dbTalk Databases Forums  

Howto impersonate code to use specific role in SQL2005

microsoft.public.sqlserver.olap microsoft.public.sqlserver.olap


Discuss Howto impersonate code to use specific role in SQL2005 in the microsoft.public.sqlserver.olap forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Monte
 
Posts: n/a

Default Howto impersonate code to use specific role in SQL2005 - 10-02-2006 , 04:10 AM






Hi there,

in SQL2000 Analysis Services I used a very complex script to authenticate as
a specific user/role to create offline graphs and Pivot-Table pictures via
script for users concerning their own security rights.

I read out the role of this user and used the security settings within this
role to filter the owc-element so that the user only gets to see the
elements/data he is allowed to. This was necessary since the script (DTS) was
run with administrative rights and therefore had access to all data.

I built a serverside OWC, applied the security-filtering, exported to excel
or picture and sent it via email as subscription.

now for the question:

Is there any way to tell a script to use a specific role when accessing the
cube in SQL2005. Is there some kind of "impersonation" mode to see the cube's
data just as a specific user would?

It really should be possible, since there is the functionality available in
Sharepoint to subscribe to reports to be sent to the user or in SSAS Designer
where I can Browse the cube using a specific role for testing ... how does
security impersonation work there?

An answer would be really appreciated since I dont want to re-write a
massive bunch of code for SQL2005

Greetings Monte

Reply With Quote
  #2  
Old   
Monte
 
Posts: n/a

Default RE: Howto impersonate code to use specific role in SQL2005 - 10-04-2006 , 02:08 AM






Anybody an idea?

"Monte" wrote:

Quote:
Hi there,

in SQL2000 Analysis Services I used a very complex script to authenticate as
a specific user/role to create offline graphs and Pivot-Table pictures via
script for users concerning their own security rights.

I read out the role of this user and used the security settings within this
role to filter the owc-element so that the user only gets to see the
elements/data he is allowed to. This was necessary since the script (DTS) was
run with administrative rights and therefore had access to all data.

I built a serverside OWC, applied the security-filtering, exported to excel
or picture and sent it via email as subscription.

now for the question:

Is there any way to tell a script to use a specific role when accessing the
cube in SQL2005. Is there some kind of "impersonation" mode to see the cube's
data just as a specific user would?

It really should be possible, since there is the functionality available in
Sharepoint to subscribe to reports to be sent to the user or in SSAS Designer
where I can Browse the cube using a specific role for testing ... how does
security impersonation work there?

An answer would be really appreciated since I dont want to re-write a
massive bunch of code for SQL2005

Greetings Monte

Reply With Quote
  #3  
Old   
Monte
 
Posts: n/a

Default RE: Howto impersonate code to use specific role in SQL2005 - 10-04-2006 , 06:33 AM



Hi,

the answer was quite easy and can be found here:

http://forums.microsoft.com/MSDN/Sho...80482&SiteID=1

Greetings Monte

"Monte" wrote:

Quote:
Hi there,

in SQL2000 Analysis Services I used a very complex script to authenticate as
a specific user/role to create offline graphs and Pivot-Table pictures via
script for users concerning their own security rights.

I read out the role of this user and used the security settings within this
role to filter the owc-element so that the user only gets to see the
elements/data he is allowed to. This was necessary since the script (DTS) was
run with administrative rights and therefore had access to all data.

I built a serverside OWC, applied the security-filtering, exported to excel
or picture and sent it via email as subscription.

now for the question:

Is there any way to tell a script to use a specific role when accessing the
cube in SQL2005. Is there some kind of "impersonation" mode to see the cube's
data just as a specific user would?

It really should be possible, since there is the functionality available in
Sharepoint to subscribe to reports to be sent to the user or in SSAS Designer
where I can Browse the cube using a specific role for testing ... how does
security impersonation work there?

An answer would be really appreciated since I dont want to re-write a
massive bunch of code for SQL2005

Greetings Monte

Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.