Deny user from seeing/selecting from tables but allow access to certain view

Need some assistance. I have a database on SQL Server 2008 R2. Using windows authentication and a custom group, I control who can access the database and serve up the data via a web application.
I now have a requirement to allow users to connect to the data using Power Pivot, but do not want to allow users to see all tables/views, I want explicitly control what they see.
How do I lock everything down so that users can still view the data from a defined view but limit access to the other tables and views ?
In essence, my users should not be able to see/select from any of the tables or views except for a specific view that I want them to have access to.
Thanks

If the View and the Table are in the same database and have the same owner, then a user who has SELECT permission on the View does not require any permissions on the table.
See
Ownership Chains
David
David http://blogs.msdn.com/b/dbrowne/
http://blogs.msdn.com/b/dbrowne/

Similar Messages

What is the defference between select single * from and select * from Where

What is the defference between select single * from and select * from Where
which is prefferable and best one.

Hai,
*Difference Between Select Single and Select * from table UpTo One Rows:*
According to SAP Performance course the SELECT UP TO 1 ROWS is faster than SELECT SINGLE because you are not using all the primary key fields.
select single is a construct designed to read database records with primary key. In the absence of the primary key, it might end up doing a sequential search, whereas the select up to 1 rows may assume that there is no primary key supplied and will try to find most suitable index.
The best way to find out is through sql trace or runtime analysis.
Use "select up to 1 rows" only if you are sure that all the records returned will have the same value for the field(s) you are interested in. If not, you will be reading only the first record which matches the criteria, but may be the second or the third record has the value you are looking for.
The System test result showed that the variant Single * takes less time than Up to 1 rows as there is an additional level for COUNT STOP KEY for SELECT ENDSELECT UP TO 1 ROWS.
The 'SELECT SINGLE' statement selects the first row in the database that it finds that fulfils the 'WHERE' clause If this results in multiple records then only the first one will be returned and therefore may not be unique.
Mainly: to read data from
The 'SELECT .... UP TO 1 ROWS' statement is subtly different. The database selects all of the relevant records that are defined by the WHERE clause, applies any aggregate, ordering or grouping functions to them and then returns the first record of the result set.

I could do this before installing Maverick but cannot do it now.It is nice and convenient how Mac OS X Mail displays messages semi-automatically when you just select them. But wouldn't a bigger view of the mailbox be useful sometimes? Yes, and it's easier

It is nice and convenient how Mac OS X Mail displays messages semi-automatically when you just select them. But wouldn't a bigger view of the mailbox be useful sometimes?
Yes, and it's easier to get than you maybe think.
Hide the Preview Pane and Delete Mail Without Opening It in Mac OS X Mail
To hide the message preview pane in Mac OS X Mail:
Double-click the bar that separates the message pane from the mailbox pane.
Now, to delete any email:
Highlight the message or messages you want to delete.Hold down the Command key while selecting with the mouse to highlight multiple emails and Shift to highlight a range.
Press Del.
To get the preview pane back, double-click the same bar again.
Cannot do this now since installing Maverick

It is nice and convenient how Mac OS X Mail displays messages semi-automatically when you just select them. But wouldn't a bigger view of the mailbox be useful sometimes?
Yes, and it's easier to get than you maybe think.
Hide the Preview Pane and Delete Mail Without Opening It in Mac OS X Mail
To hide the message preview pane in Mac OS X Mail:
Double-click the bar that separates the message pane from the mailbox pane.
Now, to delete any email:
Highlight the message or messages you want to delete.Hold down the Command key while selecting with the mouse to highlight multiple emails and Shift to highlight a range.
Press Del.
To get the preview pane back, double-click the same bar again.
Cannot do this now since installing Maverick

Forcing a user to only select from Parameter LOV list

Hi,
I suspect that the answer is no but I'd appreciate clarification on the matter. I am wondering if there is any way to prevent a user entering a value into a parameter field - I want them to only select from the parameter's drop down LOV list. This will apply to Discoverer Viewer but would like to know if it could be done for Plus ( or not ) as well,
Kevin.

