question regarding permissions to a user

  • Hello,

    i have a question regarding assigning permission to the user..i did try searching the forum but didnt find anything..i know this place can definitely help me...recently i received an issue it is mentioned below

    issue:

    user xyz says she is not able to connect to the database..she said she was able to connect it before...user said xyz is only a read only account and the error msg she got was:Connectiond timed out

    this is wat i did:

    i first went and checked the login ..right clicked on the props and selected the database which she was trying to login..then i saw the list of all db roles assigned to that db..i see two user defined db roles and have no idea wat these two db roles do...and these two db roles are selected..then i went under the db and right click on the user xyz properities..and see that the two user defined roles are selected...i m confused how to deal with such kind of issue..

    i request to suggest me from where should i start debugging this pbm and is der anyway to find out wat are the permissions behind a user defined db role...

    thanks

  • Hi,

    Although it could be, this is not necessarily a permission issue. Can you provide us with some details on

    - how xyz is connecting (which tool or what kind of appliction)

    - is xyz connecting straight to the SQL Server or via an application layer

    - SQL Server or Windows Authentication

    - the full error message

    - can xyz connect from another client

    Thx!

    /Elisabeth

    elisabeth@sqlserverland.com
    MCITP | MCT
    http://sqlblog.com/blogs/elisabeth_redei/
    http://linkedin.com/in/elisabethredei

  • iqtedar (11/8/2008)


    Hello,

    i have a question regarding assigning permission to the user..i did try searching the forum but didnt find anything..i know this place can definitely help me...recently i received an issue it is mentioned below

    issue:

    user xyz says she is not able to connect to the database..she said she was able to connect it before...user said xyz is only a read only account and the error msg she got was:Connectiond timed out

    this is wat i did:

    i first went and checked the login ..right clicked on the props and selected the database which she was trying to login..then i saw the list of all db roles assigned to that db..i see two user defined db roles and have no idea wat these two db roles do...and these two db roles are selected..then i went under the db and right click on the user xyz properities..and see that the two user defined roles are selected...i m confused how to deal with such kind of issue..

    i request to suggest me from where should i start debugging this pbm and is der anyway to find out wat are the permissions behind a user defined db role...

    thanks

    As already mentioned it is hard to solve this kind of problem with a message in a forum. In any case I’ll give it a try.

    First of all I would try to connect to the server by opening SSMS and use the same credential and password that you user is trying to use. If it doesn’t work and I’d get an error message, I’d make sure that the login uses the correct password, that the login exists and should be able to connect to his default database or the database that he is trying to connect to (check if there is a user for this login, and that it points to a valid login). If you don’t find any problem, try using the profiler to catch failed and successful logins. Then ask your user to try and login to the server. If you user won’t be successful and you won’t get a login failed event in your trace, then the problem is not with SQL Server because the login attempt did not get to the server. In this case you should try working with your network admin or firewall admin to see what is the cause of the problem. If you still don’t solve the problem, pleas post more details about how the user is trying to connect, and the steps that you took in order to help your user.

    Adi

    --------------------------------------------------------------
    To know how to ask questions and increase the chances of getting asnwers:
    http://www.sqlservercentral.com/articles/Best+Practices/61537/

    For better answers on performance questions, click on the following...
    http://www.sqlservercentral.com/articles/SQLServerCentral/66909/

  • thank you so much Adi..i will try to ask her password and try using her login...i see that the login is mapped to that db ..my one more question was..how can i find the permissions behind any user defined db role..is there any sp or view?..thx again..

  • i really dnt know how xyz is connecting...but her id is a windows ID and this the error msgs shes gtng when she is trying to login..Connection timeout...thank u so much for sharing ur ideas..

  • You can run fn_my_permissions once connected to see what permissions she has.

    http://msdn.microsoft.com/en-us/library/ms176097.aspx

    If you are getting the connection timeout, likely she is having network issues. Could be communications or firewall. How is she connecting? Have her try through Data sources in the Control Panel as a start.

  • iqtedar (11/9/2008)


    i really dnt know how xyz is connecting...but her id is a windows ID and this the error msgs shes gtng when she is trying to login..Connection timeout...thank u so much for sharing ur ideas..

    In that case can you check with profiler if her login attempt is getting to the server at all? If it is, then you should see it in the event login failed. If she tries to login, gets the error message and you don't get any login failed or login succeeded event, then it is a network/firewall problem.

    Adi

    --------------------------------------------------------------
    To know how to ask questions and increase the chances of getting asnwers:
    http://www.sqlservercentral.com/articles/Best+Practices/61537/

    For better answers on performance questions, click on the following...
    http://www.sqlservercentral.com/articles/SQLServerCentral/66909/

Viewing 7 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic. Login to reply