RS2005 insufficient permissions

So when I run the report in the Report Manager, everything is all good. When
I run it in a webform using report viewer for vs.net 2005 the view reports
this error.
"The permissions granted to the user 'NT AUTHORITY\NETWORK SERVICE' are
insufficient for performing this operation(rsAccessDenied)"
What interesting when RS2005 install on XP Professional setting for
webservice identity shows ASPNET and reports work on that machine in report
viewer control. But when running on Windows 2003 Server, it uses default pool
and NETWORK SERVICE ACCOUNT by default which I think is the problem. Any idea
or anyone run into this.Curious if anyone now the bare minimum to run 2005 report in a webform.aspx
using report viewer. ASPNET was enough on XP Pro runnng RS2005 locally. But
it's different on a Server. This is obviously a good thing, wondered how I
can find the bare minimum without assigning Everyone as I discovered fixed
the problem below:
Well thought post the hack on this one. So what I ended testing and showed
success, in report manager I temporarily aded new role, "Everyone" with
browse only rights on the Home directory security roles in report manager,
now the report loads.
----
I would like to let people now, we where in a crunch to get it working, but
would love to hear how RS2005 has maybe been change to use forms
authentication or some solution for people that now danger running ASPNET
identity to access sensitive data, but have their surround website secured.
---
So my next step:
1) revert securty at Home level on report manager to only Administrator role.
2) add folder for reports and deploy the reports to the new folder on the
report server
3) use seperate permissions on folder then the home root. For newbie, you do
this by clicking on the folder in report manager, click properties and
security. Then use new role and choose yes to warning that you want these
roles seperate from home security. This allows the report to run in our
webform.aspx as the website is protect with form authentications.
"Rob G" wrote:
> So when I run the report in the Report Manager, everything is all good. When
> I run it in a webform using report viewer for vs.net 2005 the view reports
> this error.
> "The permissions granted to the user 'NT AUTHORITY\NETWORK SERVICE' are
> insufficient for performing this operation(rsAccessDenied)"
> What interesting when RS2005 install on XP Professional setting for
> webservice identity shows ASPNET and reports work on that machine in report
> viewer control. But when running on Windows 2003 Server, it uses default pool
> and NETWORK SERVICE ACCOUNT by default which I think is the problem. Any idea
> or anyone run into this.
>|||When you were developing before (everything on one machine) you were the
administrator on the machine and that is why everything worked. What I do is
have a local group, I add domain users and groups to that (for instance add
a group called Reports). Give them browse rights at home. The other folders
will inherit. In most cases all the users have rights to all the folders. If
not, change for the specific folder.
You definitely do not want to do anonymous.
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Rob G" <RobG@.discussions.microsoft.com> wrote in message
news:2C5D679B-E5CD-4ECF-8F44-00E47F5DAB3E@.microsoft.com...
> Curious if anyone now the bare minimum to run 2005 report in a
> webform.aspx
> using report viewer. ASPNET was enough on XP Pro runnng RS2005 locally.
> But
> it's different on a Server. This is obviously a good thing, wondered how I
> can find the bare minimum without assigning Everyone as I discovered fixed
> the problem below:
> Well thought post the hack on this one. So what I ended testing and showed
> success, in report manager I temporarily aded new role, "Everyone" with
> browse only rights on the Home directory security roles in report manager,
> now the report loads.
> ----
> I would like to let people now, we where in a crunch to get it working,
> but
> would love to hear how RS2005 has maybe been change to use forms
> authentication or some solution for people that now danger running ASPNET
> identity to access sensitive data, but have their surround website
> secured.
> ---
> So my next step:
> 1) revert securty at Home level on report manager to only Administrator
> role.
> 2) add folder for reports and deploy the reports to the new folder on the
> report server
> 3) use seperate permissions on folder then the home root. For newbie, you
> do
> this by clicking on the folder in report manager, click properties and
> security. Then use new role and choose yes to warning that you want these
> roles seperate from home security. This allows the report to run in our
> webform.aspx as the website is protect with form authentications.
>
>
> "Rob G" wrote:
>> So when I run the report in the Report Manager, everything is all good.
>> When
>> I run it in a webform using report viewer for vs.net 2005 the view
>> reports
>> this error.
>> "The permissions granted to the user 'NT AUTHORITY\NETWORK SERVICE' are
>> insufficient for performing this operation(rsAccessDenied)"
>> What interesting when RS2005 install on XP Professional setting for
>> webservice identity shows ASPNET and reports work on that machine in
>> report
>> viewer control. But when running on Windows 2003 Server, it uses default
>> pool
>> and NETWORK SERVICE ACCOUNT by default which I think is the problem. Any
>> idea
>> or anyone run into this.
>>