Tuesday, March 20, 2012
Another version of SQL Permission Question
table. I'm trying to use a view and limit access to the base table
You can "update" a view in certain restricted conditions (like there
can't be any joins in the view for instance - see BOL for the complete
list of restrictions). Alternately, you can write an INSTEAD OF trigger
on the view so that the trigger code handles the updating of the
underlying tables when a user runs an UPDATE statement against the
view. You can use this method when the basic updatable view
requirements cannot be met.
So if your view limits access to only certain parts of the base table,
you can allow people to only update those unrestricted parts of your
base table by just letting them update the view (or if it's a complex
view, write an INSTEAD OF UPDATE trigger for the view).
Cheers,
*mike hodgson* |/ database administrator/ | mallesons stephen jaques
*T* +61 (2) 9296 3668 |* F* +61 (2) 9296 3885 |* M* +61 (408) 675 907
*E* mailto:mike.hodgson@.mallesons.nospam.com |* W* http://www.mallesons.com
KathyV wrote:
>How do I restrict update access to a table based on criteria within the
>table. I'm trying to use a view and limit access to the base table
>
Another version of SQL Permission Question
table. I'm trying to use a view and limit access to the base tableYou can "update" a view in certain restricted conditions (like there
can't be any joins in the view for instance - see BOL for the complete
list of restrictions). Alternately, you can write an INSTEAD OF trigger
on the view so that the trigger code handles the updating of the
underlying tables when a user runs an UPDATE statement against the
view. You can use this method when the basic updatable view
requirements cannot be met.
So if your view limits access to only certain parts of the base table,
you can allow people to only update those unrestricted parts of your
base table by just letting them update the view (or if it's a complex
view, write an INSTEAD OF UPDATE trigger for the view).
Cheers,
*mike hodgson* |/ database administrator/ | mallesons stephen jaques
*T* +61 (2) 9296 3668 |* F* +61 (2) 9296 3885 |* M* +61 (408) 675 907
*E* mailto:mike.hodgson@.mallesons.nospam.com |* W* http://www.mallesons.com
KathyV wrote:
>How do I restrict update access to a table based on criteria within the
>table. I'm trying to use a view and limit access to the base table
>
Another version of SQL Permission Question
table. I'm trying to use a view and limit access to the base tableThis is a multi-part message in MIME format.
--000602000304030604090506
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
You can "update" a view in certain restricted conditions (like there
can't be any joins in the view for instance - see BOL for the complete
list of restrictions). Alternately, you can write an INSTEAD OF trigger
on the view so that the trigger code handles the updating of the
underlying tables when a user runs an UPDATE statement against the
view. You can use this method when the basic updatable view
requirements cannot be met.
So if your view limits access to only certain parts of the base table,
you can allow people to only update those unrestricted parts of your
base table by just letting them update the view (or if it's a complex
view, write an INSTEAD OF UPDATE trigger for the view).
Cheers,
--
*mike hodgson* |/ database administrator/ | mallesons stephen jaques
*T* +61 (2) 9296 3668 |* F* +61 (2) 9296 3885 |* M* +61 (408) 675 907
*E* mailto:mike.hodgson@.mallesons.nospam.com |* W* http://www.mallesons.com
KathyV wrote:
>How do I restrict update access to a table based on criteria within the
>table. I'm trying to use a view and limit access to the base table
>
--000602000304030604090506
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<tt>You can "update" a view in certain restricted conditions (like
there can't be any joins in the view for instance - see BOL for the
complete list of restrictions). Alternately, you can write an INSTEAD
OF trigger on the view so that the trigger code handles the updating of
the underlying tables when a user runs an UPDATE statement against the
view. You can use this method when the basic updatable view
requirements cannot be met.<br>
<br>
So if your view limits access to only certain parts of the base table,
you can allow people to only update those unrestricted parts of your
base table by just letting them update the view (or if it's a complex
view, write an INSTEAD OF UPDATE trigger for the view).<br>
<br>
Cheers,<br>
</tt>
<div class="moz-signature">
<title></title>
<meta http-equiv="Content-Type" content="text/html; ">
<p><span lang="en-au"><font face="Tahoma" size="2">--<br>
</font> </span><b><span lang="en-au"><font face="Tahoma" size="2">mike
hodgson</font></span></b><span lang="en-au"> <font face="Tahoma"
size="2">|</font><i><font face="Tahoma"> </font><font face="Tahoma"
size="2"> database administrator</font></i><font face="Tahoma" size="2">
| mallesons</font><font face="Tahoma"> </font><font face="Tahoma"
size="2">stephen</font><font face="Tahoma"> </font><font face="Tahoma"
size="2"> jaques</font><font face="Tahoma"><br>
</font><b><font face="Tahoma" size="2">T</font></b><font face="Tahoma"
size="2"> +61 (2) 9296 3668 |</font><b><font face="Tahoma"> </font><font
face="Tahoma" size="2"> F</font></b><font face="Tahoma" size="2"> +61
(2) 9296 3885 |</font><b><font face="Tahoma"> </font><font
face="Tahoma" size="2">M</font></b><font face="Tahoma" size="2"> +61
(408) 675 907</font><br>
<b><font face="Tahoma" size="2">E</font></b><font face="Tahoma" size="2">
<a href="http://links.10026.com/?link=mailto:mike.hodgson@.mallesons.nospam.com">
mailto:mike.hodgson@.mallesons.nospam.com</a> |</font><b><font
face="Tahoma"> </font><font face="Tahoma" size="2">W</font></b><font
face="Tahoma" size="2"> <a href="http://links.10026.com/?link=/">http://www.mallesons.com">
http://www.mallesons.com</a></font></span> </p>
</div>
<br>
<br>
KathyV wrote:
<blockquote cite="mid282DBEFC-5100-4936-A1EA-A11561D1DDD4@.microsoft.com"
type="cite">
<pre wrap="">How do I restrict update access to a table based on criteria within the
table. I'm trying to use a view and limit access to the base table
</pre>
</blockquote>
</body>
</html>
--000602000304030604090506--
Another user has edited the record
I think if it is possible, please show use your error ID, then we can
get more information about the error.
