Localisation using custom assemblies

Hi,
Further to my post on May 31 on the same subject, we are still facing a
permissions problem with loading satellite resource assemblies from a
custom assembly.
We have done all that is recommended by the Bryant rs web site, and
still unable to proceed.
To reiterate the problem:
We need to enable label translation for our clients through the use of
.net resource assemblies; the resource assemblies must remain separate.
We developed a custom assembly so that in the report it is possible to
call a method with a culture name and resource id, and the
corresponding resource is to be returned in the culture specified.
We have tested that in a local pc scenario, it works perfectly. It
does not work when it is executed remotely - only the neutral
resources are returned.
We have made the appropriate permissions assertion and code group
declaration, but is unable to proceed further. Any help will be very
much appreciated.
Michael Cheng: I have a test case, if you don't mind I can forward the
test case in a zip file to your email address...
Desperate,
Siew FaiHello Siew,
To understand the issue better, I'd like to know how you execute it
remotely. Will you describe it in more details? What is the exact error
message you encounter?
Best Regards,
Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
| From: "Siew Fai" <siewfai.hoy@.gmail.com>
| Newsgroups: microsoft.public.sqlserver.reportingsvcs
| Subject: Localisation using custom assemblies
| Date: 14 Aug 2005 19:22:27 -0700
| Organization: http://groups.google.com
| Lines: 31
| Message-ID: <1124072547.541100.236230@.g47g2000cwa.googlegroups.com>
| NNTP-Posting-Host: 203.222.174.236
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1124072553 17754 127.0.0.1 (15 Aug 2005
02:22:33 GMT)
| X-Complaints-To: groups-abuse@.google.com
| NNTP-Posting-Date: Mon, 15 Aug 2005 02:22:33 +0000 (UTC)
| User-Agent: G2/0.2
| Complaints-To: groups-abuse@.google.com
| Injection-Info: g47g2000cwa.googlegroups.com;
posting-host=203.222.174.236;
| posting-account=W-T95Q0AAABWrZAGzmtXCMOc3JBrVGnv
| Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!news.glorb.com!postnews.google.com!g47g2000cwa.googlegroups.com!not-fo
r-mail
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.reportingsvcs:50341
| X-Tomcat-NG: microsoft.public.sqlserver.reportingsvcs
|
| Hi,
|
| Further to my post on May 31 on the same subject, we are still facing a
| permissions problem with loading satellite resource assemblies from a
| custom assembly.
|
| We have done all that is recommended by the Bryant rs web site, and
| still unable to proceed.
|
| To reiterate the problem:
| We need to enable label translation for our clients through the use of
| .net resource assemblies; the resource assemblies must remain separate.
| We developed a custom assembly so that in the report it is possible to
| call a method with a culture name and resource id, and the
| corresponding resource is to be returned in the culture specified.
|
| We have tested that in a local pc scenario, it works perfectly. It
| does not work when it is executed remotely - only the neutral
| resources are returned.
|
| We have made the appropriate permissions assertion and code group
| declaration, but is unable to proceed further. Any help will be very
| much appreciated.
|
| Michael Cheng: I have a test case, if you don't mind I can forward the
| test case in a zip file to your email address...
|
|
| Desperate,
| Siew Fai
|
||||Of course, I couldn't send because your email address is not available.
Siew Fai.|||Hi,
Thanks for the prompt reply.
I guess I used the term a little bit too loosely. Suppose there is a
box, let's name it "devsql01" that has all the reporting services
component installed (designer, manager and server). The custom
assembly and the resources are installed in the server bin folder and
the server policy file configured.
I have a client pc that requested the a report either via the url or
the webservice, or even the report manager that will use the services
of the custom assembly, which is to display label in the specified
culture. In this case, only the neutral resources are displayed, this
is incorrect.
If I do the same on the "devsql01" box itself, the correct resources
are displayed. This, I believe, is executing in the "MyComputer" zone
isn't it?
I do have a zip file containing all the source files with testing
instructions (no binaries) I can forward to illustrate the problem
clearly, if you would just send me an email, I can forward that on.
Please help,
Siew Fai.|||Hello Siew,
I have reproduced the issue on my side. If I log on as a domain user
without local admin right on report server, I recevied the following error:
The permissions granted to user 'domain\username' are insufficient for
performing this operation. (rsAccessDenied)
If I added the domain\username to the local admin groups on report server
machine, the issue went away.
I think this is expected behavior because for Report Manager it uses
"impersonate=true" configuration in web.config file. Any client users try
to access a report, report manager impersonte the identity of this user
when performing operation such as report execution. If the user does not
have the proper permission on report server, the permission exception will
be thrown.
If you do not want this behavior, you may consider use impersontion inside
the custom assembly so that it can execute as a identity with local admin
rights. I have included the following article for your reference
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpref/html/
frlrfSystemSecurityPrincipalWindowsIdentityClassImpersonateTopic2.asp
Best Regards,
Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
| From: "Siew Fai" <siewfai.hoy@.gmail.com>
| Newsgroups: microsoft.public.sqlserver.reportingsvcs
| Subject: Re: Localisation using custom assemblies
| Date: 15 Aug 2005 03:14:05 -0700
| Organization: http://groups.google.com
| Lines: 28
| Message-ID: <1124100845.207984.265700@.g43g2000cwa.googlegroups.com>
| References: <1124072547.541100.236230@.g47g2000cwa.googlegroups.com>
| <262SSYXoFHA.3120@.TK2MSFTNGXA01.phx.gbl>
| NNTP-Posting-Host: 203.166.246.91
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1124100850 30123 127.0.0.1 (15 Aug 2005
10:14:10 GMT)
| X-Complaints-To: groups-abuse@.google.com
| NNTP-Posting-Date: Mon, 15 Aug 2005 10:14:10 +0000 (UTC)
| In-Reply-To: <262SSYXoFHA.3120@.TK2MSFTNGXA01.phx.gbl>
| User-Agent: G2/0.2
| Complaints-To: groups-abuse@.google.com
| Injection-Info: g43g2000cwa.googlegroups.com; posting-host=203.166.246.91;
| posting-account=W-T95Q0AAABWrZAGzmtXCMOc3JBrVGnv
| Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!nx02.iad01.newshosting