Hi Kevin
Try changing the item class property called Require user to always search for values.
According to my notes: This is unchecked by default. If you check this, Discoverer will launch the Search dialog box whenever a user clicks on the list of values. Should you have a large list of values, you may want to consider turning on this optionto making the LOV box pop up automatically.
I am not convinced this will make the pop-up come up but it's worth a try.
I'd be interested in hearing how you get on.
Best wishes
Michael

To fetch recodrs from cursor selecting from temporary table

Hi all
in my form iam creating a temporary table dynamically . from this table cursor is
fetching records.
table is creaitng dynmaically so i dn't knw the colmn name so how i can take the rows to display
i had wriiten like this
declare
CURSOR C1 IS SELECT * FROM TMPTBL;-- IS THE TEMPORYTABLE
XREC C1%ROWTYPE;
Begin
OPEN C1;
     LOOP
     FETCH C1 INTO XREC;
     EXIT WHEN C1%NOTFOUND;
TXT:=XREC.FIELDNAME??/??? HOW WE CAN SEPCIFY HERE
end loop
end;
HOW WE CAN SELECT XREC.(FIELDNAME) . ACTUALLY FIELD NAME IS NOT KNOWN
Thanks and regards
Vivek

Acutally i have to export the rows from the views to a excel file.
when i select a view from from that view contents i have to export to excel .
for that when exporting am creating a temporay table with the contents of the selected view.
And by fetching the rows from table i ahev to export it to excel by
using DDE.POKE Statement
Is there any other way to do this
Thnks and regards

User can see the subject are but nothing under the subject area.

Hi
I have OBIEE 11g.
I was thinking this is a very simple case where I have one subject area for which I want to create a user such that it can create analysis and reports on that subject area.
I BIAdmin can do that currently.
So I created a new user in console. Under the 'Groups' tab of this user, I choose 'BIAuthors' from the 'Parents Group Available'.
Then I logged in as this user. User was able to see the subject area but only the header. When it clicks on the expand ( + icon in tree) it expands to nothing.
So i logged into the rpd and Under Identity -Manage , and open the properties for BIAuthor. and under Permissions , I gave BIAuthor the permission to the subject area.
That did not help.
I also opened the subject area from the presentation layer and under permission I made sure that "Everone" has Read access.
But even after a bounce the user just sees the header and it expands to nothing,
Any suggestion.
(I was also thinking that why do I see BIAuthors in weblogic where as BIAuthor in rpd (without s ). I was thinking the rpd BIAuthor is something from 10g version.
Thanks for all the help.
Edited by: user6287828 on Sep 13, 2012 2:33 PM

Hi,
Better to decline the subfolder permissions from the user @answers,then user can only see the subject area but he can't access the subfolders...
mark if helpful/correct...
thanks,
prassu

Created a user with permissions to one table, but unable to access the table

I've tried to create a Login that will have access to a single table from a few different databases.
When I try and query the table, using the created Login I get the following error:
"The server principal "log_Reader" is not able to access the database "MyDB" under the current security context."
Here's the SQL I used to create the Login/User:
USE MASTER
GO
CREATE LOGIN log_Reader
WITH PASSWORD = '<password>'
GO
USE DB1
GO
CREATE USER log_Reader FOR LOGIN log_Reader
GRANT SELECT ON dbo.logtable TO log_Reader
USE DB2
GO
CREATE USER log_Reader FOR LOGIN log_Reader
GRANT SELECT ON dbo.logtable TO log_Reader
USE DB3
GO
CREATE USER log_Reader FOR LOGIN log_Reader
GRANT SELECT ON dbo.logtable TO log_Reader
USE DB4
GO
CREATE USER log_Reader FOR LOGIN log_Reader
GRANT SELECT ON dbo.logtable TO log_Reader
Does anyone have any ideas what I've missed ?
Thanks, Jason
MCITP BI Developer - MCTS SQL Server (http://bichopsuey.wordpress.com/)

