DB Permission: User can drop only their created db's?

I want to set permission against a user, which can create database and drop on their created databases neither any database. Any idea/suggestion ?

Well, not every company my afford them to  purchase addition license :-(
Best Regards,Uri Dimant SQL Server MVP,
http://sqlblog.com/blogs/uri_dimant/
MS SQL optimization: MS SQL Development and Optimization
MS SQL Consulting:
Large scale of database and data cleansing
Remote DBA Services:
Improves MS SQL Database Performance
SQL Server Integration Services:
Business Intelligence
you're right :-)
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from it

Similar Messages

  • User can edit only his own rows

    Hi,
    I have a simple generated application. I logged the user in the DB-table who has created the row. Now I want that all users can see all entries of the table (blackboard) and can create new entries, but the user can update only his own entries.
    Ideally he sees the Edit-Icon on the report only with the rows he created and he has the right to update.
    Regards, Juergen

    Juergen,
    Yes, I was answering a different question. A query like the following would show/hide the edit link based on a column's value:    select decode(ENAME,:APP_USER,
          ''||
    '<img src="#IMAGE_PREFIX#edit_big.gif" border="0" alt="Edit Big Icon">',
          null) Edit,
        ENAME,
        JOB
        from EMP Of course you want the edit page to check if the user requesting the page should be able to update the row corresponding to the primary key value passed in, just in case someone tampers with the URL and goes to the edit page directly. You could use an authorization scheme for that.
    Scott

  • How to user can view only allow sessions in operator

    dear all
    how to user can view only allow sessions in operator, user has a right to execute only one package.
    kindly help asap.

    What Database privilege (not EM privilege) does the new user have?

  • Windows 2008 R2 Active Directory User can not change their password

    Our AD domain already having two domain controllers with windows 2008 (not R2),  last week we added one more domain controler with windows 2008 R2 for that we run domain prep and forestprep. After this domain no  users can change their password by pressing ALT+CTRL+Del--Change password. Administrators can still reset the password, and if administrator provide the option change password and at next logon, it works, users can reset the password. But after login they can not.
    The error telling the new password does not meet length,complexity, history requirements. We are sure their is no Group policy which setting password/account policy. And even we tried to attach a simple password policy domain level with out complexity.
    Please provide a feedback..waiting for your response.
    Thanks

    additional info: up to Server 2008 R2, Windows ONLY supports ONE Password policy PER Domain. (exept: the R2 supports more pw-policies, but not with gpo, it has to be congifured with ADSI-Editor)
    So, in case you still use the 2008 / R2 - you Need to know that ;))
    regard..
    Stephan Ertel - MCITP/MCSA -
    From Windows 2008(Non R2) and higher is supported for more than one password policy with fine granted password polcy.DFL should be 2008.
    HTH
    Biswajit Biswas
    My
    Blogs|MCC
    |
    TNWiki
    Ninja  
    Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin

  • Howto troubleshoot outlook connector. users can't open their calendar

    Hello
    some companies that are our client cannot open their agenda when using outlook connector. if they use communications express (uwc) they can view it but not when accessing through the connector.
    what could be the cause of this. I am really clueless. i have asked the sjoc.log to see if can see anything.
    thank you.

    the actual problem is that an user can create events using outlook but his colleagues can't consult these events. it is a shared calendar and when using communications express/uwc they can access this data.
    here is a excerpt of the sjoc.log that has errors
         Created By: VERA Portal (7/07/2008 12:59)
    Dit is de melding die ik krijg:
    07/07/2008 12:58:02.170 (0x0174) {Genrl } [Warning]: =============== Sun ONE Outlook Connector OpenLogFile ===============
    07/07/2008 12:58:02.170 (0x0174) {Genrl } [Warning]: =============== Sun ONE Outlook Connector: Version 7.2.404.1
    07/07/2008 12:58:02.217 (0x0174) {Addin } [Warning]: SJUI Com Add-In is Loaded.
    07/07/2008 12:58:03.248 (0x0220) {Store } [Warning]: CSOCSConnection::ProcessDefaultCalendar GetJobStatus Failed 0x80004005
    07/07/2008 12:58:03.420 (0x0174) {Addin } [Error ]: libical returned 6 error(s)
    07/07/2008 12:58:03.467 (0x0220) {Store } [Warning]: CSOCSConnection::ProcessAllEvents Unbale to get JobStatus failed 0x80004005
    07/07/2008 12:58:03.545 (0x02d0) {Store } [Warning]: CXImapFldrCnct::Poll INBOX Poll Delayed
    07/07/2008 12:58:03.561 (0x02d0) {Store } [Warning]: CSOCSConnection::ProcessDefaultCalendar GetJobStatus Failed 0x80004005
    07/07/2008 12:58:03.717 (0x02d0) {Store } [Warning]: CSOCSConnection::ProcessAllTasks GetJobStatus Failed 0x80004005
    07/07/2008 12:58:03.764 (0x0510) {Genrl } [Warning]: =============== Sun ONE Outlook Connector: Version 7.2.404.1
    07/07/2008 12:58:03.811 (0x03f4) {Genrl } [Warning]: =============== Sun ONE Outlook Connector: Version 7.2.404.1
    07/07/2008 12:58:03.811 (0x03f4) {Store } [Warning]: S1OC ******MSProviderInit****** Opened log file.
    07/07/2008 12:58:05.326 (0x0220) {Store } [Warning]: S1OC ProcessAllContacts GetJobStatus Failed 0x80004005
    07/07/2008 12:58:10.217 (0x0174) {Store } [Warning]: CSOMSConnection::StartInboxPolling Inbox Delay OFF
    07/07/2008 12:58:10.436 (0x02d0) {Store } [Warning]: CXImapFldrCnct::UpdateNextUID New(2) <= Old(2)

