I have restricted the web login used by my ASP.Net pages to only run procs and pull data from views, it never has direct access to tables. My problem is if I add a new proc or view I have to modify the login's permissions to give access to the new items. Is there some way I can set the login to automaticly have the correct permission to new views/procs I add?
View 2 RepliesHow can I give my ASP.net website permission to see this folder on the server? C:PVSWin. The website is actually running on a virtual path D:WebSitesAdco.We are running IIS ver 6.The website uses a table from Pervasive to locate Vendors. The SqlDataSource works from the VS2008 IDE which is running on the server, but if a user logs into the website remotely they get this error:ERROR [IM003] Specified driver could not be loaded due to system error 1114 (Pervasive ODBC Client Interface). This error generally indicates that the path to the DB components is not found, or is not available to the calling program, so I guess that the website does not have permissions.
View 5 RepliesI am having IIS server and SQL server on two different machines.
In the SQL server I created a new user using the SQL Authentication.
In my application I am using a connection string like this:
<add name="UsrConnectionString"
I have deployed my website in ftp server.now i need to upload image to my database and place images in upload folder. while uploading images i'm getting the below error.
Access to the path 'd:hostingmystieproductImagesvaara.jpg' is denied.
Description:
An unhandled exception occurred during the execution of the current web request. review the stack trace for more information about the error and where it originated in the code.
Exception Details:
System.UnauthorizedAccessException: Access to the path 'd:hostingmysiteproductImagesvaara.jpg' is denied.
ASP.NET is not authorized to access the requested resource. Consider granting access rights to the resource to the ASP.NET request identity. ASP.NET has a base process identity (typically {MACHINE}ASPNET on IIS 5 or Network Service on IIS 6) that is used if the application is not impersonating. If the application is impersonating via <identity impersonate="true"/>, the identity will be the anonymous user (typically IUSR_MACHINENAME) or the authenticated request user.
To grant ASP.NET access to a file, right-click the file in Explorer, choose "Properties" and select the Security tab. Click "Add" to add the appropriate user or group. Highlight the ASP.NET account, and check the boxes for the desired access.
i use this codes to give permision to user for some pages
[Code]....
i know that i can use IsUserInRole("UserName") method to give permision to user but, i'm looking for something else because, i can't check all roles for all pages and also i write the code in web.config file because of i use sitemap for menu and with this method i can show the user that part that's allow for that user. now my question is: can i write some code to do the same method that, i write some codes in web.config file?
Don't get me wrong, I don't want anyone to write code for me, I just want to know what I'll need to implement. I'll detail what I need: Ex: Facebook page. If I'm at my profile's page I have one type of view, I can edit all my data, see even not set data and add more information. If I'm visiting a friend's page I can only see what he wants me to and interact with his pages as far as he allowed me.
Ex2: One user posted info on some blog. He and all the people with privileges can edit that info, the other can only read and post comments as their permissions allow. Was I clear enough? I wasn't able to find Google references because I don't know the name of this technique and the keywords I typed didn't take me anywhere.
hw can i give write permission to folder for changing the image at runtime.i have tried so many times but still confused and free hand. can some one pls give me the solution in details.
View 4 RepliesI need to create different page views for different types of users. I already asked that here: How to create pages with different permissions' views And even though Aldeel's answer works, it does not seem the best solution for me. I'll explain why. I need to show different views but it's not only like that. Each user can have access to different parts of the page.
Imagine a page 'X' with this structure
Field A
Field B
Field C
Field D
When user U1 from group G1 visit page X the system checks the DB for that group's permission on page X. User U1 can see Field A and Field B, but only edit Field A. User U2 that is set to no group visits page X. The system checks for his permissions on page X. User U2 can see and edit all fields. When user U3 from group G2 visit page X the system checks the DB for that group's permission on page X. User U3 can see Field C and Field D, but can not edit any.
I coudn't find a way to do that instead of filling ViewData with lots of data about that specific user's permission. In my example there are only 4 fields, but in my current project I have no screen with less than 20 fields. So I guess you can see how ugly and not productive that is. The idea is similar to a social network, as I said (facebook example). When a user visiting UserX's page can only see what UserX has allowed him to.
I want to create and write file in "C:windowssystem32" this path.some computer give the error access denied.i want some code in C# who give the permission to folder.
View 5 RepliesI have written a t4 template that basically replaces the work done by StronglyTypedResourceBuilder to give design time access to string resources as properties of classes, one class per resource file. Why? Well I needed to add some customer code that handles string token substitution and a few other customizations. Anyway, the template is working out really well and I may blog on it soon.
