Click here to monitor SSC
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Dump SQL Permissions


Dump SQL Permissions

Author
Message
Kerry Conner-320974
Kerry Conner-320974
Forum Newbie
Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)

Group: General Forum Members
Points: 5 Visits: 408
This is a great idea for a tool - kudos to the author!

I'm having a problem with it that is probably because of something I'm doing wrong - I thought that I'd throw it out there and see if anyone else had the same issue.

I have an ID that has been granted permission to update a specific column in a table and has no other rights in the table. The DumpSQLSec tool doesn't report any type of access for the ID in the table. It does seem to catch all other permissions for this ID that are granted in regards to entire tables. Is this a bug or is it me?

Thanks!
cmille19
cmille19
SSC Veteran
SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)

Group: General Forum Members
Points: 275 Visits: 724
You're right it doesn't handle column permissions, the code is iterating through by object type and then for each object (table,view, stored procedure, function) executing the ListPermissions method. It looks like column is another object in SQL-DMO. I'm currently working on a Powershell script which uses SMO, once its finished I'll write an article about it. The Powershell/SMO script will handle column permissions correctly.

--Chad



John Ranger
John Ranger
SSC Rookie
SSC Rookie (46 reputation)SSC Rookie (46 reputation)SSC Rookie (46 reputation)SSC Rookie (46 reputation)SSC Rookie (46 reputation)SSC Rookie (46 reputation)SSC Rookie (46 reputation)SSC Rookie (46 reputation)

Group: General Forum Members
Points: 46 Visits: 47
Hello Steve,

yes I would like to look at it. May I ask you to send it over to me?

With kind regards,

John
cmille19
cmille19
SSC Veteran
SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)

Group: General Forum Members
Points: 275 Visits: 724
All,

I've completed a part-time 9 month project to write a utility called "SQL Server PowerShell Extensions (SQLPSX) which uses SMO, PowerShell, and SSRS to produce permissions/security reports including effective permissions by enumerating nested Windows AD/local and SQL Server roles. SQLPSX can be scheduled to run in batch mode and loads the collected security information into a database for reporting and analysis. Check it out on my CodePlex project site.

http://www.codeplex.com/SQLPSX



gene.infelise
gene.infelise
Forum Newbie
Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)

Group: General Forum Members
Points: 1 Visits: 0
Where can I download Dumpsqlsec?
cmille19
cmille19
SSC Veteran
SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)

Group: General Forum Members
Points: 275 Visits: 724
See links at bottom of article



MG-148046
MG-148046
SSCrazy
SSCrazy (2.2K reputation)SSCrazy (2.2K reputation)SSCrazy (2.2K reputation)SSCrazy (2.2K reputation)SSCrazy (2.2K reputation)SSCrazy (2.2K reputation)SSCrazy (2.2K reputation)SSCrazy (2.2K reputation)

Group: General Forum Members
Points: 2159 Visits: 2691
I was just about to roll my own when I came across this looking for an updated version of DumpSec. Thank you, Thank you, Thank You:-D:-D:-D

MG

"There are two ways of constructing a software design. One way is to make it so simple that there are obviously no deficiencies. And the other way is to make it so complicated that there are no obvious deficiencies."
Tony Hoare

"If you think it's expensive to hire a professional to do the job, wait until you hire an amateur." Red Adair.
mmahon 28175
mmahon 28175
Forum Newbie
Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)

Group: General Forum Members
Points: 1 Visits: 0
what version of client tools does it need?
cmille19
cmille19
SSC Veteran
SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)SSC Veteran (275 reputation)

Group: General Forum Members
Points: 275 Visits: 724
The solution relies on SQL-DMO and Excel. SQL-DMO is deprecated class for managing SQL Server. SQL-DMO is install with SQL Server 2000, but not with SQL Server 2005 or higher. You can install SQL-DMO from by downloading the "Microsoft SQL Server 2005 Backward Compatibility Components" from Microsoft Downloads. This download might be available for SQL Server 2008 also.



bcotton 50758
bcotton 50758
Forum Newbie
Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)Forum Newbie (1 reputation)

Group: General Forum Members
Points: 1 Visits: 89
Excelent tool! nice work... any version for SQL Server 2005? Thanks!
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search