  • Allowing user to access only documents created by him.

    Hi!, is there a way to allow users to read only the documents created by them?, so when they click on the browse data buttons on top they navigate through the documents created only by the specific user?
    Thank you!

    Hi,
    Please check Data Ownership Authorisation if the same is of help in your case.
    [Data Ownership Authorisation|https://websmp201.sap-ag.de/~form/sapnet?_FRAME=CONTAINER&_HIER_KEY=701100035871000371280&_OBJECT=011000358700004490662004E&_SCENARIO=01100035870000000183&]
    Regards,
    Jitin
    SAP Business One Forum Team

  • Users can't open their W-2's online

    I work in a public library.  When patrons use our public computers to download their W-2's from an employer they get an error prompting them to download Adobe reader.  We had this problem with 9.4.  When we upgraded to Reader X it resolved some of the issues, but some patrons still can't open their W-2's.  It doesn't seem to be specific to one website.  When some

    Hi,
    I am not able to understand your issue completely. Please correct me if I am wring, but as far as I understand your problem, you are saying that even though you have Adobe Reader X installed on your system, you are still being prompted to download Adobe Reader? Could you share a screenshot of the error message your are receiving.
    Also, you stated that you are not able to view PDFs inspite of having installed Adobe Reader X. Is the same happening for PDFs present on your local system or only for online PDFs?
    Thanks in advance
    Ankit

  • Viewing swf from HTML- user can view only once

    Hi,
    I have my swf files which are getting called in browser when user opens its corresponding page.
    To ensure my swf is not used by user for his other purposes, i had to strict it to view from HTML page which has a variable. Same variable is passed from swf to this HTML.
    if both variables does match then only swf starts preloading. this works fine for first time.
    But when user open the same page second time, he is only able to view preloader which does not progress further.
    When i delete my temp file then user is again able to view the swf only once.
    Can anyone tell me;
    1. what is reason the swf from temp file cannot access variable of its HTML
    2. am I doing it wrongly?
    3. do i need to clear cache everytime or their is another method to do it?
    Thanks.

