sql server reporting services: Hi,

Further to my post on May 31 on the same subject, we are still facing a
permissions problem with loading satellite resource assemblies from a
custom assembly.

We have done all that is recommended by the Bryant rs web site, and
still unable to proceed.

To reiterate the problem:
We need to enable label translation for our clients through the use of
..net resource assemblies; the resource assemblies must remain separate.
We developed a custom assembly so that in the report it is possible to
call a method with a culture name and resource id, and the
corresponding resource is to be returned in the culture specified.

We have tested that in a local pc scenario, it works perfectly. It
does not work when it is executed remotely - only the neutral
resources are returned.

We have made the appropriate permissions assertion and code group
declaration, but is unable to proceed further. Any help will be very
much appreciated.

Michael Cheng: I have a test case, if you don't mind I can forward the
test case in a zip file to your email address...


Desperate,
Siew Fai

Of course, I couldn't send because your email address is not available.

Siew Fai.

Hi,

Thanks for the prompt reply.

I guess I used the term a little bit too loosely. Suppose there is a
box, let's name it "devsql01" that has all the reporting services
component installed (designer, manager and server). The custom
assembly and the resources are installed in the server bin folder and
the server policy file configured.

I have a client pc that requested the a report either via the url or
the webservice, or even the report manager that will use the services
of the custom assembly, which is to display label in the specified
culture. In this case, only the neutral resources are displayed, this
is incorrect.

If I do the same on the "devsql01" box itself, the correct resources
are displayed. This, I believe, is executing in the "MyComputer" zone
isn't it?

I do have a zip file containing all the source files with testing
instructions (no binaries) I can forward to illustrate the problem
clearly, if you would just send me an email, I can forward that on.


Please help,
Siew Fai.

Hello Siew,

To understand the issue better, I'd like to know how you execute it
remotely. Will you describe it in more details? What is the exact error
message you encounter?

Best Regards,

Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================



This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
| From: "Siew Fai" <siewfai.hoy@gmail.com>
| Newsgroups: microsoft.public.sqlserver.reportingsvcs
| Subject: Localisation using custom assemblies
| Date: 14 Aug 2005 19:22:27 -0700
| Organization: http://groups.google.com
| Lines: 31
| Message-ID: <1124072547.541100.236230@g47g2000cwa.googlegroups.com>
| NNTP-Posting-Host: 203.222.174.236
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1124072553 17754 127.0.0.1 (15 Aug 2005
02:22:33 GMT)
| X-Complaints-To: groups-abuse@google.com
| NNTP-Posting-Date: Mon, 15 Aug 2005 02:22:33 +0000 (UTC)
| User-Agent: G2/0.2
| Complaints-To: groups-abuse@google.com
| Injection-Info: g47g2000cwa.googlegroups.com;
posting-host=203.222.174.236;
| posting-account=W-T95Q0AAABWrZAGzmtXCMOc3JBrVGnv
| Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!news.glorb.com!postnews.google.com!g47g2000cwa.googlegroups.com!not-fo
r-mail
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.reportingsvcs:50341
| X-Tomcat-NG: microsoft.public.sqlserver.reportingsvcs
|
| Hi,
|
| Further to my post on May 31 on the same subject, we are still facing a
| permissions problem with loading satellite resource assemblies from a
| custom assembly.
|
| We have done all that is recommended by the Bryant rs web site, and
| still unable to proceed.
|
| To reiterate the problem:
| We need to enable label translation for our clients through the use of
| .net resource assemblies; the resource assemblies must remain separate.
| We developed a custom assembly so that in the report it is possible to
| call a method with a culture name and resource id, and the
| corresponding resource is to be returned in the culture specified.
|
| We have tested that in a local pc scenario, it works perfectly. It
| does not work when it is executed remotely - only the neutral
| resources are returned.
|
| We have made the appropriate permissions assertion and code group
| declaration, but is unable to proceed further. Any help will be very
| much appreciated.
|
| Michael Cheng: I have a test case, if you don't mind I can forward the
| test case in a zip file to your email address...
|
|
| Desperate,
| Siew Fai
|
|

Hello Siew,

I have reproduced the issue on my side. If I log on as a domain user
without local admin right on report server, I recevied the following error:

The permissions granted to user 'domain\username' are insufficient for
performing this operation. (rsAccessDenied)

If I added the domain\username to the local admin groups on report server
machine, the issue went away.

I think this is expected behavior because for Report Manager it uses
"impersonate=true" configuration in web.config file. Any client users try
to access a report, report manager impersonte the identity of this user
when performing operation such as report execution. If the user does not
have the proper permission on report server, the permission exception will
be thrown.

If you do not want this behavior, you may consider use impersontion inside
the custom assembly so that it can execute as a identity with local admin
rights. I have included the following article for your reference

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpref/html/
frlrfSystemSecurityPrincipalWindowsIdentityClassImpersonateTopic2.asp

Best Regards,

Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================



This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
| From: "Siew Fai" <siewfai.hoy@gmail.com>
| Newsgroups: microsoft.public.sqlserver.reportingsvcs
| Subject: Re: Localisation using custom assemblies
| Date: 15 Aug 2005 03:14:05 -0700
| Organization: http://groups.google.com
| Lines: 28
| Message-ID: <1124100845.207984.265700@g43g2000cwa.googlegroups.com>
| References: <1124072547.541100.236230@g47g2000cwa.googlegroups.com>
| <262SSYXoFHA.3120@TK2MSFTNGXA01.phx.gbl>
| NNTP-Posting-Host: 203.166.246.91
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1124100850 30123 127.0.0.1 (15 Aug 2005
10:14:10 GMT)
| X-Complaints-To: groups-abuse@google.com
| NNTP-Posting-Date: Mon, 15 Aug 2005 10:14:10 +0000 (UTC)
| In-Reply-To: <262SSYXoFHA.3120@TK2MSFTNGXA01.phx.gbl>
| User-Agent: G2/0.2
| Complaints-To: groups-abuse@google.com
| Injection-Info: g43g2000cwa.googlegroups.com; posting-host=203.166.246.91;
| posting-account=W-T95Q0AAABWrZAGzmtXCMOc3JBrVGnv
| Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!nx02.iad01.newshosting
.com!newshosting.com!news.glorb.com!postnews.google.com!g43g2000cwa.googlegr
oups.com!not-for-mail
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.reportingsvcs:50351
| X-Tomcat-NG: microsoft.public.sqlserver.reportingsvcs
|
| Hi,
|
| Thanks for the prompt reply.
|
| I guess I used the term a little bit too loosely. Suppose there is a
| box, let's name it "devsql01" that has all the reporting services
| component installed (designer, manager and server). The custom
| assembly and the resources are installed in the server bin folder and
| the server policy file configured.
|
| I have a client pc that requested the a report either via the url or
| the webservice, or even the report manager that will use the services
| of the custom assembly, which is to display label in the specified
| culture. In this case, only the neutral resources are displayed, this
| is incorrect.
|
| If I do the same on the "devsql01" box itself, the correct resources
| are displayed. This, I believe, is executing in the "MyComputer" zone
| isn't it?
|
| I do have a zip file containing all the source files with testing
| instructions (no binaries) I can forward to illustrate the problem
| clearly, if you would just send me an email, I can forward that on.
|
|
| Please help,
| Siew Fai.
|
|