Best Wishes
Wei Ci Zhousql
Another user has edited the record
a ntext field to a text field using a script and it then placed the field at
the end of the field list. when I try to make a change to a record on the f
ront end I get an error tha
t another user has edited the record and must re-edit it. I can then make a
change to the record. If I do a refresh I then get the error again. I then m
oved the text field back into it's original position and the error went away
. Can anyone explain this?Hi Doug:
I think if it is possible, please show use your error ID, then we can
get more information about the error.
Best Wishes
Wei Ci Zhou
Monday, March 19, 2012
Another simple SQL query (MS Access)
Select avg(height)
from Materials
group by MCode
What is an outer query that would compare a single height against that groups average height and display the rows if the single height is greater?oh yeah, another thing. My outer query select can only have 2 columns (material, height)|||select material
, height
from Materials ZZ
where height
> ( select avg(height)
from Materials
where MCode = ZZ.MCode )
Sunday, March 11, 2012
Another Newbie Question (about queries)
using Access 2000 to access Sql Server, and there doesn't seem to be
anything for queries.
Does SQL Server have queries, or are they just done in the page code (to
access data on a website)?
I also have a trial version of Enterprise Manager, but I can't figure out
how to connect. If that would show queries.
Thanks
JAQueries would be either Views or Stored Procedures in your SQL database.
Normally Views are for select statement and the rest you would use Stored
Procedures.
When you open SQL Enterprise Manager you need to expand on the left
pane until you open your local server, databases and access your database.
SQL Query Analyzer is where you can execute SQL code for example
SELECT statements and see the result there.
> I'm moving things from Access to SQL Server. What do I do with queries?
I'm
> using Access 2000 to access Sql Server, and there doesn't seem to be
> anything for queries.
> Does SQL Server have queries, or are they just done in the page code (to
> access data on a website)?
> I also have a trial version of Enterprise Manager, but I can't figure out
> how to connect. If that would show queries.
Thursday, March 8, 2012
Another issue with Linked Server
I read this article. Maybe Im just plain dumb, but I get this error when I
try to connect to a Linked Access database via sql server. Now the article
states to login using the SQL Server start up account. Im assuming that this
account is the one thats stated in the MSSQLSERVER service under the LogOn
tab.
Well, if it is, then the logon account is "system" in my case. And I cant
physically login to the computer as system now can I?
How difficult can it be to create a linked server to a access database thats
password protected?
Girish
Hi Girish,
From your descriptions, I understood you would like to link an secured
Access mdb file as Linked Server in SQL Server. Have I understood you? If
there is anything misunderstood, please feel free to let me know.
First of all, I would like to answer the question what "system" is. If you
see "System" is selected in LogOn tab of MSSQLServer service, it means
MSSQLServer is started by the account you start Windows. For example,
assuming you are login as "Girish" in you Windows 2003 (or other Windows
Operation System) and "Girish" is in Administartor Group of Windows 2003,
your SQL Server is started as "Girish".
Secondly, I am not sure you encounter exactly the scenario KB:814398
described. Based on my scope, I think the following documents will be
helpful for you.
HOWTO: Use a SQL Server 7.0 Distributed Query with a Linked Server to
Secured Access Databases
http://support.microsoft.com/default...;en-us;Q246255
You receive a "Could not find installable ISAM" error message or some file
types are missing when you import files, export files, or link files in
Access 2000
http://support.microsoft.com/default...;EN-US;Q209805
Thank you for your patience and cooperation. If you have any questions or
concerns, don't hesitate to let me know. We are here to be of assistance!
Sincerely yours,
Mingqing Cheng
Microsoft Developer Community Support
Introduction to Yukon! - http://www.microsoft.com/sql/yukon
This posting is provided "as is" with no warranties and confers no rights.
Please reply to newsgroups only, many thanks!
|||Thanks for your reply.
What does SQL Server use to logon to if I do not login interactively?
Its a service so must still run all the time right?
Girish
""Mingqing Cheng [MSFT]"" <v-mingqc@.online.microsoft.com> wrote in message
news:VbRBzDZhEHA.2632@.cpmsftngxa10.phx.gbl...
