Re: Permission issue with EXECUTE AS
- From: Erland Sommarskog <esquel@xxxxxxxxxxxxx>
- Date: Tue, 12 Feb 2008 15:18:16 -0800
INTP56 (INTP56@xxxxxxxxxxxxxxxxxxxxxxxxx) writes:
I've been posting in Programming as initially I thought this was a code
problem, but thought I would try here. I've included my script at the end.
Basically, when I run the script logged in as me, everything works as
expected. However, when I run the script logged in as the machine
account SQL Server runs under, I get an error. And the error moves
depending on how I specify the logins. I'm looking for help trying to
track this problem down, as the production server DBA's also create the
databases under a machine account, then let me log in to create the
objects.
There is something fishy going on here. It seems that the domain
account does not have CONTROL SERVER permission, but then again it
create databases and logins and grant permissions, so it does have a
good set of permissions anyway.
Do this: find a database which is not owned by the domain account
and do USE on that database, and then run "SELECT USER". If it says
"dbo", you are sysadmin after all.
But even if you are not sysadmin (that is, have CREATE SERVER), I don't
see why you would have to specify FOR LOGIN. FOR LOGIN should simply
not matter when username and login name are the same. And same goes
for the strange error you get. Had the database been restored from a
different server - but you have just created it.
Just to check: you have SP2 of SQL 2005, haven't you?
If you are able to nail exactly which server-level permissions your
machine has, we might be able to repro it, and maybe then understand
what is going on. Right now, I'm clueless.
--
Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx
Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
.
- Follow-Ups:
- Re: Permission issue with EXECUTE AS
- From: INTP56
- Re: Permission issue with EXECUTE AS
- From: INTP56
- Re: Permission issue with EXECUTE AS
- References:
- Permission issue with EXECUTE AS
- From: INTP56
- Permission issue with EXECUTE AS
- Prev by Date: Re: MSFTPSVC
- Next by Date: Default schema not working properly for AD groups
- Previous by thread: Permission issue with EXECUTE AS
- Next by thread: Re: Permission issue with EXECUTE AS
- Index(es):
Relevant Pages
|
|
