Manual Scans Fail: The EXECUTE Permission Was Denied On The Object...

Version 8

    Purpose

     

    The purpose of this article is to troubleshoot the error: "Generic data access layer exception. SQL exception message: The EXECUTE permission was denied on the object 'Catalog_AddOrUpdate', database 'ShavlikScans', schema 'CatalogData'."

     

    Symptoms

     

    1. Agentless patch scans fail after Step 2: Import New Definitions.
    2. Help > Refresh Files, will fail when attempting to update the database with new definitions.
    3. In the ST.Protect.managed log you will see the following error:

     

    WorkItemCatalogDataImport.cs:176|ST.UI.UserViewableException: Failed to update the database with new definitions.

    at ST.UI.Controllers.Tasks.WorkItemCatalogDataImport.<RunAsync>d__0.MoveNext()

    --- InnerException ---> DbAccessLayerException: Generic data access layer exception. SQL exception message: The EXECUTE permission was denied on the object 'Catalog_AddOrUpdate', database 'ShavlikScans', schema 'CatalogData'.

    SqlError message: 'The EXECUTE permission was denied on the object 'Catalog_AddOrUpdate', database 'ShavlikScans', schema 'CatalogData'.', source: '.Net SqlClient Data Provider', server: '(local)', number: 229, state: 5, procedure: 'Catalog_AddOrUpdate', line number: 1.

     

    Cause

     

    The account used to connect Protect to the database does not have sufficient rights to import new definitions into the database.

     

    Resolution

     

    1. You will have to have a SQL Database Admin login and open SQL Server Management Studio.
    2. Click on Security > Logins > "AffectedUsername" > Properties

    properties.png

     

       3.  On the Properties window, navigate to User Mapping > "Protect" database > check "db_owner" box > OK

    DB_owner.PNG

     

      4. Have the affected user login to the Protect console machine and then open Shavlik Protect.

      5. Verifying the fix by performing a scan or initiate a Help > Refresh Files.

    Additional Information

     

    • Only a SQL Database Admin will be able to give db_owner rights to the affected user.
    • If a SQL Database Admin does not give this privilege to the affected user, the only way the user will be able to update definitions is through a Scheduled Automatic Download of Core Engines/Definitions.
    • For more information on that, please consult the following article:  How To Schedule Automatic Definition Downloads

     

    Affected Product(s)

     

    Shavlik Protect 9.x