Groups > comp.databases.ms-sqlserver > #639

SQL2008 shared hosing login permission

Path	csiph.com!x330-a1.tempe.blueboxinc.net!newsfeed.hal-mli.net!feeder1.hal-mli.net!weretis.net!feeder4.news.weretis.net!newsfeed.straub-nv.de!newsfeed.x-privat.org!feeder.news.tin.it!spool.news.tin.it!not-for-mail
From	Antony <antony.kll@hotmail.com>
Newsgroups	comp.databases.ms-sqlserver
Subject	SQL2008 shared hosing login permission
Date	Sat, 03 Sep 2011 11:21:28 +0200
Message-ID	<sbs367h29d9e9a8lpqiis6kp56bu0fr170@4ax.com> (permalink)
X-Newsreader	Forte Agent 6.00/32.1186 trialware
MIME-Version	1.0
Content-Type	text/plain; charset=us-ascii
Content-Transfer-Encoding	7bit
X-Antivirus	avast! (VPS 110902-1, 02/09/2011), Outbound message
X-Antivirus-Status	Clean
Lines	30
Organization	TIN.IT (http://www.tin.it)
X-Comments	Please send technical notifications to newsmaster@tin.it
NNTP-Posting-Host	79.33.42.239
X-Trace	1315041680 reader1.news.tin.it 44202 79.33.42.239:7956
X-Complaints-To	Please send abuse reports to abuse@retail.telecomitalia.it
Xref	x330-a1.tempe.blueboxinc.net comp.databases.ms-sqlserver:639

Show key headers only | View raw

Hello,
for my mssql shared hosing I have create a database and login using
security settings write by microsoft for sql shared hosting:

http://learn.iis.net/page.aspx/530/sql-2008-for-hosters/
http://download.microsoft.com/download/d/1/f/d1f05c2e-0741-442d-859e-9417b377fdfa/The%20architectural%20view%20of%20SQL%20Server.zip

but trying to publish some applications  I got the following error:

    Cannot find the user 'dbo', because it does not exist or you do
not have permission.

I found that the sql that generate the error is:

    CREATE ROLE [aspnet_Membership_BasicAccess] AUTHORIZATION [dbo]

I have seen that adding on database the db_owner rolemember for
userlogin the problem is solved but this feature is not included in
the microsoft documents for shared hosting I think for security
reason; 
On documentation for SQL2008 shared hosting Microsoft set only
(db_ddladmin, db_datareader, db_datawriter)
my problem is to find a way for add CREATE ROLE command to user login
without give it the permission for ALTER DATABASE; 
with ALTER DATABASE user can modify database size or can open security
problem and I don't want this.
do you know if there is a way to solve the problem?

thanks and regards
Antony

Back to comp.databases.ms-sqlserver | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

SQL2008 shared hosing login permission Antony <antony.kll@hotmail.com> - 2011-09-03 11:21 +0200
  Re: SQL2008 shared hosing login permission Erland Sommarskog <esquel@sommarskog.se> - 2011-09-04 00:07 +0200

csiph-web