August 7, 2010 at 1:12 am
Hi
I am having problem in my application when I activate application role.
the Alter login doesn't work.I 've granted all the available permissions to my application role ,now user can do anything in database when he activates application role but still Alter login doesn't work.
even I gave full permission to guest account to master database but
still alter login doesn't work.
I want to give an option to user to change his password?
any suggestion?
thanks
August 7, 2010 at 11:00 am
Sorry. Did not get the question. You want the Application Role to have ALTER LOGIN privileges?
Pradeep Adiga
Blog: sqldbadiaries.com
Twitter: @pradeepadiga
August 7, 2010 at 9:49 pm
yes,exactly:-)
August 8, 2010 at 12:24 am
You need to GRANT ALTER ANY LOGIN permissions to that account. Please refer MSDN.
Pradeep Adiga
Blog: sqldbadiaries.com
Twitter: @pradeepadiga
August 8, 2010 at 12:41 am
such a thing doesn't exist.I mean 'Alter Any Login' permission,we have 'Alter any user ' permission that I 've already granted it.As you may know user is different from login.
I granted all available permissions to my application role but I think there is something other must be done.you can easily try it,
define an Application role and open a query analizer write a Alter login in query analyzer and run it,it works fine but add sp_setApprole at the same query analyzer and select it and run it alone,at this step app role is activated for that query analyzer which is open,now run the alter login at same query analyzer,now you recive an error indicating that login doesnot exist or you don't have permission.
August 8, 2010 at 2:16 am
a.ghasemi (8/8/2010)
such a thing doesn't exist.I mean 'Alter Any Login' permission,we have 'Alter any user ' permission that I 've already granted it.
Please click on the hyperlink and read through which I had posted earlier, to confirm if such a thing exists or not. However here is the URL one more time.
http://technet.microsoft.com/en-us/library/ms186717.aspx
Pradeep Adiga
Blog: sqldbadiaries.com
Twitter: @pradeepadiga
August 8, 2010 at 2:41 am
it is wrong ,we are talking about application role,the application role is defined in special data base,it is not a sql server login,the permission can be set for application role only in database scope when you right click on data base in permission tab,there it is ,you see application role for granting permissions,when you define an pllication role you cannot see it in the security node of SQL server,you can see it in the database security node.
you can try this by defining an application role,define an application role and see that you don't see it in the security node of server,
got it?
August 8, 2010 at 2:50 am
a.ghasemi (8/7/2010)
yes,exactly:-)
Earlier it was confirmed that the requirement was to grant the Application Role the ALTER LOGIN privileges. ALTER LOGIN privilege is an instance level privilege. Hence the answer.
Pradeep Adiga
Blog: sqldbadiaries.com
Twitter: @pradeepadiga
August 8, 2010 at 3:44 am
Alter login privilage exist only for login,application role does not have any logins,it 's only a data base role,
for god sake check it to see it.
August 30, 2010 at 1:31 am
Hey,
I am facing serious issue with application roles. I created one role and den when i used the same role in an application the login failed. I tried all ways but no luck.
can anyone please help me ???
Thanks,
Priya
August 30, 2010 at 1:58 am
do you call sp_setAppRole to activate your application role?
Viewing 11 posts - 1 through 10 (of 10 total)
You must be logged in to reply to this topic. Login to reply