Permissions problem?

Hi, my company is using VSS with Visual Studio 2005. VSS is installed on the local Domain Controller (yeah, I know, not recommended). There were 5 developers working on a project, and they could access the database just fine. When 2 others arrived and accounts were created for them, they couldn't access the source trees anymore. I mean they're able to log in, and they see the project names, but when they click "get latest version" an error pops up saying "Error...access denied." Now I've tried setting the permission to full to just about everyone on the VSS server share, and this error keeps popping up. Can anyone help me



Answer this question

Permissions problem?

  • Asura

    Try replacing permissions on this folder.< xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />

    In the Folder properties open Security Tab and press Advanced button. This should open Advanced Security Settings dialog. Add your users in the list, check "Replace permission entries on all  child objects...". Make sure the permission list is correct (if it is not you could try to uncheck "Allow inheritable permissions from the parent..." to remove inherited permission set and replacing it with your custom list) and press OK button.

    After you have done this try accessing the database with the user accounts having trouble accessing the files. It should work now. However you need to adjust permission to secure your database according to the lockdown doc.

    http://msdn2.microsoft.com/en-us/library/ms181061.aspx

     

     


  • andy_vc

    @Roman:
    One problem with this. When I try to replace permissions using the "replace permission entries on all child objects..." option, it says "access denied " on files in the "data" folder. I can't set permissions for it! Even though I'm logged on as Administrator and I apparently have full access to the files. How can I solve this problem

    Razvan

  • TechGuyMark

    Hi Razvan,

    Try using filemon from SysInternals (http://www.sysinternals.com/Utilities/Filemon.html) and do the Get while monitoring for file accesses (filtered for ssexp.exe). Filemon's log should show which file causes the Access Denied.

    It can be one of the file in the database, or one of the files in the target location of the get.

    Alin


  • hypermatt

    I've tried monitoring. No process named ssexp.exe tries to open any file, even when I do a Get operation. The only process that appears (predominantly) is grovel.exe on port 6508 and it accesses SISCommonStore\database.mdb . Does this have anything to do with VSS

    Razvan

  • tentod

    Maybe I haven't expressed myself clear enough. Both NTFS and Sharing Permissions are set to Full for the users in cause. And yet they still get "access denied" messages. That's the problem.

    Razvan

  • FigBug

    Thanks, that solved the problem. Now the users are able to log in. I had to take ownership of the entire folder and subfolders.

  • blarggstar

    Hi WizMan,

    It's possible the new users don't have read/write access to one of the files they are trying to get. You need to set both Windows Share permissions to the database's share, as well as NTFS permissions on the files in the database.

    See these articles about setting up database permissions

    http://msdn2.microsoft.com/en-us/library/ms181061.aspx

    http://msdn2.microsoft.com/en-us/library/ms181068.aspx

    Alin


  • ahmed Abd-El Atty

    You need to be logged on as administrator on the server. If you still can't replace the permissions you can take ownership of the files first then you'l be able to replace the permissions.

    Look in Security tab of the folder properties. Press Advanced button and then open Owner tab. Select Administrators group (if you are in it) or your user in the list, check "Replace owner on subcontainers and objects" and press Apply.

    After Owner is replaced you'll be able to reset all permissions on these objects.

    Roman


  • Permissions problem?