Re: Sql Reporting Serviced - > ASP.NET ACCESS DENIED!

From: Nick Malik [Microsoft] (nickmalik_at_hotmail.nospam.com)
Date: 08/10/05


Date: Tue, 9 Aug 2005 23:24:19 -0700

Could you have cross-posted on more groups? Zowie!

Anyway, I just saw this error this evening on another app.

If you access your web app from a browser on the server, then the
credentials of the accessing user will be used, even if Impersonate is set
to true. Accessing from the client will respect the impersonation options
for ASP.Net. I'm sure that there is some secret config setting to change
this behavior, and perhaps, someday, I'll stumble on it. Until then...

The account you are logging in to when on the server doesn't have the
appropriate access. When accessing from the client, it is using a different
account, one with the appropriate permissions.

Tell me: do you have anonymous access or Windows Authentication?
In the web.config file, do you have <Impersonate> set to True? Are you
providing an account in the tag?

(I'll guess your answers: Windows auth, Impersonate = True, and you are
providing an account.) If that is the case, then the account you provided
in the impersonate tag has the correct permissions, but your login account
on the server does not.

-- 
--- Nick Malik [Microsoft]
    MCSD, CFPS, Certified Scrummaster
    http://blogs.msdn.com/nickmalik
Disclaimer: Opinions expressed in this forum are my own, and not 
representative of my employer.
   I do not answer questions on behalf of my employer.  I'm just a 
programmer helping programmers.
--
"Fabian von Romberg" <fromberg100@hotmail.com> wrote in message 
news:OpZCLYRnFHA.3120@TK2MSFTNGP09.phx.gbl...
> Hi, I have installed Sql Reporting Services on 2 machines, one is WIN 2000
> PRO and the other one is WIN 2000 ADV. SERVER.  When I try to access a
> report using the webbrowser, I get the following error, this happens only 
> if
> try access the report on the SERVER, it I try on my local machine, it 
> works
> just fine.  Any help will be much appreciated.
>
> Thanks in advance,
> Fabian von Romberg
>
>
> Server Error in '/Reports' Application.
> ----------------------------------------------------------------------------
> ----
>
> Access to the path "C:\Archivos de programa\Microsoft SQL
> Server\MSSQL\Reporting Services\ReportManager\bin" is denied.
> Description: An unhandled exception occurred during the execution of the
> current web request. Please review the stack trace for more information
> about the error and where it originated in the code.
>
> Exception Details: System.UnauthorizedAccessException: Access to the path
> "C:\Archivos de programa\Microsoft SQL Server\MSSQL\Reporting
> Services\ReportManager\bin" is denied.
>
> ASP.NET is not authorized to access the requested resource. Consider
> granting access rights to the resource to the ASP.NET request identity.
> ASP.NET has a base process identity (typically {MACHINE}\ASPNET on IIS 5 
> or
> Network Service on IIS 6) that is used if the application is not
> impersonating. If the application is impersonating via <identity
> impersonate="true"/>, the identity will be the anonymous user (typically
> IUSR_MACHINENAME) or the authenticated request user.
>
> To grant ASP.NET write access to a file, right-click the file in Explorer,
> choose "Properties" and select the Security tab. Click "Add" to add the
> appropriate user or group. Highlight the ASP.NET account, and check the
> boxes for the desired access.
>
> Source Error:
>
>      An unhandled exception was generated during the execution of the
> current web request. Information regarding the origin and location of the
> exception can be identified using the exception stack trace below.
>
> Stack Trace:
>
> [UnauthorizedAccessException: Access to the path "C:\Archivos de
> programa\Microsoft SQL Server\MSSQL\Reporting Services\ReportManager\bin" 
> is
> denied.]
>   System.IO.__Error.WinIOError(Int32 errorCode, String str) +393
>   System.IO.Directory.InternalGetFileDirectoryNames(String fullPath, 
> String
> userPath, Boolean file) +229
>   System.IO.Directory.InternalGetDirectories(String path, String userPath,
> String searchPattern) +24
>   System.IO.Directory.GetDirectories(String path, String searchPattern)
> +477
>
> Microsoft.ReportingServices.Diagnostics.Localization.GetInstalledCultures()
>   Microsoft.ReportingServices.Diagnostics.Localization..cctor()
>
> [TypeInitializationException: The type initializer for
> "Microsoft.ReportingServices.Diagnostics.Localization" threw an 
> exception.]
>
> Microsoft.ReportingServices.Diagnostics.Localization.SetCultureFromPriorityL
> ist(String[] localeList)
>   Microsoft.ReportingServices.UI.GlobalApp.Application_BeginRequest(Object
> sender, EventArgs e)
>
> System.Web.SyncEventExecutionStep.System.Web.HttpApplication+IExecutionStep.
> Execute() +60
>   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean&
> completedSynchronously) +87
>
>
>
> 


Relevant Pages

  • Re: Security Exception Microsoft .NET Framework Version:2.0.50727.42; ASP.NET Version:2.0.50727.42
    ... by default the asp.net system account does not have network access, ... I am struggling with a website on a W2K3 server which has the actual ... Exception Details: System.Security.SecurityException: Request for the ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Kerberos protocol transition is not working over DCOM
    ... can see the COM+ component's constructor being called on the server side. ... I haven't yet tried with a normal account. ... The account calling LsaLogonUser is service1 and it has the above six ... user1 is the account I'm trying to impersonate. ...
    (microsoft.public.platformsdk.security)
  • Re: security on the web.config file
    ... the reason I use the impersonate is the web site will allow ... different network shares on multiple servers so the impersonated account has ... the .config file can only we accessed from the server ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Global.asax not allowing identity impersonation?
    ... When you set Identity Impersonate=true, ... request processing. ... Not allowed to use the ASPNET machine account in SQL Server (very ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Server Application Unavailable
    ... Server Error in '/' Application. ... An unhandled exception occurred during the execution of the ... >> the installation directory allow access to the configured account. ... Go to a command prompt. ...
    (microsoft.public.frontpage.client)