BUG: Documentation of Ownership Chain in BOL May Be Misleading (296197)


The information in this article applies to:

  • Microsoft SQL Server 2000 (all editions)
This article was previously published under Q296197
BUG #: 235429 (SHILOH_BUGS)

SYMPTOMS

SQL Server 2000 Books Online states the following regarding ownership chains in stored procedures:

"If the ownership chain of a procedure or view is broken (not all the objects in the chain are owned by the same user), SQL Server checks permissions on each object in the chain whose next lower link is owned by a different user. In this way, SQL Server allows the owner of the original data to retain control over its accessibility."

This statement could be incorrectly interpreted to mean that in the event of a broken ownership chain in a stored procedure where permissions are not fully guaranteed for the calling user, no statements in that stored procedure are executed.

The correct interpretation is that in such a situation, only those statements where the user has the necessary permissions are executed, and the remaining statements receive an "Insufficient Permissions" error.

STATUS

Microsoft has confirmed this to be a problem in SQL Server 2000.
Modification Type:MajorLast Reviewed:10/3/2003
Keywords:kbbug kbpending KB296197
©2003 Microsoft Corporation. All rights reserved.