topic Re: list sde users permissions/privileges in Data Management Questions

list sde users permissions/privileges

Anonymous User — Wed, 22 Sep 2010 18:43:52 GMT

Original User: alnesbit

Hello all,

I'm using 9.3 ArcGIS Server sql server sde. Is there any way to get a list of the users permissions/privileges to which feature classes? Basically I would like a list of the feature classes and which users have edit rights, viewing rights etc to them. I see this old post: http://forums.esri.com/Thread.asp?c=158&f=2284&t=282912&mc=2#msgid877028

Thanks

Re: list sde users permissions/privileges

VinceAngelo — Wed, 22 Sep 2010 19:15:53 GMT

Even if you have the list of users, you'd still need to know the passwords of each to have the
database report permissions though ArcObjects or ArcSDE. So you'd need to use database
techniques to obtain this, as Rob's post suggests.

- V

Re: list sde users permissions/privileges

Anonymous User — Thu, 23 Sep 2010 11:43:58 GMT

Original User: alnesbit

Ok, so do you have any idea how I would do this? And I would do it in sql server, right? Or do you know where I could find out how to do this?

Thanks

Re: list sde users permissions/privileges

VinceAngelo — Thu, 23 Sep 2010 12:22:46 GMT

I generally manage permissions through roles from creation scripts, so I know exactly what
permissions should exist on each table. Exploring this from the database side is a rather
involved task; I would need to review the entire database security architecture, consult
experts (as found in a database vendor's forums), and then once I had the database matrix
of tables/users/roles/permissions, I'd need to reconcile that with feature datasets and
ancillary/support tables. It's not an impossible task, but it is likely to be tedious and
painstaking. 😞

Good luck.

- V

Re: list sde users permissions/privileges

Anonymous User — Thu, 23 Sep 2010 15:31:06 GMT

Original User: alnesbit

Ok.

So if I re-put on permissions on each feature class for a user it will reset it to that level, right? For example, if User4 had edit permissions on parcels but I didn't want that, if I right click parcels and say that User4 only has read permissions, then they'll only have read permissions? Seems like that's how it would work.

Then I guess I don't need to know what privileges they currently have as long as I can reset it that way.

Thanks,

Re: list sde users permissions/privileges

VinceAngelo — Thu, 23 Sep 2010 16:50:47 GMT

I always manage permissions by role (create a role, grant table access to the role,
grant the role to users), so editing access through users would make my life much
harder, but if you don't have any roles, then you could do it that way. You might
need to revoke all access first, just to clear the previously granted access.

- V

Re: list sde users permissions/privileges

Anonymous User — Mon, 27 Sep 2010 12:02:14 GMT

Original User: alnesbit

You might
need to revoke all access first, just to clear the previously granted access.

- V

Ok, how do I revoke all access first? Do I just go to set permissions to the user and leave them all unchecked?

Thanks

Re: list sde users permissions/privileges

RobertHu — Mon, 27 Sep 2010 14:34:54 GMT

You are right if you are using ArcCatalog 9.3.1 or early version. But before doing it, ensure no one is on the the feature class.

If you use 10, you have to explicitly select "REVOKE".

Thanks!

Re: list sde users permissions/privileges

Anonymous User — Wed, 06 Oct 2010 18:07:37 GMT

Original User: alnesbit

ah ha! Found it with the awesome help of Jonathan from Tech Support. About to install it, hope it works. http://arcscripts.esri.com/details.asp?dbid=15123

Cheers,

Re: list sde users permissions/privileges

JimBergstrom — Fri, 15 Oct 2010 22:58:07 GMT

At ArcGIS 9.x, there were 2 ArcSDE Privileges tools available as ArcScripts: the "ArcSDE User Privileges Report" mentioned by alnesbit above, and the "ArcSDE User Privileges Tool", which was my preference because it allowed the owner of a feature dataset to not only view privileges, but also to add and remove them in a compact little window. However, there is apparently no update for v10, and the 9.x version doesn't install in v10.

The loss of this tool (and the GDBT) has forced me to keep a 9.3.1 install on one of my servers just to do the SDE admin tasks that these tools made a lot easier.

Has anyone heard any rumors of v10 updates for these privilege tools? (The Privileges tool in the Toolbox at 10 is really clunky, and no more functional than the right-click Privileges option at v9.)

Thanks.
JMB

Re: list sde users permissions/privileges

Anonymous User — Mon, 18 Oct 2010 14:23:54 GMT

Original User: zroberthu

I contacted John, who is the developer for the ArcSDE User Privileges Tool, last week. He said "a new version for 10 is under construction". Unfortunately, he didn't mention when it would be available.

Sounds like lots of us need that tool. Hopefully as soon as someone sees the new version out, s/he can spread the news in this community.

Thanks!

Robert