Click here to monitor SSC
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Can't browse databases in SSMS 2008


Can't browse databases in SSMS 2008

Author
Message
bob.probst+sqlservercentral
bob.probst+sqlservercentral
Grasshopper
Grasshopper (10 reputation)Grasshopper (10 reputation)Grasshopper (10 reputation)Grasshopper (10 reputation)Grasshopper (10 reputation)Grasshopper (10 reputation)Grasshopper (10 reputation)Grasshopper (10 reputation)

Group: General Forum Members
Points: 10 Visits: 50
Walked in this morning and was able to log into our cluster just fine but when I try to expand the Databases node in the Object Explorer, I get this:

TITLE: Microsoft SQL Server Management Studio
------------------------------

Failed to retrieve data for this request. (Microsoft.SqlServer.Management.Sdk.Sfc)

For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&LinkId=20476

------------------------------
ADDITIONAL INFORMATION:

An exception occurred while executing a Transact-SQL statement or batch. (Microsoft.SqlServer.ConnectionInfo)

------------------------------

The SELECT permission was denied on the object 'syspolicy_configuration', database 'msdb', schema 'dbo'.
The SELECT permission was denied on the object 'syspolicy_system_health_state', database 'msdb', schema 'dbo'. (Microsoft SQL Server, Error: 229)

For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&ProdVer=10.00.2841&EvtSrc=MSSQLServer&EvtID=229&LinkId=20476


I'm told that I'm set up as dbo on msdb.

I can query the data in the databases just fine. Just can't browse the objects (which is a huge productivity issue).

When connecting to other databases, I can browse them just fine.

This was working fine on Friday.

Any suggestions would be appreciated.
HowardW
HowardW
Ten Centuries
Ten Centuries (1.2K reputation)Ten Centuries (1.2K reputation)Ten Centuries (1.2K reputation)Ten Centuries (1.2K reputation)Ten Centuries (1.2K reputation)Ten Centuries (1.2K reputation)Ten Centuries (1.2K reputation)Ten Centuries (1.2K reputation)

Group: General Forum Members
Points: 1211 Visits: 9892
I suspect someone's probably started playing around with DENY permissions (either for your user/group/role or are trying to lock down the public role incorrectly).

If your user/role definitely has permissions, then I'd look into which other groups you fall into (usually just public unless something like the EVERYONE group has been added) and whether these have any explicit DENY permissions against the schema or the objects.

I'd be pretty sure it's because something has been changed, rather than hitting any kind of bug, so go and bother your DBA's :-)
SQLKnowItAll
SQLKnowItAll
SSCrazy
SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)

Group: General Forum Members
Points: 2798 Visits: 3682
Hi,

I'm not sure what you mean by "set up as dbo on msdb" as there are specific permissions associated with the user that need to be adjusted. My guess is that between Friday and today, somebody changed the role you were assigned to from the Server Roles. Have your DBA double-check your server roles and specific database mapping.

Thanks,

Jared

Thanks,

Jared
SQL Know-It-All

How to post data/code on a forum to get the best help - Jeff Moden
bob.probst+sqlservercentral
bob.probst+sqlservercentral
Grasshopper
Grasshopper (10 reputation)Grasshopper (10 reputation)Grasshopper (10 reputation)Grasshopper (10 reputation)Grasshopper (10 reputation)Grasshopper (10 reputation)Grasshopper (10 reputation)Grasshopper (10 reputation)

Group: General Forum Members
Points: 10 Visits: 50
Thanks for the thoughts. I'm not dbo on msdb -- was mistaken.

Granting me explicit select rights on msdb fixed the problem. but that's not really an acceptable long term solution.

The server admin tried adding his domain account to the database as a normal user and experienced the same problem. Which is very unusual. This would certainly point to something about the public role being messed up I think.
SQLKnowItAll
SQLKnowItAll
SSCrazy
SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)

Group: General Forum Members
Points: 2798 Visits: 3682
What exactly is a "normal user?" Can you please provide exact permissions for the user he tried to set up? Don't forget there is a public server role and a public database role.

Thanks,

Jared

Thanks,

Jared
SQL Know-It-All

How to post data/code on a forum to get the best help - Jeff Moden
jayw.ryan
jayw.ryan
Forum Newbie
Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)

Group: General Forum Members
Points: 5 Visits: 19
I am the server administrator (far from a DBA)

I can recreate this issue by creating a new user. New users by default have the "public" role. They should be able to browse any Databases that they have permission to. Just trying to understand what might have changed that would be denying this access for any and all new users that are created as well as an existing user.

When I look at the 2 views in question
The SELECT permission was denied on the object 'syspolicy_configuration', database 'msdb', schema 'dbo'.
The SELECT permission was denied on the object 'syspolicy_system_health_state', database 'msdb', schema 'dbo'. (Microsoft SQL Server, Error: 229)

I see that the only permissions that are applied are the 'PolicyAdministratorRole' and it is granted select permission. Can someone verify that this is the default?

Also, can I query for Deny permissions on the database, and see if any got applied by someone else?
SQLKnowItAll
SQLKnowItAll
SSCrazy
SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)

Group: General Forum Members
Points: 2798 Visits: 3682
Open the Security -> Server Roles folder and double-click on public. The default is "Grant" for "Connect" on all securables. That is it (1 box checked for each securable). Check that first. Also, what is the default database for a new user? Master?

Thanks,

Jared

Thanks,

Jared
SQL Know-It-All

How to post data/code on a forum to get the best help - Jeff Moden
jayw.ryan
jayw.ryan
Forum Newbie
Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)

Group: General Forum Members
Points: 5 Visits: 19
Yes, that is correct. Grant is selected for all securables. Master is the default. I have tried changing the users default database to a database they have dbo over, and I get the same results.
SQLKnowItAll
SQLKnowItAll
SSCrazy
SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)

Group: General Forum Members
Points: 2798 Visits: 3682
Try this link to see if it helps you:

http://www.techrepublic.com/blog/datacenter/reviewing-sql-server-permissions/466

Thanks,

Jared

Thanks,

Jared
SQL Know-It-All

How to post data/code on a forum to get the best help - Jeff Moden
SQLKnowItAll
SQLKnowItAll
SSCrazy
SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)SSCrazy (2.8K reputation)

Group: General Forum Members
Points: 2798 Visits: 3682
Also take a look at this:

http://stackoverflow.com/questions/1709150/permission-required-to-view-list-of-tables-in-management-studio

The main point of this article is that DENY will always override a GRANT...

Thanks,

Jared

Thanks,

Jared
SQL Know-It-All

How to post data/code on a forum to get the best help - Jeff Moden
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search