> Hi Girish,
> From your descriptions, I understood you would like to link an secured
> Access mdb file as Linked Server in SQL Server. Have I understood you? If
> there is anything misunderstood, please feel free to let me know.
> First of all, I would like to answer the question what "system" is. If you
> see "System" is selected in LogOn tab of MSSQLServer service, it means
> MSSQLServer is started by the account you start Windows. For example,
> assuming you are login as "Girish" in you Windows 2003 (or other Windows
> Operation System) and "Girish" is in Administartor Group of Windows 2003,
> your SQL Server is started as "Girish".
> Secondly, I am not sure you encounter exactly the scenario KB:814398
> described. Based on my scope, I think the following documents will be
> helpful for you.
> HOWTO: Use a SQL Server 7.0 Distributed Query with a Linked Server to
> Secured Access Databases
> http://support.microsoft.com/default...;en-us;Q246255
> You receive a "Could not find installable ISAM" error message or some file
> types are missing when you import files, export files, or link files in
> Access 2000
> http://support.microsoft.com/default...;EN-US;Q209805
> Thank you for your patience and cooperation. If you have any questions or
> concerns, don't hesitate to let me know. We are here to be of assistance!
>
> Sincerely yours,
> Mingqing Cheng
> Microsoft Developer Community Support
> Introduction to Yukon! - http://www.microsoft.com/sql/yukon
> This posting is provided "as is" with no warranties and confers no rights.
> Please reply to newsgroups only, many thanks!
>
|||Hi Girish,
MSSQLServer is run as a background services, you could also make it started
automatically or manually. In General Tab of MSSQLServer, you could change
"Startup type" between Automatic, Manual and Disable, while you could click
the button under Serivce status to make it start, stop and pause (resume).
If you choose Manual, MSSQLServer will be started only after you click the
"start" button, if Automatic is choosen, MSSQLServer will be started every
time Windows started up.
Additional, we could also use DOS-prompt to start/stop a service like
MSSQLServer. For example, "net start mssqlserver" or "net stop mssqlserver"
Thank you for your patience and cooperation. If you have any questions or
concerns, don't hesitate to let me know. We are here to be of assistance!
Sincerely yours,
Mingqing Cheng
Microsoft Developer Community Support
Introduction to Yukon! - http://www.microsoft.com/sql/yukon
This posting is provided "as is" with no warranties and confers no rights.
Please reply to newsgroups only, many thanks!
|||My mistake... I didnt mean "how" does it start up...
I meant.. when it starts up automatically, what account does it use to login
if I choose "system" and Im NOT interactively logged into the computer.
Im getting confused because my MSSQLServer does run in the background... and
Ive choosen it to login as system... and you said in an earlier email that
system means; if I LOGIN as Girish, then system = Girish. If I login as XYZ,
then system = XYZ.
Now my Q is; if I DONT login at all and MSSQLServer is automatic and a
background service and is set to login as system; then system = ?
Girish
""Mingqing Cheng [MSFT]"" <v-mingqc@.online.microsoft.com> wrote in message
news:cagdUwchEHA.2632@.cpmsftngxa10.phx.gbl...
> Hi Girish,
> MSSQLServer is run as a background services, you could also make it
started
> automatically or manually. In General Tab of MSSQLServer, you could change
> "Startup type" between Automatic, Manual and Disable, while you could
click
> the button under Serivce status to make it start, stop and pause (resume).
> If you choose Manual, MSSQLServer will be started only after you click the
> "start" button, if Automatic is choosen, MSSQLServer will be started every
> time Windows started up.
> Additional, we could also use DOS-prompt to start/stop a service like
> MSSQLServer. For example, "net start mssqlserver" or "net stop
mssqlserver"
> Thank you for your patience and cooperation. If you have any questions or
> concerns, don't hesitate to let me know. We are here to be of assistance!
>
> Sincerely yours,
> Mingqing Cheng
> Microsoft Developer Community Support
> Introduction to Yukon! - http://www.microsoft.com/sql/yukon
> This posting is provided "as is" with no warranties and confers no rights.
> Please reply to newsgroups only, many thanks!
>
|||Hi Girish,
I feel sorry for my poor understanding, thanks for your kindest
explaination.
If MSSQLServer is selected to be started as Local System account, it will
be started as NT AUTHORITH\SYSTEM. This account is internal and invisable
no matter what username you choosed to login.
Here are some descriptions fro BOL, which I think will be helpful
explaining it
The local system account does not require a password, does not have network
access rights in Windows NT 4.0, and may restrict your SQL Server
installation from interacting with other servers.
Note In Windows 2000, the local system account does allow network access.
Thank you for your patience and cooperation. If you have any questions or
concerns, don't hesitate to let me know. We are here to be of assistance!
Sincerely yours,
Mingqing Cheng
Microsoft Developer Community Support
Introduction to Yukon! - http://www.microsoft.com/sql/yukon
This posting is provided "as is" with no warranties and confers no rights.
