Re: GRANT CONNECT to group? - How?

Hi Russell,

I'm sorry for taking so long to reply... Took a couple of days off....

Thank for for helping me on this!

However, I'm afraid I didn't quite catch your e-mail. After reading the English version of MSDN now I can understand those different SQL Server logins that can be used. (The German version tends to be badly translated. Although it uses correct words, their position in a sentence give emphasis to the wrong words.)

But...

I've set up a SQL Server login which I've granted execution rights to:

CREATE LOGIN PcUser ...
CREATE ENDPOINT Cockpit ...
GRANT CONNECT ON ENDPOINT::Cockpit TO PcUser

How would I now connect to the web service? How would I provide user credentials?

Your help is very appreciated!

Best regards,
Axel Dahmen


----------------
"Russell Fields" <russellfields@xxxxxxxxxx> schrieb im Newsbeitrag news:OTs%23D6$vIHA.3384@xxxxxxxxxxxxxxxxxxxxxxx
Axel,

ENDPOINTs can only have rights granted or denied to server principals, not
database principals. That is why the database role cannot get rights.

Actually, you cannot grant or deny to SQL Server users (a database
principal) either. You can grant or deny use of an endpoint to the
following server principals (from the BOL):
SQL_Server_login
SQL_Server_login_from_Windows_login
SQL_Server_login_from_certificate
SQL_Server_login_from_AsymKey

If you intend to use trusted connections for your users (Domain/Username)
then you could create a Windows Group (Domain/GroupOfEndpointUsers) and make
that a SQL_Server_login_from_Windows_login. At the domain level, make all
of the users that you want to have access to the endpoint members of that
Windows group. Then, on the SQL Server you could:

GRANT CONNECT ON ENDPOINT::YourEndPoint TO Domain/GroupOfEndpointUsers;

(This is all BOL stuff, since I do not use endpoints on my servers.)

RLF

"Axel Dahmen" <KeenToKnow@xxxxxxxxxxxxxxxx> wrote in message
news:76D7F66F-7D47-47E4-8311-8C24A76275EA@xxxxxxxxxxxxxxxx
Hi,

I've created a web service endpoint on SQL Server 2005. But I failed trying
to give access to a database role. I can only grant access to SQL Server
users.

Am I doing something wrong here?

Your help is appreciated.

Axel Dahmen


.

Loading