I cannot reproduce the error, can you run my script?
USE [master]
GO
CREATE LOGIN [test1] WITH PASSWORD=N'test',
DEFAULT_DATABASE=[master], CHECK_EXPIRATION=OFF, CHECK_POLICY=OFF
GO
USE [B]
GO
CREATE TABLE [dbo].[t1](
[c] [int] NULL,
[c2] [char](1) NULL
) ON [PRIMARY]
CREATE USER [test1] FOR LOGIN [test1] WITH DEFAULT_SCHEMA=[dbo]
GO
GRANT SELECT ON [t1] TO [test1]
EXECUTE AS USER = 'test1';
--Use B database
SELECT * FROM [t1] ---works
REVERT
USE master
GO
EXECUTE AS USER = 'test1';
SELECT * FROM B.dbo.[t1] ---works
REVERT
Best Regards,Uri Dimant SQL Server MVP,
http://sqlblog.com/blogs/uri_dimant/
MS SQL optimization: MS SQL Development and Optimization
MS SQL Consulting:
Large scale of database and data cleansing
Remote DBA Services:
Improves MS SQL Database Performance
SQL Server Integration Services:
Business Intelligence

HT4796 have migrated the info from old pc to mac, but cant access it, and ideas?

i have migrated the info from my old PC, but cannot access it, any advice please?

Do this from the system preferences window.
Click on Users&Groups.
Click on the padlock (bottom left) to unlock it if it's not unlocked.
Then highlight the account in the left pane that you want to remove...
and then click on the MINUS symbol on the bottom left of that window.
Just make sure when you delete an account, that you're currently NOT LOGGED INTO that account, or it's not going to work.
Feel free to chose the delete home-folder option when it prompts you.

I have uploaded the photos from my PC to iCloud but cannot access them on my ipad

I Have uploaded my photos to iCloud from my PC but cannot access them with the photo app.

I have tried numerous times but no actual picture. There is a frame for the pictures on keynote but the picture does not seem to be available.

Delete L.H.S spaces from field in database table but not for Report

Dear Experts
I m facing a problem...actaually i have replaced 999 by blank in a field of database table record.
Like :     999 abcde
             999999 hjklmn
             9999 klplmj
             99999 hjsfhh
I have replaced 9 by blank. and using CONDENSE statement i have avoid the left hand side spaces of 9 in the database table.
Means the data is updated in database table following below using Condense.
Like:     abcde
            hjklmn
            klplmj
            hjsfhh
Now, the problem is that these spaces is showing in the Report. The left hand side spaces is not deleting from the Report. But these spaces is not showing in the databse table.
Plz tell me wat is the reason and wat is the solution to avoid these space from the Report.
Note: That field is Character Field.   KNA1-STRAS
Thanks and Regards,
Swapnika

Hello
Try to use
SHIFT c LEFT DELETING LEADING SPACE.
instead of
CONDENSE...

ITunes shared user vanishes when selected from left hand list

When I bring up iTunes and I get the other computers on the network and I select the "Music Server" we have (eMac G4) it just goes away. If I try from the server side to select my MBP it works just fine. All sharing is the same on all 3 of our macs. I have wireless thru airport "n" on 2 of the bases. What I don't understand is why it works server to laptop/iMac but not the other way around? Am I facing a conflict with the two bases? The main box is the newest model the other is the first giga bit model (053). I did have the eMac on hanging off the newest Airport Extreme and it worked fine. When I add the other older Extreme and hung the eMac off (the same as first iteration) I started this problem...I'm really confused?!?!?!?!?! ANY HELP?????

Restart of the eMac cleared it up. Was having problems with the two Airport Extremes working correctly. That was an amperage problem with my circuit protector - a whole nother story!

User able to select the table,yet unable to fetch data..Strange!!

