Can't get Dynamic Security working ...

I'm trying to get dynamic security working using a member property which contains a list of usernames that are allowed to access that level of the hierarchy. I'm using the following setup:

Dimension: DynManager

Hierarchy: DynManager

Levels (in order): SVP, DVP, RVP, ROM, DDO, Store

Attributes: SVP -> SVP Access List, DVP -> DVP Access List, RVP -> RVP Access List, ... etc

When I run the following test query, I get the set back that I expect:

SELECT FILTER([DynManager].[DDO].Members, INSTR([DynManager].CurrentMember.Properties("DDO Access List"), "JJester")) ON 0 FROM BiCube

However, when I attempt to use the same FILTER expression in the role's "Allowed Member Set" expression, I get the following error message:

An error occurred in the MDX script for the dimension attribute permission's allowed member set: Query (1, 56) The 'DynManager' dimension contains more than one hierarchy, therefore the hierarchy must be explicitly specified.

The DynManager dimension only has one hierarchy, so I don't understand where the error is coming from. However, I did what it says and changed my query to the following:

FILTER([DynManager].[DDO].Members, INSTR([DynManager].[DynManager].CurrentMember.Properties("DDO Access List"), "JJester"))

The syntax checks out but when I go to browse the cube as this dynamic role, I get the following error message:

The DynManager hierarchy is used more than once in the Crossjoin function

Can anyone please provide some insight!? Thank you!

Jeff

What is the attribute that you are setting this as AllowedSet on ? Is it DDO attribute ? If it is not DDO attribute, then the error can be because of it, but if it is, then the error doesn't look right. Are you on SP2 of AS ? I vaguely recall a fix in this area...

|||

Hi Mosha! Thanks for the quick reply. I just upgraded to SP2 this morning hoping it would clear up some issues ... but no luck.

I'm setting the "AllowedSet" on the SVP, DVP, RVP, ROM, and DDO attributes. All other attributes are set to "Select all members".

Thanks again,
Jeff

|||The expression that you provided above should only be set on DDO attribute. Please remove it from all other attributes.|||

My filter expression in the AllowedSet is different for each level of the hierarchy.

For DDO, it's:

FILTER([DynManager].[DDO].Members, INSTR([DynManager].[DynManager].CurrentMember.Properties("DDO Access List"), "JJester"))

For ROM, it's:

FILTER([DynManager].[ROM].Members, INSTR([DynManager].[DynManager].CurrentMember.Properties("ROM Access List"), "JJester"))

For RVP it's:

FILTER([DynManager].[RVP].Members, INSTR([DynManager].[DynManager].CurrentMember.Properties("RVP Access List"), "JJester"))

and on and on ....

Do you have any idea why my test query would work in SQL Server Management Studio, but then I get the "more than one hierarchy" error when I try to apply the same FILTER expression in the AllowedSet?

|||

Ok, I think I figured out the issue. The parameters in my filter expression are too specific (if that's even possible). I tried removing the Dimension name and it works. So, the new expression looks like this:

FILTER([DDO].Members, INSTR([DDO].CurrentMember.Properties("DDO Access List"), "JJester"))

Anyhow, thanks for your help Mosha!

sql

cant get any event from FormsAuthentication Sample in the report server ?

Hi i have used

http://msdn2.microsoft.com/en-gb/library/ms160724.aspx

to enable custom security in the report server,now custom security sample is working fine with my report server,

So bigger problem is my Software manager ask me to redesighn

UILogon.aspx page ?

Now the bigger problem is when redesign the UILogon.aspx page

I am having lot of problems in the sample ,thing is i cant get any button event from the

code behind it self ?

Error is saying that

"cannot handle Event 'Public Event Click(sender As Object, e As System.Web.UI.ImageClickEventArgs)' because they do not have the same signature."

Whats is the wrong with this ?

regards

sujithf ?