    hello following is the code used;
    import flash.text.TextField;
    import flash.events.ProgressEvent;
    import flash.events.Event;
    import flash.display.MovieClip;
    //////////STAGE PROPERTIES//////////
    stage.showDefaultContextMenu = false;
    this.tabChildren = false;
    Mouse.cursor = "arrow";
    //////////CALL & SET VARIABLES//////////
    var Progress_txt:TextField = new TextField();
    var theFlashVar:String;
    var ver:String;
    var paramObj:Object = LoaderInfo(this.root.loaderInfo).parameters;
    for (ver in paramObj)
                    theFlashVar = String(paramObj[ver]);
    //////////START USER VERIFICATION//////////
    checkFlashvar();
    //////////HTML VERIFICATION//////////
    function checkFlashvar():void
                    //trace("CHECKING Flash VAR");
                    if (theFlashVar=="mystring01")
                                    InternalPreloader();
                                    //trace("pass var found");
                                    //InternalPreloader();
                    else
                                    //trace("VAR NOT FOUND");
                                    gotoLocalVar();
    //////////LOCAL VERIFICATION//////////
    function gotoLocalVar():void
    //////////LOAD LOCAL DATA////////// 
                    var keyLoader:URLLoader = new URLLoader();
                    keyLoader.dataFormat = URLLoaderDataFormat.VARIABLES;
                    keyLoader.addEventListener(Event.COMPLETE, chkLocalVar);
    //////////CHECK ERRORS//////////
                    keyLoader.addEventListener(IOErrorEvent.IO_ERROR, onLoadError);
                    keyLoader.load(new URLRequest("C:/code.txt"));
    //////////CHECK LOCALLY LOADED DATA//////////
                    function chkLocalVar(event:Event):void
                                    if (keyLoader.data.passKey == "mycode")
                                                    //trace("pass key found");
                                                    play();
                                    else
                                                    //trace("Local VAR NOT FOUND");
                                                    stop();
                                                    parent.removeChild(root);
    //////////LOCAL FILE ERROR HANDELLING//////////
    function onLoadError(evt:IOErrorEvent):void
                    //trace("TXT FILE NOT FOUND");
                    stop();
                    parent.removeChild(root);
    //////////INITIATE PRELOADER STATUS//////////
    stop();
    function InternalPreloader():void
                    stop();
                    Progress_txt.x = 400;
                    Progress_txt.y = 300;
                    addChild(Progress_txt);
                    //trace("load progress event");
    //////////CHECK PRELOADER STATUS//////////
                    if (this.loaderInfo.bytesLoaded == this.loaderInfo.bytesTotal)
                                    //trace("checking if condition");
                                    finishedLoading();
                    else
                                    progressLoading();
    //////////PRELOADER PROGRESS EVENT LISTENERS//////////
    function progressLoading():void
                    //trace("progrss loading is running");
                    this.loaderInfo.addEventListener(ProgressEvent.PROGRESS,onProgress);
                    this.loaderInfo.addEventListener(Event.COMPLETE, onComplete);
    //////////PRELOADER PROGRESS STATUS UPDATE//////////
    function onProgress(p:ProgressEvent):void
                    Progress_txt.text = String(Math.floor((p.bytesLoaded/p.bytesTotal)*100))+ "%";
                    preloader_mc.bar_mc.scaleX = (p.bytesLoaded/p.bytesTotal);
                    //trace("checking progress");
    //////////PRELOADER STATUS COMPLETE-REMOVE LISTENERS//////////
    function onComplete(d:Event):void
                    //trace("Fully loaded, starting the movie.");
                    play();
                    //removing unnecessary listeners
                    removeChild(Progress_txt);
                    loaderInfo.removeEventListener(ProgressEvent.PROGRESS, onProgress);
                    loaderInfo.removeEventListener(Event.COMPLETE, onComplete);
    //////////PRELOADER STATUS 100% (LOCAL CONDITION)//////////
    function finishedLoading():void
                    //trace("loading completed");
                    removeChild(Progress_txt);
                    play();

  • Creating an interface with several video windows where a user can connect their own camera to window

    Hi,
    I posted this in the Flash Media Live encoder Forum and it may have been the wrong place to get an answer.
    currently I use the following workflow for Live video streaming.
    I have FMLE on a computer streaming the Video feed to my FMS.
    I currenlty use  Dreamweaver to create window with a few instances of a video window and one of the windows is configured to rtmp to my server and the stream name of the stream I have setup in FMLE.
    This then streams to one of the windows.
    I then assign a different Stream name to the other windows.
    I send an FMLE client to a user in the locations that want to have a video presence on the webpage.
    I send them instructions and running FMLE and the parameters to use to get their camera up and running.
    This works fine to a point.
    Most of the users are not technically minded and so often this leads to issues and delays to get these things to work.
    I want to move on and improve this flow.
    I want to create the video instances on the page where:
    Below each video window is a text input field where a user can type in their name which will be used as the stream name.
    Below each video window is a button that the user clicks to connect their camera automatically without having to install FMLE.
    Once the video feed is running, only that user can click the button again to disconnect it. ( The button changes to "Stop Broadcast" etc).
    I have looked at the structure of Ustream for example, and this seems to be the method they use as you can download the XML file of your channe,l and the RTMP URL and stream name can be copied and then used directly in FMLE and you can stream with more control of your camera that way.
    Can you please provide instructions or guidance on how to begin this process?
    thanks

    Hi,
    Thanks for your interest in this kind of workflow.
    There are multiple ways to do it. Adobe Connect does this seamlessly.
    But to try out few of the latest technlogies, I recommend trying RTMFP. There is a hosted server where you can try out your sample client applications. There is also client application made similar to what you are looking for.
    Please go through http://labs.adobe.com/technologies/cirrus/