Hi Experts,
I have a USER who is being granted a SELECT priv on particular table. He tried to fetch the data, but yeilds 0 bytes at the end..
Here is a detail:
GRANTEE OWNER TABLE_NAME GRANTOR PRIVILEGE GRA HIE
UMA DNBPRIME DNB_SKAR_PEOPLE DNBPRIME SELECT NO NO
SQL> connect uma/******
Connected.
SQL> select count(*) from dnbprime.dnb_skar_people where fragmentindicator = 1304;
COUNT(*)
0
For me it is quite strange, but I guess some security policy may be in place. But the issue is my client wants to fetch the data. What should I do Now.
Regards,

>
So It seem s I was bit right..There are some FINE GRAINED ACCESS restrictions in place..
>
Based on what? Just because SB suggested it?
If you did some checking and found there is some RLS in place post what you did and what the results were. This forum is to help everyone understand what is happening not just to answer your question.
>
I have a USER who is being granted a SELECT priv on particular table. He tried to fetch the data, but yeilds 0 bytes at the end..
>
That user was granted privileges to see their data. They don't have any data to see.
>
Any workaround to fetch the data.
>
Sure - look through your DBAs desk and computer when they are at lunch. Often they will leave their password written down somewhere and you can sneak a copy of it.
That way you can violate your company's security policy whenever you want and if anything bad happens they will blame the DBA.
The 'workaround' is to get permission for the RLS policy to be changed or permission for the user to use a different account that can see the data.

My fb photos have disappeared from their albums using firefox but i am able to view them using safari. It only happened after i tried to delete one of the photos of myself.

I right clicked the photo and selected one of the options but can't remember the option was and then all the "photos of me" were gone and the other albums when opened up are empty, cannot view. I also cannot view any other photos on my wall when i try to open them up.

*A way to see which images are blocked is to click the favicon (Site Identification icon) on the left side of the location bar.
*A click on the "More Information" button will open the Security tab of the "Page Info" window (also accessible via "Tools > Page Info").
*Open the Media tab of the "Page Info" window.
*Select the first image and scroll down though the list with the Down arrow key.
*If an image in the list is grayed and there is a check-mark in the box "Block Images from..." then remove that mark to unblock the images from that domain.

Is there a way to go back to view/select from radio selections from an earlier week?

Is there a way to go back a week or so to access earlier lists of albums or artists on itunes Radio

boshalosh wrote:
I have a jpeg image that was exported from indesign a long time ago. I no longer know where the indesign file is located or it's name, but I need to edit the text of the jpeg and the only way to do that is by editing the original indesign document and reexporting it. Is there a way to trace back an indesign document from which a certain jpeg was exported?
Depending on how the text interacts visually with the image, it might be possible to use the fill property of the content-aware deletion feature of recent Photoshop versions to remove the text with little or no evidence of the deletion, then apply text over the graphic however you like.
HTH
Regards,
Peter
Peter Gold
KnowHow ProServices

I have two user accounts with the same name, but cannot access the old one anymore - all my purchases are on that account! How do I merge the accounts, or recover that particular one?

I recently encountered a problem with both my account, for some reason it wouldn't accept my new password. And this was about the fith time I'd had to change it! I even wrote it down to ensure I wasn't mistyping it. But for some reaon it wasn't letting me log in form my phone or from my ipad. So I tried to reset it once again. However when I visited the website and searched for my username, it came back saying my 'account name doesn't exist!' I tried again and again but nothing. I thought maybe it would fix itself if I created a new account with the same details, so I did. But now none of my past purchases or my wishlist are showing up - and all my details are exactly the same! I've tried logging in using the old passwrd for my 'other' account but it's not working. And I tried searching for it again to reset the passwrod but it only resets this NEW account.
I tried sending a request for help, but I need someone with more authority to talk to.
Please help!

Antaeus00 wrote:
I tried sending a request for help,
But did you succeeed in sending a request for help?
Did you receive a response? How long has it been since you sent a request?
but I need someone with more authority to talk to.
There is no one with more authority than iTunes store support. We herem are only users.

Deny user from seeing/selecting from tables but allow access to certain view

Similar Messages

Maybe you are looking for