Checking effective permissions

Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

All Forums

SQL Server 2005 Forums

SQL Server Administration (2005)

Checking effective permissions

Author

Topic

Vinnie881
Master Smack Fu Yak Hacker

1231 Posts

Posted - 2009-01-12 : 14:51:51

I was required to rebuild a domain from scratch (All new user accounts), which has seemingly messed up the sql logins due to the old logins no longer exist.

SODEEP helped me out on informing me that if I changed the owner to sa, then it would allow me to get back into the properties, and that worked, but now I have a issue.

In SSMS if I right click the DB go into properties, select permissions, then select a domain\myuser account, then click effective permissions I get the following error.

[edit]
Correction it is not a User account, it is a Group account so domain\mygroup
[/edit]

Cannot execute as the database principal because the principal "Domain\myuser" does not exist, this type of principal cannot be impersonated, or you do not have permission.

Any help would be very much appriciated.

Success is 10% Intelligence, 70% Determination, and 22% Stupidity.
\_/ _/ _/\_/ _/\_/ _/ _/- 881

sodeep
Master Smack Fu Yak Hacker

7174 Posts

Posted - 2009-01-12 : 23:21:15

You are only allowed to keep user account as owner of database not group account.

Vinnie881
Master Smack Fu Yak Hacker

1231 Posts

Posted - 2009-01-13 : 12:03:31

The owner of the DB is the sa account, but I am still unable to check the effective permissions for that group. Are you simply unable to check permissions for a group?

Success is 10% Intelligence, 70% Determination, and 22% Stupidity.
\_/ _/ _/\_/ _/\_/ _/ _/- 881

Vinnie881
Master Smack Fu Yak Hacker

1231 Posts

Posted - 2009-01-14 : 22:48:00

Can someone please confirm if you add a group security to a database and you open SSMS and do the following.

1. Right click db
2. go to properties
3. click on the group (i.e. mydomain/mygroup)
4. click effective permissions

You get a error stating that can not access the principal id.

If this is not proper behavier, how to do correct this. By db has a owner of sa, and I have removed and re-added the group to the db.

Thanks

Success is 10% Intelligence, 70% Determination, and 22% Stupidity.
\_/ _/ _/\_/ _/\_/ _/ _/- 881

Subscribe to SQLTeam.com

SQLTeam.com Articles via RSS

SQLTeam.com Weblog via RSS

- Advertisement -

Resources