Please reply to newsgroups only, many thanks!
|||Hi Girish,
I am just checking on your progress regarding the information that was sent
you! If you encounter any difficulty, please do not hesitate to let me
know. Please post here and let me know the status of your issue. Without
your further information, it's very hard for me to continue with the
troubleshooting.
Looking forward to hearing from you soon. Thank you for your patience and
cooperation.
Sincerely yours,
Mingqing Cheng
Microsoft Developer Community Support
Introduction to Yukon! - http://www.microsoft.com/sql/yukon
This posting is provided "as is" with no warranties and confers no rights.
Please reply to newsgroups only, many thanks!
Another Enterprise Manager Question
developing SQL Dbs rather than Access mdb one, he discovered and downloaded
from the MS Site a util called client tools which turned out to be Enterprise
Manager.
Is this no longer available for download? If so can anyone point me to it?
I'm about to try out the web based item that I've just downloaded but I'm so
used to EM I'd prefer it if possible.
Regards,
Mr. Smith
The new SQL 2005 Express has some tools like that available. For MSDE 2K,
you'd have to either use EM off a SQL 2K CD, locate a third-party app, or
use an ASP/ASP.NET version.
"Mr. Smith" <MrSmith@.discussions.microsoft.com> wrote in message
news:8AAA465B-8043-4924-A13F-728968BDB246@.microsoft.com...
> I used to do all my MSDE dev in MS Acc2K. As I was converting a friend to
> developing SQL Dbs rather than Access mdb one, he discovered and
> downloaded
> from the MS Site a util called client tools which turned out to be
> Enterprise
> Manager.
> Is this no longer available for download? If so can anyone point me to
> it?
> I'm about to try out the web based item that I've just downloaded but I'm
> so
> used to EM I'd prefer it if possible.
> Regards,
> Mr. Smith
|||Thanks for that. I had a feeling. The Web based offering from MS is
useless, Acc2K has far better tools to admin MSDE than that. I've gotten
hold of EMS MS SQL Lite which is OK in the interim but I'm gonna have to get
hold on an SQL2K disc
Regs,
Mr. Smith
"Michael C#" wrote:
> The new SQL 2005 Express has some tools like that available. For MSDE 2K,
> you'd have to either use EM off a SQL 2K CD, locate a third-party app, or
> use an ASP/ASP.NET version.
> "Mr. Smith" <MrSmith@.discussions.microsoft.com> wrote in message
> news:8AAA465B-8043-4924-A13F-728968BDB246@.microsoft.com...
>
>
Wednesday, March 7, 2012
Anonymous access...
(IUSR_MACHINE) on the virtual site ReportServer.
On my report, i allow IUSR_MACHINE the Browser Role.
Administrators have all Role on my report.
When i want to acces to the admin page (http://localhost/Reports), I have a
window authentification (like I want), I put my Admin login and pass but I
have not the Administrators rigth. I can only see what the IUSR_MACHINE as
right.
When I disable anonymous acces on ReportServer, I can see everything.
Can you help me 'Karine,
The Report Server itself does not authenticate the user. Instead, it obtains
the user identity from IIS. When Anonymous is enabled, all requests to the
Report Server will come in under the IUSR_<computer name> account or
whatever account you use for Anonymous access. Therefore, the Report Server
cannot differentiate the users.
Since you will need to manage the Report Server you will need to elevate
IUSR permissions in RS or assign it to a Windows group which has management
rights. Both approaches are equally bad from security standpoint and a sure
invitation for a security hack. Besides, Anonymous access is not officially
supported.
--
Hope this helps.
---
Teo Lachev, MVP [SQL Server], MCSD, MCT
Author: "Microsoft Reporting Services in Action"
Publisher website: http://www.manning.com/lachev
Buy it from Amazon.com: http://shrinkster.com/eq
Home page and blog: http://www.prologika.com/
---
"Karine" <Karine@.discussions.microsoft.com> wrote in message
news:49C55288-1B45-44BB-870D-CBDF84420D72@.microsoft.com...
> I want my report be accessible for everybody. So i enable anonymous access
> (IUSR_MACHINE) on the virtual site ReportServer.
> On my report, i allow IUSR_MACHINE the Browser Role.
> Administrators have all Role on my report.
> When i want to acces to the admin page (http://localhost/Reports), I have
a
> window authentification (like I want), I put my Admin login and pass but I
> have not the Administrators rigth. I can only see what the IUSR_MACHINE as
> right.
> When I disable anonymous acces on ReportServer, I can see everything.
> Can you help me '
>
>
>
Saturday, February 25, 2012
Anonymous access in Reporting Services
site and I am a little confused about the best way to allow anonymous
access. I would like to allow annonymous users to run reports but not set
properties, create subscriptions, or upload reports. I have seen some posts
that indicate that this is difficult to do correctly and that I should build
a custom authentication module. What is the state of the art here? Does
using SP1 or waiting for SP2 help?
Thanks,
SteveYou can assign a user to the anonymous account. Give this user just enough
rights to do what you want.