In the mean time though, following a common pattern, I have one .resx file for each view, master page, controller, etc. I would really like my t4 template to add a property to each such entity that gives quick access the custom resource class associated with it. For controllers this is easy. T4MVC is ensuring that they are a all declared partial. All I need to do is create the appropriate partial class in my output that declares a readonly property that returns an instance of the appropriate generated resource class.
The Problem:
I would like to do the same thing, inject generated code, into my views. Were this traditional ASP.Net, each .aspx page would have a .aspx.cs page and possibly an .aspx.designer.cs page that are all partial classes extending in the aspx page's class definition. There is no such thing by default in MVC and for good reason. However, I think for my purposes, if there is a way to do this, it would be the way to go.
I could subclass ViewPage and add a generic type parameter and a property that returns the class of that type but that has certain complications. I think adding auto generated code to each view via partial class (that is what partials are for after all) is the way to go.
I have made a basic attempt. I have created a .aspx.cs file for a view and placed a code behind attribute in the page declaration but the class generated from the view seems to reside in a different assembly any my "partial class" ends up as its own class in the same assembly as all my other code.
I have a SQL statement as below
SELECT [Motor]
,[Time]
FROM [logger].[dbo].[motor]
WHERE day([Time]) = day(getdate())
ORDER BY [TIME]
This is a very basic table that gives me the status of a motor at a given time. All i want is a select statement that will give me the latest result if possible. I can get it so it gives all of todays results but if i could get it that it only displays the latest result that would be great.
When Select an entity by linq with entity framework 3.5 ...and thenn select it again using stored procedure ..which change the value for a field for that entity ... i got that with old value ...not procedure value...............When i called that procedure before .. the select ... i got the correct value.........but in my case i shall call the procedure after select with linq statment
View 4 RepliesI am getting the error message "SELECT permission denied on object 'MyTable', database 'MyDB', owner 'dbo'.", when trying to run a small asp.net application via a browser where i work.
I built it on my local machine(VS 2008, C#) and transferred over to an IIS server(i.e. Windows Server 2003) and I have also enabled the application folder in IIS.
It runs fine on my local machine. Connection string in web.config on my local machine <add name="connstring" connectionString="Data Source=DBASE;Initial Catalog=MyDB;Integrated Security=true" providerName="System.Data.SqlClient"/>
on the server, connection string is <.......;User Id=userid;Password="mypassword" />.
But when i swapped connection string on server to use <Integrated Security=true>, and tried to run from a browser again, i get:
Login failed for user 'SVRSERVERNAME$'
I have a couple of other apps I built in the past and they are running fine, I didn't do anything special, just transferred them as normal to server and ran through browser
In fact, one of my previous apps even uses the same table and database. but with this new app, I don't know why it wouldn't work even though it runs perfect on my local machine
I can access the database manually from SQL Management studio, i connect to it using my Windows account or the given username/password credentials.
Other thing I noticed, when I changed the connection string on my local machine web.config to use <User Id=userid;Password="mypassword">, i then get same error as if it was running from the server:
SELECT permission denied on object 'MyTable', database 'MyDB', owner 'dbo'.
I have project in asp.net with sql server backend.i want to auto generate a number for particular column.with the auto generated number i want to insert some other data in the same row same table. on button click event.details
railway PNR no.:- want to autogenerat
passenger details:- want to inserted simultaneously
Using Visual Web Developer 2010 Express and SQL Server 2008 R2.
I have a form with two GridView controls and a FormView control. All the data is populated using a SqlDataSource for each control - I'm not using any code behind to populate the controls. So far so good. The first GridView is called grdTrades with code like this:
[Code]....
At the moment when the page loads, the frmOrderDetails FormView is not populated. The user has to click on an order in grdOrders to populate the FormView. Is there a nice way to do this?
I want to upload files in my Asp.net application on server but I have to grant it R/W access so that I or anyone can upload files in it. Is there any way that I write some code or configuration lines in Web.config which solve this permission problem?
View 1 RepliesI've got an ASP.NET website, and its connecting to a database I've created on SQL Server 2k8 and I'm using windows integrated security on my connection string between asp.net and SQL Server. What account should I give permissions to my database inside SQL Server? Should I give NT AUTHORITYNETWORK SERVICE permission to my database? Right now, I right clicked the network service account, and went to properties, and then I checked my database under "users mapped to this login:" and then in the "database role membership for" diaglogue I then selected public and db_owner. Is that right?
View 1 RepliesI have a DetailsView that binds a User's Profile data into an ItemTemplate upon the Page_Load. When the user chooses Edit Mode, all of the Data is correctly carried over, except for the DropDownLists selected values. If on the ReadOnly page, the user's data shows "Male" for the Sex, then on the edit Mode page, I would like the DropDownList that gets the sexes from the database ("male", "female"), to have automatically selected "Male" in the DropDownList, not the lowest indexed item.
[Code]....