The only requirement for the method that handles the event is that it must have the same signature (parameters) as the delegate that is defined as the event handler for the event...If we put the Handles clause on a method whose signature does not match the delegate, then the compiler will give us a build error saying, "Method Car_Start cannot handle Event 'Start' because they do not have the same signature."

http://www.knowdotnet.com/articles/creatingevents3.html

http://msdn2.microsoft.com/en-us/library/00wh89xa.aspx

|||

Thank you very much for the help,

now its working with the help of u r answer,,........realy helped me lot

regards

sujithf

sql

Can't find answer to this anywhere

A fairly straightforward question:
When using rs.CreateFolder to create a folder, is it possible to set the
"Inherit security from parent" property to false? How would I do this. What
is the property called? I have tried "InheritSecurity" but that did not
work...On Mon, 18 Apr 2005 03:57:27 -0700, "DBA72"
<DBA72@.discussions.microsoft.com> wrote:
>A fairly straightforward question:
>When using rs.CreateFolder to create a folder, is it possible to set the
>"Inherit security from parent" property to false? How would I do this. What
>is the property called? I have tried "InheritSecurity" but that did not
>work...
You might want to look at UpdateDeleteAuthorizationPolicy. I don't
know of any example syntax to go beyond what is in BOL, which isn't
much.
Andrew Watt
MVP - InfoPathsql

Cant enter report manager with forms security

I implemented the sample from microsoft, but i dont know what went wrong i
can access the server but cant enter the report manager, im redirected to
the folder.aspx page but then I get back to UILogon.aspx, could it be that
when i installed RS i ddint check the SSL checkbox, or some other config
problem?Or, perhaps you access the Report Manager by using localhost instead of the
computer name?
--
Hope this helps.
----
Teo Lachev, MCSD, MCT
Author: "Microsoft Reporting Services in Action"
Publisher website: http://www.manning.com/lachev
Buy it from Amazon.com: http://shrinkster.com/eq
Home page and blog: http://www.prologika.com/
----
"Rodrigo Sánchez" <rodrigoss@.netshoreprogramming.com> wrote in message
news:OobjdyhkEHA.3556@.TK2MSFTNGP12.phx.gbl...
> I implemented the sample from microsoft, but i dont know what went wrong i
> can access the server but cant enter the report manager, im redirected to
> the folder.aspx page but then I get back to UILogon.aspx, could it be that
> when i installed RS i ddint check the SSL checkbox, or some other config
> problem?
>|||Hi all,
I have been trying ti use the Sample Forms Authentication since morning but
can not make it work still. I followed the steps and could register a user
"administrator" from LOgon.aspx page. I see this user getting created in the
Users table of UserAccounts database. I also add the sample code for username
to RSReportServer.config file as given in the sample description. Now I try
to login using the username and password but brings me back to the Logon.aspx
page. Anybody please help.
PS:- I can also see this user from ReportServer but cannot enter
ReportManager)
Thanks in advance.
Pinal.
"Teo Lachev" wrote:
> Or, perhaps you access the Report Manager by using localhost instead of the
> computer name?
> --
> Hope this helps.
> ----
> Teo Lachev, MCSD, MCT
> Author: "Microsoft Reporting Services in Action"
> Publisher website: http://www.manning.com/lachev
> Buy it from Amazon.com: http://shrinkster.com/eq
> Home page and blog: http://www.prologika.com/
> ----
> "Rodrigo Sánchez" <rodrigoss@.netshoreprogramming.com> wrote in message
> news:OobjdyhkEHA.3556@.TK2MSFTNGP12.phx.gbl...
> > I implemented the sample from microsoft, but i dont know what went wrong i
> > can access the server but cant enter the report manager, im redirected to
> > the folder.aspx page but then I get back to UILogon.aspx, could it be that
> > when i installed RS i ddint check the SSL checkbox, or some other config
> > problem?
> >
> >
>
>sql