--
| From: "Stephen Walch" <swalch@.online.nospam>
| Subject: Anonymous access in Reporting Services
| Date: Mon, 14 Feb 2005 11:35:35 -0500
| Lines: 13
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| X-RFC2646: Format=Flowed; Original
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| Message-ID: <OoCR3MrEFHA.2568@.TK2MSFTNGP10.phx.gbl>
| Newsgroups: microsoft.public.sqlserver.reportingsvcs
| NNTP-Posting-Host: 69-164-66-20.lndnnh.adelphia.net 69.164.66.20
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.reportingsvcs:35873
| X-Tomcat-NG: microsoft.public.sqlserver.reportingsvcs
|
| Trying to set up a Reporting Services / Windows Sharepoint services demo
| site and I am a little confused about the best way to allow anonymous
| access. I would like to allow annonymous users to run reports but not
set
| properties, create subscriptions, or upload reports. I have seen some
posts
| that indicate that this is difficult to do correctly and that I should
build
| a custom authentication module. What is the state of the art here? Does
| using SP1 or waiting for SP2 help?
|
| Thanks,
|
| Steve
|
|
|
Anonymous Access from Pivot Table to OLAP 2005
My asp-net web application connect to Analysis Services 2005 through Pivot Table client.
To use anonymous access with AS2000 i used to add this property to the connection string of the pivot: "SSPI=anonymous".
Which property give me the same thing with AS2005?
Thanks!
Hi,
The SSPI connection property is still there, so it should work the same. Are you getting an error?
David Botzenhart
|||Hey David - good to hear from you !
Yes, you could still use SSPI=anonymous, but I really recommend in AS2005 to use standard OLEDB property for this purpose, i.e.
Protection Level=none
It has slightly better (more standard) behavior.
Mosha (http://www.mosha.com/msolap )
|||Thanks, it's working.
But, if i set "Impersonation Level" property to Anonymous? Is this the same of SSPI=anonymous?
Anonymous access
Reports, but I've seen suggestions for work arounds. What are the best
options for allowing Users access to Reports Services from a different
domain, apart from requiring them to enter user credentials every time
they point their browser at the ReportsServer. There seems to be
suggestions that with some tweaking Anonymous users can run reports.
I'm invoking reports from a C# desktop app by building the url - is
there some way to pass the credentials in the url? I know how to
generate reports entirely from C# code(and pass credentials), but that
loses the interactive functionality of the browser interface...
brian smithThis doesn't completely answer your question but it does address "anonymous
access"
http://devguy.com/bb/viewtopic.php?p=1773
> I'm invoking reports from a C# desktop app by building the url - is there
> some way to pass the credentials in the url?
Not trivially.
"Brian Smith" <bsmith@.NO.SPAM.schemiotics.co.uk> wrote in message
news:O15zpaO8FHA.3636@.TK2MSFTNGP09.phx.gbl...
> Officially the line seems to be that only accredited users can access
> Reports, but I've seen suggestions for work arounds. What are the best
> options for allowing Users access to Reports Services from a different
> domain, apart from requiring them to enter user credentials every time
> they point their browser at the ReportsServer. There seems to be
> suggestions that with some tweaking Anonymous users can run reports.
> I'm invoking reports from a C# desktop app by building the url - is there
> some way to pass the credentials in the url? I know how to generate
> reports entirely from C# code(and pass credentials), but that loses the
> interactive functionality of the browser interface...
> brian smith
Sunday, February 12, 2012
Analysis Services Data Access Auditing with msmdqlog.mdb
tracking of the queries ran against the data warehouse.
I’ve gone through several articles about the MS Access database msmdqlog.m
db
and I’m just looking for ways to implement the auditing and I have a few
questions.
I guess the easy thing is to generate reports from the Access database using
Access itself to help me figure out if who is looking at the data, how long
it takes the queries to run… But my real question is are there better thin
gs
to do with it.
I read that it might be best to migrate the logging away from Access and
into SQL Server directly but following that thought it lead me to some horro
r
stories about the many registry entries that need to be modified and the
pains encountered when updating service packs and the like. Seemed that
Analysis Services was tied in many ways to the msmdqlog.mdb for this type of
auditing.
I was also considering the possibility of creating a cube in the data
warehouse based on the QueryLog table from the msmdqlog.mdb
What are some of the prevailing ways to report on usage statistics from
Analysis Services?
Thanks for any help.
LarryWhat we do is import the logs from the Access database into SQL Server
on a regular basis with a DTS.
Then report off of the SQL Server.
Paul|||Larry,
If you have the space I would move the log, it will speed things up a little
and give you better access to the data you want. I've never heard of any
horror stories, I sure didn't have any problems.
Here are 2 links to help you get started -
http://www.sqlservercentral.com/col...ce
s.asp
[url]http://www.sqlservercentral.com/columnists/rbalukonis/analysisaboutdimensions.asp[
/url]
The first is a basic intro to building a basic cube. If you want you could
always adapt it to suit the things you want to analyse (eg. Usage by cube by
user by hour etc.)
I have a cube with Users; Cubes; Time (month day hour) and hours dims, my
measures are usage (no. of times a user appears in the log) and query
duration.