  • Can't change OWA settings so users can only enter their username

    Hi
    I have a root domain and a child domain with full trust in between.  Exchange 2013 servers are installed on the child domain.  All our users are in the child domain and root domain is empty.
    I want our users to enter ONLY their username to logon to OWA.
    I go to EAC > servers > virtual directories > owa settings > authentication > "user name only".  HOWEVER when I click on "Browse" button to pick my domain it ONLY shows the root domain in the list.  The domain
    that mailboxes are in and servers are in is missing from this list.  What gives?
    I appreciate your help.
    Thanks

    Hi,
    Before we go further, I‘d like to confirm the detail named method of your root domain and child domain. For example, root domain is domain.com and child domain is a.domain.com
    As far as I know, the logon domain property always automatically shows the default domain. Alternatively, we can depend on command to enable the authentication:
    Set-OwaVirtualDirectory "owa (Default Web Site)" -LogonFormat Username -DefaultDomain domian.com
    With the command above we set Exchange 2013 OWA to be user name only.Then restart IIS
    for the changes to be effective
    Thanks,
    If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Angela Shi
    TechNet Community Support

  • Open Directory users can't access shares

    Greetings all.
    I apologize if this has been covered, but I couldn't find a search term that would locate the issue.
    I have a 10.5.8 Server running on a MDD dual 1Ghz G4. I have it set up as an OD Master and providing time services, DNS, file sharing, portable home directories and calendaring for a small workgroup of 7 computers. At least that's the idea when it's functional.
    It is behind a NAT and only serves the local network.
    Until I have the user's data all transferred from local directories to portable home directories, I need to make it so that the users can access the shares.
    In testing, when I try to access a share, I get an error message that the login failed because the username or password was invalid.
    However, when I go look at the Password Service log, the user was authenticated and in good standing.
    Any ideas?
    Thank you,
    John

    maybe some additional information or rephrasing might help.
    I have users and groups set up with ACLs on the shares that are set up with automount over NFS. The shares should also be available via appleshare, but not automount.
    The users are configured now with Portable Home Directories.
    The client computers are bound to the Open Directory Master on which the shares reside.
    The server runs network time services and the client computers use that for their time service.
    The server also runs DNS, and the client computers use that DNS.
    Users can log into their Portable Home Directories ok.
    Users can not log into shares via "connect to server" as it says that the username/password is invalid, even though the password service log says that the user was authenticated and in good standing.
    Users can see the NFS automount shares at /Network/Servers/Library (where it is supposed to be), but they cannot write, even though the ACL gives the user account permission to do so.
    For the permissions on the automount, I can't tell if the user is not being detected as the authenticated user, and is therefore being given "everyone" permissions, or if the ACL is not working on the mount and so the user is being given ""everyone" permissions.
    Anyone have any idea how I can find out?
    As to why a user can't log in via "connect to server" I'm clueless.
    Thank you,
    John

  • Setup a system Users can get to corporate network thru wifi

    Hi everyone,
    I may be behind on this...but finally I got a chance to ask.... Currently my manager thinks about to setup a wifi system so that the users can log on the network thru the wireless... There are some questions I have...
    1.) Is it a good practice to make a AP to share both public and corporate traffics on a same wifi system (but they can be on different vlans)..? Why or why not?
    2.) We have Active Directory for the network authentications... I would like to ask which way can be used to enhance the network security, including user authentications and data encryptions...
    3.) Any more concerns I should have? Or what is the best model setup for this wifi system?
    Hope you can help or share your opinions...I will really appreciate.
    Takami Chiro

    1.) Is it a good practice to make a AP to share both public and corporate traffics on a same wifi system (but they can be on different vlans)..? Why or why not?
    Yes.  This has been the cornerstone of wireless.  A single AP, for example, can broadcast CORP and Guest SSID.  And CORP users can login to their accounts via wireless.  Guest users can get diverted to a website and accept the T&C and off they go to the internet.  Guest users do NOT have access to corporate resources.  
    2.) We have Active Directory for the network authentications... I would like to ask which way can be used to enhance the network security, including user authentications and data encryptions...
    Yes you can.  You can even dot DOT1X.
    3.) Any more concerns I should have? Or what is the best model setup for this wifi system?
    If you don't know what you're doing, then get a reputable systems integrator or else things won't get done right.

  • Users can't choose parameters

    I have 3 users who can't select parameters when running a report using Crystal Reports 2008. Other users can log onto their machines and run reports and they can select the parameters fine. When the 3 users log onto their machine or another machine, they can't choose parameters. There is no error, nothing happens when they click on anything in the parameter screen.
    This looked to me like a permissions issue, but these 3 users have the exact same permissions as all other users. Also, every setting in Crystal is the exact same for all users. We can't figure out why this is happening. Is there something else that needs to be checked?