Can't created a linked server on a named instance to default insta

I have been trying to create a linked server on a named instance to a defaul
t
instance using intergrated security. It seems to work fine from a default
instance to any other SQL instance, including a named instance, but any time
I create the linked server on the named instance a call to the linked server
fails with the error:
Msg 18452, Level 14, State 1, Line 1
Login failed for user '(null)'. Reason: Not associated with a trusted SQL
Server connection.
All servers are running SQL Server 2000 and the only difference in the
installation besides the fact one is named, is that the named instance is SP
4
and all others are SP3.
From a default instance the following works fine:
sp_addlinkedserver 'ORDEV01'
ORDEV01.Master.dbo.sp_helpdb
and the following to a named instance works as well:
sp_addlinkedserver 'LOU\Master'
[LOU\Master].Master.dbo.sp_helpdb
But if I try to created a linked server on the name dinstance LOU\Master I
get the error:
Msg 18452, Level 14, State 1, Line 1
Login failed for user '(null)'. Reason: Not associated with a trusted SQL
Server connection.
Thanks in advance for any help.Byron
Does the instance have Windows Authentication?
"Byron" <Byron@.discussions.microsoft.com> wrote in message
news:CB90A676-83FF-41CC-9C04-221920F998FF@.microsoft.com...
>I have been trying to create a linked server on a named instance to a
>default
> instance using intergrated security. It seems to work fine from a default
> instance to any other SQL instance, including a named instance, but any
> time
> I create the linked server on the named instance a call to the linked
> server
> fails with the error:
> Msg 18452, Level 14, State 1, Line 1
> Login failed for user '(null)'. Reason: Not associated with a trusted SQL
> Server connection.
> All servers are running SQL Server 2000 and the only difference in the
> installation besides the fact one is named, is that the named instance is
> SP4
> and all others are SP3.
> From a default instance the following works fine:
> sp_addlinkedserver 'ORDEV01'
> ORDEV01.Master.dbo.sp_helpdb
> and the following to a named instance works as well:
> sp_addlinkedserver 'LOU\Master'
> [LOU\Master].Master.dbo.sp_helpdb
> But if I try to created a linked server on the name dinstance LOU\Master I
> get the error:
> Msg 18452, Level 14, State 1, Line 1
> Login failed for user '(null)'. Reason: Not associated with a trusted SQL
> Server connection.
> Thanks in advance for any help.

Can't Connect to SQL Server

someone told me to delete BUILTIN\Adminiistrator becuase
it was a security risk and now i cant access the
Enterprise manager.
can anyone help?
Hi,
It seems you have registered in Enterprise manager using the Windows
Authentication. Chage the authentication to "Windows and SQL server",
by editing the the below registry key
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsof t SQL Server\MSSQLServer],
Change the login mode to "0"
After that delete the current registration and create a new registration
using SQL server authentication using 'SA' user and password. After that
give previlages to your OS level user "sysadmin" role and reregister using
ur User using OS authentication.
Thanks
Hari
MCDBA
"Me" <anonymous@.discussions.microsoft.com> wrote in message
news:14d0201c41912$68bcdcd0$a601280a@.phx.gbl...
> someone told me to delete BUILTIN\Adminiistrator becuase
> it was a security risk and now i cant access the
> Enterprise manager.
> can anyone help?

Can't Connect to SQL Server

someone told me to delete BUILTIN\Adminiistrator becuase
it was a security risk and now i cant access the
Enterprise manager.
can anyone help?Hi,
It seems you have registered in Enterprise manager using the Windows
Authentication. Chage the authentication to "Windows and SQL server",
by editing the the below registry key
& #91;HKEY_LOCAL_MACHINE\SOFTWARE\Microsof
t\Microsoft SQL Server\MSSQLServer]
,
Change the login mode to "0"
After that delete the current registration and create a new registration
using SQL server authentication using 'SA' user and password. After that
give previlages to your OS level user "sysadmin" role and reregister using
ur User using OS authentication.
Thanks
Hari
MCDBA
"Me" <anonymous@.discussions.microsoft.com> wrote in message
news:14d0201c41912$68bcdcd0$a601280a@.phx
.gbl...
> someone told me to delete BUILTIN\Adminiistrator becuase
> it was a security risk and now i cant access the
> Enterprise manager.
> can anyone help?