Realistically you can only get a feel good factor with the data, why?
because usually you only log every 10 queries so if user a makes 9 queries
and user b makes the 10th user b looks good. Also depending on the front end
each time a user does a new query the client cache may answer the query and
therefore not show on the log. There are quite a few things that mean you
don't gat an accurate picture of who’s doing what, but the log is a fair
yardstick.
I use the log as a gauge on cube utilization/ importance and user usage,
preheating the cache at peak periods and reporting to managers. Personally
query duration for me is not that important, even though I know it should be
.
Data is also available to analyse by dimension, it is fairly hard to
translate and prone to problems when dimensions are radically changed or
added. If it was reliable it would prove very beneficial. Have a look you ma
y
find it of great benefit.
Hope this helps you start out.|||Thanks for the help but I ran into a problem.
I read and followed the article “Analysis About Analysis Services” I
m
having problems
though with authentication. Is there any type of authentication tied to the
AS and the Access database?
I imported the msmdqlog.mdb into a new SQL Server 2000 database (there were
about 30 records).
I changed the registry entries QueryLogConnectionString and
RemoteQueryLogConnectionString to use the SQLLOLBE data provider, Initial
catalog and server.
I created the history table and then decided to test it out by querying the
FoodMart cube with Excel and the MDX Sample Application. No results were
logged. I returned to the msmdqlog.mdb file and nothing was added there
which I was glad to see. But I can’t get new entries added to the QueryLo
g
table in SQL. I figured something is wrong with the connection string.
I went to Analysis Services server properties and clicked Clear Log, I
checked the QueryLog table in the records I had brought over from the Access
were cleared from the SQL table.
I went to Event view and found a message that read:
Event Type: Error
Event Source: MSSQLServerOLAPService
Event Category: Server
Event ID: 124
Date: 11/30/2004
Time: 12:03:32 PM
User: N/A
Computer: ComputerName
Description:
Relational data provider reported error: [Cannot open database requested
in
login 'OLAP_Audit_Tracker'. Login fails.;42000].
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
I’ve changed SQL Security and made all the appropriate changes but still g
et
stopped at the authentication issue.
Any thoughts?
Thanks
Larry
"HWUK" wrote:
> Larry,
> If you have the space I would move the log, it will speed things up a litt
le
> and give you better access to the data you want. I've never heard of any
> horror stories, I sure didn't have any problems.
> Here are 2 links to help you get started -
> http://www.sqlservercentral.com/col...
ces.asp
> http://www.sqlservercentral.com/col...ons.as
p
> The first is a basic intro to building a basic cube. If you want you could
> always adapt it to suit the things you want to analyse (eg. Usage by cube
by
> user by hour etc.)
> I have a cube with Users; Cubes; Time (month day hour) and hours dims, my
> measures are usage (no. of times a user appears in the log) and query
> duration.
> Realistically you can only get a feel good factor with the data, why?
> because usually you only log every 10 queries so if user a makes 9 queries
> and user b makes the 10th user b looks good. Also depending on the front e
nd
> each time a user does a new query the client cache may answer the query an
d
> therefore not show on the log. There are quite a few things that mean you
> don't gat an accurate picture of who’s doing what, but the log is a fair
> yardstick.
> I use the log as a gauge on cube utilization/ importance and user usage,
> preheating the cache at peak periods and reporting to managers. Personally
> query duration for me is not that important, even though I know it should
be.
> Data is also available to analyse by dimension, it is fairly hard to
> translate and prone to problems when dimensions are radically changed or
> added. If it was reliable it would prove very beneficial. Have a look you
may
> find it of great benefit.
> Hope this helps you start out.
>|||First place to look is the Logging tab in properties of your analysis
services. Where it says "write to log once per ? queries" is how many
queries have to be sent to the server before a log is entered. If the value
is high your tests may not have made enough queries. The default should be
10. Also remember that pivot table services uses intelligent caching,
therefore, doing ten queries on a pivot table men not generate ten requests
to the server and the client computer may be able to deduce the query from
cache. To do a test you could reduce this to 1 and return it to a more
suitable number later.
If you feel everything is OK with the logging then look at the
authentication. Does the user have adequate permissions, what is the users
default database?, is the user a member of the analysis services
administration, is the Analysis Server Service a domain account etc.
check out - http://webservertalk.com/t943017.html and see if this discussion
is
simmilar to your case. Also see http://support.microsoft.com/?id=224973
Have a look at those to begin with, if you still have problems we'll I may
need more information.
Analysis Services Data Access Auditing with msmdqlog.mdb
tracking of the queries ran against the data warehouse.
I’ve gone through several articles about the MS Access database msmdqlog.mdb
and I’m just looking for ways to implement the auditing and I have a few
questions.
I guess the easy thing is to generate reports from the Access database using
Access itself to help me figure out if who is looking at the data, how long
it takes the queries to run… But my real question is are there better things
to do with it.
I read that it might be best to migrate the logging away from Access and
into SQL Server directly but following that thought it lead me to some horror
stories about the many registry entries that need to be modified and the
pains encountered when updating service packs and the like. Seemed that
Analysis Services was tied in many ways to the msmdqlog.mdb for this type of
auditing.
