MOSS Forum

Ask Question   UnAnswered
Home » Forum » MOSS       RSS Feeds

EXECUTE permission denied on object 'proc_getNewObjects'

  Asked By: Dianna    Date: Sep 29    Category: MOSS    Views: 3967

I have set up two MOSS farms. One is configured to provide Shared
Services to the other. The client farm is a simple 2 server farm
with all of MOSS running on one server and one running SQL. I am
getting am getting the following error on the SSP client WFE:

Insufficient SQL database permissions for user '' in
database 'SharePoint_Config' on SQL Server instance 'MOSSSql-
Parent'. Additional error information from SQL Server is included

EXECUTE permission denied on object 'proc_getNewObjects',
database 'SharePoint_Config', schema 'dbo'.

Looking at the 'proc_getNewObjects' stored procedure in the Config
DB on the SQL server for the parent MOSS farm that is providing the
Shared service. There are no explicet permissions on the stored
procedure so only DBO can execute it, no account on the client farm
can execute it.

There is a SQL role named 'WSS_Content_Application_Pools' that
execute permission on manny of the other stored procedures and has
the accounts that I configured in users "Provide Shared Services" on
the Parent farm.

In a duplate test environment I have granted
the 'WSS_Content_Application_Pools' execute permissions on
the 'proc_getNewObjects' stored procedure and the error has gone

With this said I have two questions:
1) Has anyone else run into this?
2) Will this void suportability of the system from MicroSoft?



1 Answer Found

Answer #1    Answered By: Kalyan Pujari     Answered On: Sep 29

OK I have an update on this. After contacting Microsoft about this
the recommendation I got was to grant the child farms  "farm account"
DBO access to the Config DB on the parent  farm.

I am not happy or satisfied with this answer. This seems to me to
be an insecure solution. Since we have two different groups
responsible for the different farms and purposely have separate farm
accounts on the farms I would basically be handing over the ability
to change/break the configuration of the parent farm  to the group
responsible for the child farm.

Didn't find what you were looking for? Find more on EXECUTE permission denied on object 'proc_getNewObjects' Or get search suggestion and latest updates.