revoke deletion right about sqlcetoolbox HOT 12 CLOSED

Could you clarify why you think full access is required?

Do you specify temp paths in your connection string?

from sqlcetoolbox.

I've tried revoke full access for everyone then failed to connect , then grant read and write, failed, grant delete and fail . Finally grant full then ok.

I'm using icacls command

from sqlcetoolbox.

Fail??? What does it mean? Also, you can control access to the folder..

from sqlcetoolbox.

Yes, fail. Using the sqlceconnect and fail.

I could control access to folder, but as the user should access to the file, i can't forbid his access right.

The only solution now is to audit the delete action and to perform regular checking.

However, could i only allow user to read/write/update the sdf but not delete? Of course, user could still read/write/update/delete record in the sdf.

from sqlcetoolbox.

I am trying to help you - but "fail" can mean 1000 different things - could you provide the exact SqlCeException error you are getting, please!

What error do you get if you revoke delete?

from sqlcetoolbox.

The code is not beside me and will revert to you tomorrow. Thanks for your help

from sqlcetoolbox.

Hi ErikEJ, this is quentinw's colleague.

The SqlCeException is captured and below are number of attributes of the Exception object

Message
Access to the database file is not allowed. [ File name = SDF File Path ]

NativeError
25039

StackTrace
at System.Data.SqlServerCe.SqlCeConnection.ProcessResults(Int32 hr)
at System.Data.SqlServerCe.SqlCeConnection.Open(Boolean silent)
at System.Data.SqlServerCe.SqlCeConnection.Open()

Besides, the connection string is as below:-
Data Source=|DataDirectory|SDF File Path;Password = File Password

We are opening the connection as below:-
SqlCeConnection conn = new SqlCeConnection(ConnectionString)
conn.Open();

then we encountered the above message.

We used the below command to revoke the delete right of the file:-
icacls SDF File Path /deny Everyone:(D)

Even if we tried to grant (R,W,RX) rights but it still failed to run.

Please help to advise. Thanks for your help.

from sqlcetoolbox.

Do you set the location of DataDirectory in code?

Did you try a full path iso DataDirectory

Did you try to specfiy temp path? https://msdn.microsoft.com/da-dk/library/system.data.sqlserverce.sqlceconnection.connectionstring%28v=vs.100%29.aspx

from sqlcetoolbox.

We didn't set the location of DataDirectory or specify the temp path. The sdf file is placed at a different directory as the program.

from sqlcetoolbox.

What I am suggesting is that you try to do that!

If you use DataDirectory you have no control over the location of the file... Set DataDirectory value in code, or use a full path in your connection string.

from sqlcetoolbox.

We tried taking away the DataDirectory away and also adding temp path to the connection string but it still fails, the same error is occurred. Below is the string we used.

DBConnectionString = "Data Source=C:\TESTDB1\TESTDB.sdf;Password = password;temp path=C:\TESTDB2";

This string will work if the delete privilege is not revoked.

from sqlcetoolbox.

OK, I guess it is not possible then...

from sqlcetoolbox.