I was also considering the possibility of creating a cube in the data
warehouse based on the QueryLog table from the msmdqlog.mdb
What are some of the prevailing ways to report on usage statistics from
Analysis Services?
Thanks for any help.
Larry
What we do is import the logs from the Access database into SQL Server
on a regular basis with a DTS.
Then report off of the SQL Server.
Paul
|||Larry,
If you have the space I would move the log, it will speed things up a little
and give you better access to the data you want. I've never heard of any
horror stories, I sure didn't have any problems.
Here are 2 links to help you get started -
http://www.sqlservercentral.com/colu...isservices.asp
http://www.sqlservercentral.com/colu...dimensions.asp
The first is a basic intro to building a basic cube. If you want you could
always adapt it to suit the things you want to analyse (eg. Usage by cube by
user by hour etc.)
I have a cube with Users; Cubes; Time (month day hour) and hours dims, my
measures are usage (no. of times a user appears in the log) and query
duration.
Realistically you can only get a feel good factor with the data, why?
because usually you only log every 10 queries so if user a makes 9 queries
and user b makes the 10th user b looks good. Also depending on the front end
each time a user does a new query the client cache may answer the query and
therefore not show on the log. There are quite a few things that mean you
don't gat an accurate picture of who’s doing what, but the log is a fair
yardstick.
I use the log as a gauge on cube utilization/ importance and user usage,
preheating the cache at peak periods and reporting to managers. Personally
query duration for me is not that important, even though I know it should be.
Data is also available to analyse by dimension, it is fairly hard to
translate and prone to problems when dimensions are radically changed or
added. If it was reliable it would prove very beneficial. Have a look you may
find it of great benefit.
Hope this helps you start out.
|||Thanks for the help but I ran into a problem.
I read and followed the article “Analysis About Analysis Services” I’m
having problems
though with authentication. Is there any type of authentication tied to the
AS and the Access database?
I imported the msmdqlog.mdb into a new SQL Server 2000 database (there were
about 30 records).
I changed the registry entries QueryLogConnectionString and
RemoteQueryLogConnectionString to use the SQLLOLBE data provider, Initial
catalog and server.
I created the history table and then decided to test it out by querying the
FoodMart cube with Excel and the MDX Sample Application. No results were
logged. I returned to the msmdqlog.mdb file and nothing was added there
which I was glad to see. But I can’t get new entries added to the QueryLog
table in SQL. I figured something is wrong with the connection string.
I went to Analysis Services server properties and clicked Clear Log, I
checked the QueryLog table in the records I had brought over from the Access
were cleared from the SQL table.
I went to Event view and found a message that read:
Event Type:Error
Event Source:MSSQLServerOLAPService
Event Category:Server
Event ID:124
Date:11/30/2004
Time:12:03:32 PM
User:N/A
Computer:ComputerName
Description:
Relational data provider reported error: [Cannot open database requested in
login 'OLAP_Audit_Tracker'. Login fails.;42000].
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
I’ve changed SQL Security and made all the appropriate changes but still get
stopped at the authentication issue.
Any thoughts?
Thanks
Larry
"HWUK" wrote:
> Larry,
> If you have the space I would move the log, it will speed things up a little
> and give you better access to the data you want. I've never heard of any
> horror stories, I sure didn't have any problems.
> Here are 2 links to help you get started -
> http://www.sqlservercentral.com/colu...isservices.asp
> http://www.sqlservercentral.com/colu...dimensions.asp
> The first is a basic intro to building a basic cube. If you want you could
> always adapt it to suit the things you want to analyse (eg. Usage by cube by
> user by hour etc.)
> I have a cube with Users; Cubes; Time (month day hour) and hours dims, my
> measures are usage (no. of times a user appears in the log) and query
> duration.
> Realistically you can only get a feel good factor with the data, why?
> because usually you only log every 10 queries so if user a makes 9 queries
> and user b makes the 10th user b looks good. Also depending on the front end
> each time a user does a new query the client cache may answer the query and
> therefore not show on the log. There are quite a few things that mean you
> don't gat an accurate picture of who’s doing what, but the log is a fair
> yardstick.
> I use the log as a gauge on cube utilization/ importance and user usage,
> preheating the cache at peak periods and reporting to managers. Personally
> query duration for me is not that important, even though I know it should be.
> Data is also available to analyse by dimension, it is fairly hard to
> translate and prone to problems when dimensions are radically changed or
> added. If it was reliable it would prove very beneficial. Have a look you may
> find it of great benefit.
> Hope this helps you start out.
>
|||First place to look is the Logging tab in properties of your analysis
services. Where it says "write to log once per ? queries" is how many
queries have to be sent to the server before a log is entered. If the value
is high your tests may not have made enough queries. The default should be
10. Also remember that pivot table services uses intelligent caching,
therefore, doing ten queries on a pivot table men not generate ten requests
to the server and the client computer may be able to deduce the query from
cache. To do a test you could reduce this to 1 and return it to a more
suitable number later.