[Code]....
Here is the situation. All the machines and users are in the same domain.We are in a domain enviroment. There are some sql server 2005/2008 storing data. There is a ASP.NET site in the domain using the Window Authentication. Now, we need read the data from the sql server and display them using SqlDataSource and GridView. But most of users do not have the direct permission to access the database. Is there any solution to get the data from database and display them on the site without granting users permission?
View 2 Repliesmy company create for me a new database in new server hosting
the problem is that with new user's database, i cannot execute SP it return error that the user "username" do not have execute permission
the actual permission are :db_datareader,db_written,db_ddladmin
it seems not enought must i ask for add db_owner schema rom to user?
I have recently succeeded doing a Publish to server from my local sql db and run the sql script on my web host's sql server 2005 db. Now, I get the "The EXECUTE permission was denied on the object 'MyStoredproc', database 'db12345', schema 'dbo'." error.I have Visual Studio Professional 2010, and that's where I create and manage my tables (in Server Explorer). However, when I right-click a stored procedure, I don't get a Seurity option or the like, where I could possibly set permissions.
I'm a bit usure of what SqlServer applications I have installed (as they are intertwingled with the Aps.Net stuff somewhat). When I look at Add/Remove software, this is what I find:
Microsoft Sql Server 2008 (562 MB)
Microsoft Sql Server 2008 Native Client
Microsoft Sql Server 2008 R2 Data-Tier Application Framework
Microsoft Sql Server 2008 R2 Data-Tier Application Project
Microsoft Sql Server 2008 R2 Management Objects
Microsoft Sql Server 2008 R2 Transact-Sql Language Service
Microsoft Sql Server 2008 Setup Support Files
Microsoft Sql Server Compact 3.5 SP2 ENU
Microsoft Sql Server Database Publishing Wizard 1.3
Microsoft Sql Server Database Publishing Wizard 1.4
Microsoft Sql Server System CLR Types
Microsoft Sql Server CSS Writer
Can I use any of these apps to set the security settings? Or would I possibly not be allowed to change any settings at the web host's Sqlserver 2005 server anyway (due to security reasons)? Frankly I don't think I could ask them to change the settings for over a hundred stored procedures, and then call them each time I create a new one.
And also, I can't understand what the point would be in setting different security levels on SELECTs and UPDATEs etc. After all, all my pages call UPDATE statements (for collecting statistics). I guess that the host could set execute permissions on the entire folder (not sure though) but it would of course be a stupid idea if I'm wrong regarding this matter.
Using VS 2008, and i downloaded sql server 2008 that came with installation. I created an applicaton, which runs perfectly when i click run from VS. but when i moved it to wwwroot folder, this error poped up:
CREATE DATABASE permission denied in database 'master'.
Cannot attach the file 'C:InetpubwwwrootooksApp_Dataooks.mdf' as database 'books'.
This is my <connectionStrings>
<add name="books" connectionString="Data Source=.SQLEXPRESS;AttachDbFilename=C:InetpubwwwrootooksApp_Dataooks.mdf; Integrated Security=True; trusted_connection = true; User Instance=False; Initial Catalog=books" providerName="System.Data.SqlClient"/>
I need to set folder permission programmaticcaly which is in my GoDaddy server. I have nearly 150 folders in my server so I cant change through server settings or IIS settings. I am using web application. My folder may go on increase in future.I have googled a lot of things.
1. Like Access Control List in System.SEcurity namespace
2.System.principl.security...
I cant able to change the file permission but not a directory.
I must allow all the users to write or move a file to the folder which is in read only mode. That should be done programmatically and should be dynamic.
I have create a masterpage and add content page include user (firsname,lastname,password,new password,confirm new password adn etc..)detail update field. i try to give a client side validation all the function work,but in confirm password its not hide wen give a correct password.. anybody give correct solution..code are below..
[Code]....
sing VS 2008 at a workstation, I have successfully developed a local, file-system ASP.NET 3.5 website. The wbesite included a membership page with Windows authentication and a web parts page. The SQL Server 2005 ASPNETDB database has been created at an IIS web servr. Using the ASP.Net development server of the workstation, both the membership Membership/WebParts pages at the local website worked very well.
Then, I copied the website to a virtual directory at the IIS web server and creates a remote website for the workstation. Under theASP.NET development server of the workstation, both membership and webparts pages of the remote website at the IIS web server also worked fine.
However, when running these web pages from the IIS web server machine, something wrong happened with the web parts page. (The membership page still worked very well.) For the ASPNETDB database at the IIS web server machine, there is an EXECUTE permission error on an ASPNET stored procedure.
What are the differences between the ASP.NET development server and IIS web sever, which caused the EXECUTE permission error on the ASP.NET S.P.? How to find and fix the errors?