ArcSDE 10, roles, and permissions validated?

GavinMcGhie — Mon, 19 Dec 2011 22:06:41 GMT

Hi all
Hoping someone can simplify things for me. We're moving from SDE 9.1 that a consultant set up long ago (Win 2K and SQL 2K) to SDE 10 (Win 2008 and SQL 2005). Lots has changed... Anyway, I'm trying to mimic what we did before. I'm pretty clear on dataset permissions via Catalog, but am a bit fuzzy on database permissions.

We have one user that is data ower and is given database permissions directly of create function/procedure/table/view. This is the user that loads all data and related tables. All other users only edit or view this data.

Then for all the users, we have 2 roles; 1 for editors and 1 for viewers. In SQL2000, the editor role was given create table/procedure/view and the viewer role was given no database permissions. In SQL 2005, I don't see any way to give a *database role* these permissions.

So, I'm unclear on what to do. I have re-created the 2 roles. I understand how to assign users to roles, and apply permissions to the roles via Catalog for the datasets. Do I still need to give the editor role the ability to create table/procedure? If yes, how is that done. In SQL 2000, right clicking the database>properties>permissions lists both users and roles. In SQL2005, I only see the users, even though it appears that I should see users and roles. What am I missing? Any guidance is greatly appreciated...
Thanks, Gavin

Re: ArcSDE 10, roles, and permissions validated?

BenLin — Fri, 06 Jan 2012 21:31:42 GMT

Hi Gavin,

For data editor and data viewer roles, you don't need to grant any permissions from SQL Server database level.

You can just login to the database as data owner user via ArcCatalog, then grant these privileges to the data editor role and/or data viewer role.

- Right click the feature datasets/feature classes, Privileges, then put the "data_editor" or "data_viewer" role name.

Grant View (SELECT) to data_viewer
Grant both View (SELECT) and Edit (UPDATE/INSERT/DELETE) to data_editor

- Then connect as one of the users (from "data_editor" or "data_viewer" role), check if you have the right permissions to view or edit the data.

Thanks,
Ben

topic Re: ArcSDE 10, roles, and permissions validated? in Data Management Questions

ArcSDE 10, roles, and permissions validated?

Re: ArcSDE 10, roles, and permissions validated?