If you feel everything is OK with the logging then look at the
authentication. Does the user have adequate permissions, what is the users
default database?, is the user a member of the analysis services
administration, is the Analysis Server Service a domain account etc.
check out - http://webservertalk.com/t943017.html and see if this discussion is
simmilar to your case. Also see http://support.microsoft.com/?id=224973
Have a look at those to begin with, if you still have problems we'll I may
need more information.
Thursday, February 9, 2012
Analysis Services Admin access to one database only
On a given Analysis Server the machine level OLAP Administrators group controls which users have admin access to AS Databases and Cubes on that machine. From everything I have read, if you are in the OLAP Administrators group you have full access to administer ALL the databases and cubes.
We have a need to create a OLAP database and grant a few users (a role) full admin access to create and maintain datasouces and cubeswithin that database but NOT allow them admin access to the other existing databases and cubes on the server. This seems like such a common requirement. Has anyones else encountered and resolved this issue.
Thanks,
Tony
How about add the users to 'dbo' role in that OLAP database?|||The concept of "dbo role" does not exist for AS databasesAnalysis Services Access Database
Hello,
I am trying to generate a cube in SSAS 2005 with an Access database as the data source. I can create the Data Source and successfully test the connection. Here is my connection string:
Provider=Microsoft.Jet.OLEDB.4.0;Data Source=E:\DB\LSAM.mdb
I can also successfully create my Data Source View and I can return data by right clicking on any of my table objects and selecting 'Explore Data'
However, when I try to generate my cube, I receive the following error message:
OLE DB error: OLE DB or ODBC error: 'E:\DB\LSAM.mdb' is not a valid path. Make sure that the path name is spelled correctly and that you are connected to the server on which the file resides.; 3044.
Any assistance would be GREATLY appreciated.
Thank You,
Joshua Shull.
Try and import your Access database into SQL Server and build your cube from there.
Later you can try and change datasource to point to the access file and process it .
Edward.
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Analysis Services 2005: "OLE DB error: OLE DB or ODBC error : Access denied" using an
Hi,
The source DB is in Oracle 9.i . I use the native pilot from Oracle. The connection test is OK. I can also explore the data in the Data Source View whithout any problem. But when I try to process the dimension, I get the error message "OLE DB error: OLE DB or ODBC error : Access denied.." . I tried with the Native pilot from MS for Oracle but got the same result.
Could anyone help me ?
Rg.
In your datasource try to use Microsoft OLEDB Provider for Oracle or .NET Oracle Client Data Provider.
Edward.
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Hi,
Edward, thanks for the fast answer.
with the MS provider and had the error :|||
During deployment of dimensions ( and cubes as well ) Analysis Server tries to process these dimensions. And for that it need to read data from Oracle.
The problem looks like related to the configuration of Oracle client. Also a good idea to check access permissions to Oracle database. See also if changing service account for the Analysis Server solves your problem.
Edward.
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Hi Edwards,
I changed the service account in the "SQL server configuration manager", for Analysis services and now it works fine :D
Thanks for your help,
Sbastien
Analysis Services 2005: "OLE DB error: OLE DB or ODBC error : Access denied" using
Hi,
The source DB is in Oracle 9.i . I use the native pilot from Oracle. The connection test is OK. I can also explore the data in the Data Source View whithout any problem. But when I try to process the dimension, I get the error message "OLE DB error: OLE DB or ODBC error : Access denied.." . I tried with the Native pilot from MS for Oracle but got the same result.
Could anyone help me ?
Rg.
In your datasource try to use Microsoft OLEDB Provider for Oracle or .NET Oracle Client Data Provider.
Edward.
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Hi,
Edward, thanks for the fast answer.
with the MS provider and had the error :|||
During deployment of dimensions ( and cubes as well ) Analysis Server tries to process these dimensions. And for that it need to read data from Oracle.
The problem looks like related to the configuration of Oracle client. Also a good idea to check access permissions to Oracle database. See also if changing service account for the Analysis Server solves your problem.
Edward.
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Hi Edwards,
I changed the service account in the "SQL server configuration manager", for Analysis services and now it works fine :D
Thanks for your help,
Sbastien
Analysis Services 2005: "OLE DB error: OLE DB or ODBC error : Access denied" using
Hi,
The source DB is in Oracle 9.i . I use the native pilot from Oracle. The connection test is OK. I can also explore the data in the Data Source View whithout any problem. But when I try to process the dimension, I get the error message "OLE DB error: OLE DB or ODBC error : Access denied.." . I tried with the Native pilot from MS for Oracle but got the same result.
Could anyone help me ?
Rg.
In your datasource try to use Microsoft OLEDB Provider for Oracle or .NET Oracle Client Data Provider.
Edward.
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Hi,
Edward, thanks for the fast answer.
with the MS provider and had the error :|||
During deployment of dimensions ( and cubes as well ) Analysis Server tries to process these dimensions. And for that it need to read data from Oracle.
The problem looks like related to the configuration of Oracle client. Also a good idea to check access permissions to Oracle database. See also if changing service account for the Analysis Server solves your problem.
Edward.
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Hi Edwards,
I changed the service account in the "SQL server configuration manager", for Analysis services and now it works fine :D
Thanks for your help,
Sbastien