all groups > sql server reporting services > june 2006 >
You're in the

sql server reporting services

group:

Insufficient Privlidges accessing SSRS objects


Insufficient Privlidges accessing SSRS objects GaryDean
6/24/2006 11:14:33 AM
sql server reporting services:
When running the following code in our ASP.Net application...
ReportingService2005 _rs = new ReportingService2005();
_rs.Credentials = System.Net.CredentialCache.DefaultCredentials;
_rs.Url = "http://localhost/ReportServer/ReportService2005.asmx";
CatalogItem[] items;
items = _rs.ListChildren("/", true);
I keep getting an exception that MACHINE\ASPNET has insufficient privlidges
to ListChildren. I have given that account every authority I can give it
and I keep getting it.

When I try it with impersonate="true" I get the same error for
IUSR_MACHINENAME

We are using Forms authentication. This is how all of our asp.net
applications
run. Using this we have been able to access all classes and objects in .Net
except for these SSRS objects. It must be some type of setting in SSRS.
No?

Regards,
Gary Blakely



RE: Insufficient Privlidges accessing SSRS objects weilu NO[at]SPAM online.microsoft.com
6/26/2006 12:00:00 AM
Hi Gary,

Thank you for your posting!

I will replied your question here. SSRS has some difference with other
ASP.NET application. SSRS use the Windows Authentication to check the User
and Role. So you need to pass your FormAuthentication to access the report
web service.

In your code, you use the DefaultCredentials to access the web services.
Since you are using Form authentication, you need to create a custom
credential and pass the credential to web services.

Here is a sample for create a NewworkCredential:

NetworkCredential myCred = new NetworkCredential(
SecurelyStoredUserName,SecurelyStoredPassword,SecurelyStoredDomain);
// Add your domain, user name and password here.

CredentialCache myCache = new CredentialCache();

myCache.Add(new Uri("www.contoso.com"), "NTLM", myCred);

_rs.Credentials = myCache;


Here is the article about NewworkCredential:

NewworkCredential
http://msdn2.microsoft.com/en-us/library/system.net.networkcredential.aspx

Hope this will be helpful!

Sincerely,

Wei Lu
Microsoft Online Community Support

==================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
Re: Insufficient Privlidges accessing SSRS objects GaryDean
6/26/2006 6:07:17 PM
Wei:
you say "Add my domain username and password"
on my dev box, that is in a workgroup, do you mean my personal uid and pswd?
I'm the administrator so would that work? does this mean I'm putting my
password in the code?

When my project gets deployed to a hosting service what uid and password do
the administrators there specify?

I suppose the best thing to do would be to create a user account and
password that has sufficient privlidge to access reportserver but what kind
of authority and privlidge does this "user" have to have?

(did it ever occur to the designers of SSRS that it should work with
machine/ASPNET account? Like SQL Server does. Why does it work this way?)

--
Regards,
Gary Blakely

[quoted text, click to view]

Re: Insufficient Privlidges accessing SSRS objects weilu NO[at]SPAM online.microsoft.com
6/27/2006 12:00:00 AM
Hi Gary,

If you are in the workgroup environment, the domain name is your Machine
Name and the user name is your local user name and the password is your
password.

The ListChildren method returns only child items that the user has
permission to view. The items that are returned may not represent a
complete list of child items of the specified parent item.

In the report manager, you could assign a user to the System administrator
role and this role could view all the information.

Here is the steps:

1. In Report Manager, navigate to the Contents page, and open the folder
that contains the item that you want to apply a role assignment to.

2. Click the Properties tab.

3. Click the Security tab.

4. Perform one of the following:

If the item uses the security settings of a parent item, click Edit
Item Security, click OK, and then click New Role Assignment.

If the item already has item-specific security defined for it, click
New Role Assignment.

5. Type the name of a group or user account. You can specify only one
account name for each role assignment.

6. Select one or more role definitions that describe how the user or group
should access the item, and then click OK.

Hope this will be helpful!

Sincerely,

Wei Lu
Microsoft Online Community Support

==================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.





Re: Insufficient Privlidges accessing SSRS objects Tim Cartwright
7/25/2006 5:24:58 PM
Wei Lu, I think you totally misunderstood his question and hijacked his =
thread. You gave him a technically correct answer for reporting services =
if he was using windows authentication. HE IS NOT. HE IS USING FORMS =
AUTHENTICATION. Like Gary I need an answer to this question. I am =
building my own web front end to deliver the reports to the users, and I =
am having issues trying to figure out how to properly pass FORMS =
credentials to the web service.=20

[quoted text, click to view]
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=

[quoted text, click to view]
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=

[quoted text, click to view]
AddThis Social Bookmark Button