementing on a production
> server. You can find some information on the server
> configuration settings in the following articles:
> HOW TO: Determine Proper SQL Server Configuration Settings
> http://support.microsoft.com/?id=319942
> Tips for Performance Tuning
> SQL Server's Configuration Settings
>
http://www.sql-server-performance.c...on_settings.asp
> -Sue
> On Tue, 1 Jun 2004 13:59:53 +0200, "Ezekil"
> <ezekiel@.lycos.nl> wrote:
>
resources[vbcol=seagreen]
>|||You wouldn't necessarily use the server configurations to
fine tune things. The default settings work fine in most
cases, changing the settings just to try tweaking things
generally causes more problems. Server settings generally
isn't the first place to go in trying to tuning things up.
You'd want to look at the applications using the databases,
run profiler, pay to indexing/index usage, do overall
monitoring to check for potential server bottlenecks using
PerfMon, etc.
You may want to go through some of the articles at:
www.sql-server-performance.com
-Sue
On Tue, 1 Jun 2004 14:27:12 +0200, "Ezekil"
<ezekiel@.lycos.nl> wrote:

>Hi Sue,
>I'm working with sql server 2000 and it runs with other large dbms's like
>oracle. What i would like to achieve is finetune the server so that both
>databases runs fully optimized.
>Greetings,
>Zeke
>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
> news:4osob0t3i2t96uguuv72feb95e2l1n7k29@.
4ax.com...
>http://www.sql-server-performance.c...on_settings.asp
>resources
>|||Ezekil,
Have you looked into Best Practices Analyzer? It has just been released:
http://www.microsoft.com/downloads/...&displaylang=en
Tinyurl:
http://tinyurl.com/35cb4
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Ezekil wrote:

> Hello,
> I was wondering how i could optimize sql server for best practices.
> I have looked at the parameters, but what can i do with the memory resourc
es
> for example.
> Zeke
>

configuring sql server (best practice)

Hello,
I was wondering how i could optimize sql server for best practices.
I have looked at the parameters, but what can i do with the memory resources
for example.
ZekeIt depends on what version of SQL Server and what specific
issues you are seeing or are trying to address. For the most
part, you'd want to leave the server configuration settings
alone on SQL Server 7 and above. There are some situations
where modifying the default settings can help but these are
generally implemented to address specific issues and should
be thoroughly tested before implementing on a production
server. You can find some information on the server
configuration settings in the following articles:
HOW TO: Determine Proper SQL Server Configuration Settings
http://support.microsoft.com/?id=319942
Tips for Performance Tuning
SQL Server's Configuration Settings
http://www.sql-server-performance.com/sql_server_configuration_settings.asp
-Sue
On Tue, 1 Jun 2004 13:59:53 +0200, "Ezekiël"
<ezekiel@.lycos.nl> wrote:
>Hello,
>I was wondering how i could optimize sql server for best practices.
>I have looked at the parameters, but what can i do with the memory resources
>for example.
>Zeke
>|||Hi Sue,
I'm working with sql server 2000 and it runs with other large dbms's like
oracle. What i would like to achieve is finetune the server so that both
databases runs fully optimized.
Greetings,
Zeke
"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
news:4osob0t3i2t96uguuv72feb95e2l1n7k29@.4ax.com...
> It depends on what version of SQL Server and what specific
> issues you are seeing or are trying to address. For the most
> part, you'd want to leave the server configuration settings
> alone on SQL Server 7 and above. There are some situations
> where modifying the default settings can help but these are
> generally implemented to address specific issues and should
> be thoroughly tested before implementing on a production
> server. You can find some information on the server
> configuration settings in the following articles:
> HOW TO: Determine Proper SQL Server Configuration Settings
> http://support.microsoft.com/?id=319942
> Tips for Performance Tuning
> SQL Server's Configuration Settings
>
http://www.sql-server-performance.com/sql_server_configuration_settings.asp
> -Sue
> On Tue, 1 Jun 2004 13:59:53 +0200, "Ezekiël"
> <ezekiel@.lycos.nl> wrote:
> >Hello,
> >
> >I was wondering how i could optimize sql server for best practices.
> >
> >I have looked at the parameters, but what can i do with the memory
resources
> >for example.
> >
> >Zeke
> >
>|||You wouldn't necessarily use the server configurations to
fine tune things. The default settings work fine in most
cases, changing the settings just to try tweaking things
generally causes more problems. Server settings generally
isn't the first place to go in trying to tuning things up.
You'd want to look at the applications using the databases,
run profiler, pay to indexing/index usage, do overall
monitoring to check for potential server bottlenecks using
PerfMon, etc.
You may want to go through some of the articles at:
www.sql-server-performance.com
-Sue
On Tue, 1 Jun 2004 14:27:12 +0200, "Ezekiël"
<ezekiel@.lycos.nl> wrote:
>Hi Sue,
>I'm working with sql server 2000 and it runs with other large dbms's like
>oracle. What i would like to achieve is finetune the server so that both
>databases runs fully optimized.
>Greetings,
>Zeke
>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>news:4osob0t3i2t96uguuv72feb95e2l1n7k29@.4ax.com...
>> It depends on what version of SQL Server and what specific
>> issues you are seeing or are trying to address. For the most
>> part, you'd want to leave the server configuration settings
>> alone on SQL Server 7 and above. There are some situations
>> where modifying the default settings can help but these are
>> generally implemented to address specific issues and should
>> be thoroughly tested before implementing on a production
>> server. You can find some information on the server
>> configuration settings in the following articles:
>> HOW TO: Determine Proper SQL Server Configuration Settings
>> http://support.microsoft.com/?id=319942
>> Tips for Performance Tuning
>> SQL Server's Configuration Settings
>http://www.sql-server-performance.com/sql_server_configuration_settings.asp
>> -Sue
>> On Tue, 1 Jun 2004 13:59:53 +0200, "Ezekiël"
>> <ezekiel@.lycos.nl> wrote:
>> >Hello,
>> >
>> >I was wondering how i could optimize sql server for best practices.
>> >
>> >I have looked at the parameters, but what can i do with the memory
>resources
>> >for example.
>> >
>> >Zeke
>> >
>|||Ezekiël,
Have you looked into Best Practices Analyzer? It has just been released:
http://www.microsoft.com/downloads/details.aspx?displayla%20ng=en&familyid=B352EB1F-D3CA-44EE-893E-9E07339C1F22&displaylang=en
Tinyurl:
http://tinyurl.com/35cb4
--
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Ezekiël wrote:
> Hello,
> I was wondering how i could optimize sql server for best practices.
> I have looked at the parameters, but what can i do with the memory resources
> for example.
> Zeke
>