RE: [Emerald] Client Permissions Revisited

David V. Brenner ( (no email) )
Wed, 19 Jan 2000 15:49:34 -0800

: I've created an account in the EmeraldSecure SQL as well as a new operator
: group called 'Remote Setup'. I have given this group the ability to read
: and add MBRs and Services only. Despite these settings, users in
: this group
: can make modifications to both MBR fields and Service fields. How do I
: prevent this?

This is bizarre. I simply cannot get these permissions straight.

With the user configured as above (plus read-only report and RadLog access),
The Invoices and Batch buttons are grayed out as one would expect. However,
I cannot view reports (even with ODBC set up as 'sa'!) and get the following
error: 'StartPrintJob in PrintCustom caused an error: SQL server error' I
don't understand this, especially since the user even has a SAM membership
in the Emerald group for the central reports directory and share.

Perhaops even more bizarre, if I change the SQL group (not the operator
group where all the permissions are assigned) for the user, the Invoices and
Batch buttons show up again and I can run the reports - albeit very slowly.

Combine this with the fact that the user can modify services and MBRs
independent of the intended permissions and I am totally stumped. Is it me
or is the permissions mechanism in Emerald totally screwy?

___________________________________
David V. Brenner - dvb@cport.com
International Services Network Corporation
http://www.cport.com

For more information about this list (including removal) go to:
http://www.iea-software.com/support/maillists/liststart