Local group permissions

Hi,
Is it possible to grant role assignment to report server local groups in
SSRS 2000? if so, how? I can't do it.
Thanks
AlexI managed to set local group policy only by adding the users to a
server-level group and then assign that group permissions. The same can be
done by adding individual accounts to the server itself, but I was unable to
create groups within RS itself.
Hope this assists,
"Alex" wrote:
> Hi,
> Is it possible to grant role assignment to report server local groups in
> SSRS 2000? if so, how? I can't do it.
> Thanks
> Alex
>
>|||Is is possible to restrict group rights per report using domain groups.
If I want a particular user to be able to view one or two reports and those
alone without viewing other reports, how would I attempt this. Say I want
only Sales see the sales reports, payroll to see only payroll, Tech Support
to see Tech Support and etc...
is this possible?
Regards,
Samson
"Logicalman" wrote:
> I managed to set local group policy only by adding the users to a
> server-level group and then assign that group permissions. The same can be
> done by adding individual accounts to the server itself, but I was unable to
> create groups within RS itself.
> Hope this assists,
> "Alex" wrote:
> > Hi,
> >
> > Is it possible to grant role assignment to report server local groups in
> > SSRS 2000? if so, how? I can't do it.
> >
> > Thanks
> > Alex
> >
> >
> >|||Samson,
Yes, you simply add the user to the group having permission on that report.
Be aware though, that by adding the user to that group he/she will then be
able to view ALL reports that particular group has permissions to.
example.
Report 1
Report 2
Report 3
Report 4
Group A
Group B
If Group A is given permission to browse Reports 1 and 2, and Group B is
given permission to view Reports 2,3 and 4.
By adding User X to Broup A, he/she will have access to Reports 1 and 2, by
adding User z to Group B he/she will have access to Reports 2,3 and 4.
If you want User Y to view Report 2 only, and no other Reports, then you
will need to either add that user directly to Report 2, or create a new Group
C, and assign permissions to Group C to view Report 2.
Again, such Gropus may be part of the Active Directory or the Server.
I hope this clears up any ambiguity.
"Samson" wrote:
> Is is possible to restrict group rights per report using domain groups.
> If I want a particular user to be able to view one or two reports and those
> alone without viewing other reports, how would I attempt this. Say I want
> only Sales see the sales reports, payroll to see only payroll, Tech Support
> to see Tech Support and etc...
> is this possible?
>
> --
> Regards,
> Samson
>
> "Logicalman" wrote:
> > I managed to set local group policy only by adding the users to a
> > server-level group and then assign that group permissions. The same can be
> > done by adding individual accounts to the server itself, but I was unable to
> > create groups within RS itself.
> >
> > Hope this assists,
> >
> > "Alex" wrote:
> >
> > > Hi,
> > >
> > > Is it possible to grant role assignment to report server local groups in
> > > SSRS 2000? if so, how? I can't do it.
> > >
> > > Thanks
> > > Alex
> > >
> > >
> > >|||That is good news. I guess my question is how. I created 3 users groups,
sales, techs, payroll.
How do I set the permission on the particular folder that holds the reports?
Regards,
Samson
"Logicalman" wrote:
> Samson,
> Yes, you simply add the user to the group having permission on that report.
> Be aware though, that by adding the user to that group he/she will then be
> able to view ALL reports that particular group has permissions to.
> example.
> Report 1
> Report 2
> Report 3
> Report 4
> Group A
> Group B
> If Group A is given permission to browse Reports 1 and 2, and Group B is
> given permission to view Reports 2,3 and 4.
> By adding User X to Broup A, he/she will have access to Reports 1 and 2, by
> adding User z to Group B he/she will have access to Reports 2,3 and 4.
> If you want User Y to view Report 2 only, and no other Reports, then you
> will need to either add that user directly to Report 2, or create a new Group
> C, and assign permissions to Group C to view Report 2.
> Again, such Gropus may be part of the Active Directory or the Server.
> I hope this clears up any ambiguity.
>
> "Samson" wrote:
> > Is is possible to restrict group rights per report using domain groups.
> >
> > If I want a particular user to be able to view one or two reports and those
> > alone without viewing other reports, how would I attempt this. Say I want