    Do all the users use the same CR  login account?  IE.. lets say user 1, that has the issue, logs into there machine.
    Can not select params.  User 1 logs into another machine, can not select params.  A know working user logs
    into user 1's machine, no problems with reports.  That being the case, check the DB, the user 1, may not have
    the rights to the DB, or, they are not mapped correctly.  How do these users run the reports.  Web, CR, or some other method? 
    My guess is they can not access the DB to pull the values for the Parameter.

  • RMS stopped. Users told "only documents created in a signed application can be opened in a signed application"

    Hi
    I hope you can help and that this is the right forum.
    We have a RMS 1.0 sp1 server which has stopped working.
    Users get "only documents  created in a signed application can be opened in a signed application" when trying to protect a document in word or Outlook, and are unable to open previously protected documents.
    C:\Users\username\Local Settings\Application Data\Microsoft\DRM - only has the one file in it which is DRM-Machine. the .eul .CLC and .Gic files are missing from this folder.
    The server running the rms has an event id 82. " the callers machine certificate has a certificate chain that is not valid"
    I ran an irmcheck on the local machine which showed " No user Certificate"
    I can connect to the rms server urls , both licensing and certificate with no errors and IE shows the zone to be local intranet.
    Can anyone see what my problem might be and suggest why the workstations are not getting their certs and allowed protection? What else should I be checking?
    Best Regards
    Steen

    Hi
    Here is the answer which resolved my situation, I hope it helps yours.
    Guybrush-Threepwood I've marked your post as helpful as we had installed SP2 but it was not installed correctly and installing correctly was part of the solution.
    PROBLEM:
    Client began seeing the error:
    “Only documents created in a signed application can be opened in a signed application”
    On the server we were getting events:
    “The callers machine certificate has a certificate chain that is not valid”
    CAUSE:  
    Servers running RMS before SP2 can no longer get a valid Server Licensor Certificate.
    RESOLUTION:
    1. Install RMS v1 SP2 from:
    http://www.microsoft.com/en-us/download/details.aspx?id=14329
    2. Locate and then click the following key in the registry.
    For the enrollment URL on x86 versions of Windows Server 2003:
    HKEY_LOCAL_MACHINE\Software\Microsoft\DRMS\1.0\
    For the enrollment URL on x64 versions of Windows Server 2003:
    HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\DRMS\1.0\
    3. On the Edit menu, point to New, and then click String value.
    4. Type EnrollmentURL, and then press Enter.
     5. On the Edit menu, click Modify.
     6. Type
    https://activation.drm.microsoft.com/enrollment/enrollservice.asmx, and then click OK.
     7. On the Edit menu, point to New, and then click String value.
    8. Type CloudGicURL, and then press Enter.
     9. On the Edit menu, click Modify.
     10. Type
    https://certification.drm.microsoft.com/certification/certification.asmx, and then click OK.
    11. Go into the RMS Web interface and renew the SLC
    HTH

  • I have created a spreadsheet on numbers for ipad with a list of customers as a drop down menu. How can i make their address appear underneath when i select the customer?

    I have created a spreadsheet on numbers for ipad with a list of customers as a drop down menu. How can i make their address appear underneath when I select the customer?
    iselect the customer?

    Hi bazza,
    We won't be able to put the address from a formula into the same cell that you enter the customer's name. We can put the address in the cell under the customers name.
    First let's take James advice and concatenate the address in the address table.
    Here is the formula in G2
    =CONCATENATE(B2&"
    ",C2&"
    ",D2&"
    ",E2)
    It shows this way because after I clicked on B2 and typed [&"] (no brackets) I typed option-return
    This gives you your new line. Then I typed the closing ". I repeated this for the rest of the address.
    Next we want to bring this to your order sheet. I prefer using the two formulas OFFSET and MATCH instead of VLOOKUP.
    base tells OFFSETwhere to start counting from. Click A1.
    row-offset is for the row. we will use MATCH() -1 to give us the row.
    What MATCH does is give you the row number where something is found and you can specify an exact match. I usually construct the MATCH formula first and then cut and paste it into OFFSET. MATCH looks like this: MATCH(A2,Table 1::A,0). A2 is what we are looking for, Table 1A::A is where we are looking (the entire column A), and 0 means we want an exact match. Can you see it inside the OFFSET formula? Notice that we had to subtract 1 from its result.
    column-offset tells OFFSET which column A=0 so we want 6.
    we ignore "rows", "colomns" we don't need them.
    If this seems like too much, just break it down into small pieces.
    quinn

Maybe you are looking for