Re: Cross DB ownership chaining

From: Dan Guzman (guzmanda_at_nospam-online.sbcglobal.net)
Date: 06/09/05 

Date: Wed, 8 Jun 2005 19:20:00 -0500

UserA needs a security context in database A2, although no object
permissions need be granted. You can either add the user to database A2 or
enable the guest user in database A2. 

-- 
Hope this helps.
Dan Guzman
SQL Server MVP
"Paul" <Paul@discussions.microsoft.com> wrote in message 
news:43D9406C-1C28-4A86-BF39-9A2D7E1B2CFB@microsoft.com...
> Hello,
> I am having trouble setting up cross db ownership chaining. Did I omit
> anything?
>
> 1. Using SQL Server 2000 SP3a.
> 2. Login as 'sa'.
> 3. Create new database A1.
> 4. Create new database A2.
> 5. Create TableA in database A2.
> 6. Create view vTableA in database A1 as select * from A2.dbo.TableA
> 7. Add UserA to database A1.
> 8. Grant select permission on vTableA to UserA.
> 9. Enable cross database ownerchip chaining option in database A1 and A2.
> 10. All objects are owned by dbo and both databases are owned by 'sa'.
> 11. Log in as UserA and run Select * from vTableA in database A1, get 
> error
> "Server user 'UserA' is not a valid user in database 'A2'.".
>
> Unless I'm missing something, I was expecting the last step to work. Any
> help greatly appreciated.
>
> Paul

Relevant Pages

  • Re: Security settings
    ... is this proof that the hosts FP ... the FP permissions, ... >> Paul M ... >> access to your database, ...
    (microsoft.public.frontpage.client)
  • Re: Workgroup file information file error: OleDB to Access file
    ... "Paul Clement" wrote in message ... > permissions to open the ... I'm assuming that this is a VB.NET app and not an ASP.NET app. ... Database," not, "OLE DB:System Database." ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: Security settings
    ... have to know my server password wouldn't they? ... it means no one can download your database from the ... folder permissions, that would be something ... >> Paul M ...
    (microsoft.public.frontpage.client)
  • Re: How to hide unauthorized databases with SQL 2005?
    ... VIEW ANY DATABASE is granted to public by default. ... DENY VIEW ANY DATABASE TO userA ... grant that permission to users as you see fit. ...
    (microsoft.public.sqlserver.security)
  • Re: How to hide unauthorized databases with SQL 2005?
    ... Thanks for the reply Dan. ... I need to allow userA to see one database while denying other databases. ... grant that permission to users as you see fit. ...
    (microsoft.public.sqlserver.security)