Wednesday, March 21, 2012
how to setup db replication with objects owned by user other than dbo?
between servers. The many of the tables, stored procedures and views are
owned by a user (e.g. USER1). The version running is SQL 2000. Lets take for
instance snapshot replication from Server1 to Server2.
Now I know that many people are having problems with replicating a database
and ending up realising that the tables, stored procs and views are now
owned by dbo. I want the replicated database objects owned by USER1. What do
I have to do? Do I:
1) create USER1 on the Server2,
2) and then start snapshot replication from Server1 assigning "Publication
properties > Articles > Article Defaults > Destination Table Owner" = USER1
?
3) then move across USER1's permissions to the replicated objects (not sure
how to proceed with this, I think i have to use ).
or do I:
1) create USER1 on the Server2,
2) use DTS to create empty table structures on Server2
3) and then assign USER1 the permissions
I am somewhat confused because USER1's permissions are dependent on the
tables being defined, and the tables are dependent on USER1 having ownership
on them. I dont know what to set up first.
Simply stated, how do I simply "set up a replication from scratch for a
database with objects owned by a user other than dbo"
Could anyone direct me?
Thanks!
PeterGenerate SQL Script of login,
Execute it on new server (create login + permissions +
add_role logins... )
then DTS the objects of the server (what you want) to the
other server...
>--Original Message--
>Hi, I was hoping someone could tell me how I am to
replicate a database
>between servers. The many of the tables, stored
procedures and views are
>owned by a user (e.g. USER1). The version running is SQL
2000. Lets take for
>instance snapshot replication from Server1 to Server2.
>Now I know that many people are having problems with
replicating a database
>and ending up realising that the tables, stored procs and
views are now
>owned by dbo. I want the replicated database objects
owned by USER1. What do
>I have to do? Do I:
>1) create USER1 on the Server2,
>2) and then start snapshot replication from Server1
assigning "Publication
>properties > Articles > Article Defaults > Destination
Table Owner" = USER1
>?
>3) then move across USER1's permissions to the replicated
objects (not sure
>how to proceed with this, I think i have to use ).
>or do I:
>1) create USER1 on the Server2,
>2) use DTS to create empty table structures on Server2
>3) and then assign USER1 the permissions
>I am somewhat confused because USER1's permissions are
dependent on the
>tables being defined, and the tables are dependent on
USER1 having ownership
>on them. I dont know what to set up first.
>Simply stated, how do I simply "set up a replication from
scratch for a
>database with objects owned by a user other than dbo"
>Could anyone direct me?
>Thanks!
>Peter
>
>
>.
>
Monday, March 19, 2012
How to set up permissions for a user, who need to work with SQL Server Agent
I am looking for a good idea or best practice for setting up a security plan which allows users to execute a specific job, owned by the SQL Server Agent Service Account.
I tried to use the msdb SQLAgentOperatorRole, but unfortunately I recognized, that every local job could be executed.
I would like to have only one job executed by the user and all others should be visible, but not executable.
What is the best practice for this request? Can Proxies and credentials be helpful and if yes, how do I have to use them?
In other words: what is the best approach for this request (end user should see and start specific jobs in the SQL Server Agent).
Thanks in advance
Norbert
Owner can execute job as well.|||
Thanks for the hint, but I do not want to have this user as an owner. The owner should be another account. This user (developer) should only have the capability to execute jobs we (DBA) provided to him. He should not see ALL jobs nor should he execute ALL jobs. I would like to set permissions in a way that he can start/stop/enable/disable ONE specific job.
Is there an easy way to realize it? Or maybe a more complicated way?
Regards
Norbert
How to set up a login that should execute a specific SQL Server Agent job
I am looking for a good idea or best practice for setting up a security plan which allows users to execute a specific job, owned by the SQL Server Agent Service Account.
I tried to use the msdb SQLAgentOperatorRole, but unfortunately I recognized, that every local job could be executed.
I would like to have only one job executed by the user and all others should be visible, but not executable.
What is the best practice for this request? Can Proxies and credentials be helpful and if yes, how do I have to use them?
In other words: what is the best approach for this request (end user should see and start specific jobs in the SQL Server Agent).
Thanks in advance
Norbert
Has no one an idea?
Regards
Norbert
|||I hope, that someone xould give me some hints if it is possible to realize the scenario or not.
Regards
Norbert
How to set up a login that should execute a specific SQL Server Agent job
I am looking for a good idea or best practice for setting up a security plan which allows users to execute a specific job, owned by the SQL Server Agent Service Account.
I tried to use the msdb SQLAgentOperatorRole, but unfortunately I recognized, that every local job could be executed.
I would like to have only one job executed by the user and all others should be visible, but not executable.
What is the best practice for this request? Can Proxies and credentials be helpful and if yes, how do I have to use them?
In other words: what is the best approach for this request (end user should see and start specific jobs in the SQL Server Agent).
Thanks in advance
Norbert
Has no one an idea?
Regards
Norbert
|||I hope, that someone xould give me some hints if it is possible to realize the scenario or not.
Regards
Norbert