> > only Sales see the sales reports, payroll to see only payroll, Tech Support
> > to see Tech Support and etc...
> >
> > is this possible?
> >
> >
> > --
> > Regards,
> >
> > Samson
> >
> >
> > "Logicalman" wrote:
> >
> > > I managed to set local group policy only by adding the users to a
> > > server-level group and then assign that group permissions. The same can be
> > > done by adding individual accounts to the server itself, but I was unable to
> > > create groups within RS itself.
> > >
> > > Hope this assists,
> > >
> > > "Alex" wrote:
> > >
> > > > Hi,
> > > >
> > > > Is it possible to grant role assignment to report server local groups in
> > > > SSRS 2000? if so, how? I can't do it.
> > > >
> > > > Thanks
> > > > Alex
> > > >
> > > >
> > > >|||I think after reading youtr post again I can set the permission within the
report as well. I think I understand now.
Regards,
Samson
"Samson" wrote:
> That is good news. I guess my question is how. I created 3 users groups,
> sales, techs, payroll.
> How do I set the permission on the particular folder that holds the reports?
>
> --
> Regards,
> Samson
>
> "Logicalman" wrote:
> > Samson,
> >
> > Yes, you simply add the user to the group having permission on that report.
> > Be aware though, that by adding the user to that group he/she will then be
> > able to view ALL reports that particular group has permissions to.
> > example.
> > Report 1
> > Report 2
> > Report 3
> > Report 4
> >
> > Group A
> > Group B
> >
> > If Group A is given permission to browse Reports 1 and 2, and Group B is
> > given permission to view Reports 2,3 and 4.
> > By adding User X to Broup A, he/she will have access to Reports 1 and 2, by
> > adding User z to Group B he/she will have access to Reports 2,3 and 4.
> >
> > If you want User Y to view Report 2 only, and no other Reports, then you
> > will need to either add that user directly to Report 2, or create a new Group
> > C, and assign permissions to Group C to view Report 2.
> > Again, such Gropus may be part of the Active Directory or the Server.
> >
> > I hope this clears up any ambiguity.
> >
> >
> > "Samson" wrote:
> >
> > > Is is possible to restrict group rights per report using domain groups.
> > >
> > > If I want a particular user to be able to view one or two reports and those
> > > alone without viewing other reports, how would I attempt this. Say I want
> > > only Sales see the sales reports, payroll to see only payroll, Tech Support
> > > to see Tech Support and etc...
> > >
> > > is this possible?
> > >
> > >
> > > --
> > > Regards,
> > >
> > > Samson
> > >
> > >
> > > "Logicalman" wrote:
> > >
> > > > I managed to set local group policy only by adding the users to a
> > > > server-level group and then assign that group permissions. The same can be
> > > > done by adding individual accounts to the server itself, but I was unable to
> > > > create groups within RS itself.
> > > >
> > > > Hope this assists,
> > > >
> > > > "Alex" wrote:
> > > >
> > > > > Hi,
> > > > >
> > > > > Is it possible to grant role assignment to report server local groups in
> > > > > SSRS 2000? if so, how? I can't do it.
> > > > >
> > > > > Thanks
> > > > > Alex
> > > > >
> > > > >
> > > > >

local / domain account

I'm running as local account, and i would like to run as domain account.
What permissions does the domain account need to run sql sever 2000?
Is their any permissions on the local machine that I should set?Easiest solution is to put the domain-level account in the local
administrators group on the host computer.
Geoff N. Hiten
Microsoft SQL Server MVP
Senior Database Administrator
Careerbuilder.com
I support the Professional Association for SQL Server
www.sqlpass.org
"mannie" <anonymous@.discussions.microsoft.com> wrote in message
news:E17282A2-2718-488A-923D-8E11A85018E3@.microsoft.com...
> I'm running as local account, and i would like to run as domain account.
> What permissions does the domain account need to run sql sever 2000?
> Is their any permissions on the local machine that I should set?|||If you don't want to run as an Admin you can put the domain account in the
sysadmins role and use Enterprise Manager to set the account up for the
service. By going through EM, it assigns the needed permissions to the
pertinent registry keys and files.
Christian Smith
"mannie" <anonymous@.discussions.microsoft.com> wrote in message
news:E17282A2-2718-488A-923D-8E11A85018E3@.microsoft.com...
> I'm running as local account, and i would like to run as domain account.
> What permissions does the domain account need to run sql sever 2000?
> Is their any permissions on the local machine that I should set?