Hello,
for my mssql shared hosing I have create a database and login using
security settings write by microsoft for sql shared hosting:

http://learn.iis.net/page.aspx/530/s...8-for-hosters/
http://download.microsoft.com/downlo...L%20Server.zip

but trying to publish some applications I got the following error:

Cannot find the user 'dbo', because it does not exist or you do
not have permission.

I found that the sql that generate the error is:

CREATE ROLE [aspnet_Membership_BasicAccess] AUTHORIZATION [dbo]

I have seen that adding on database the db_owner rolemember for
userlogin the problem is solved but this feature is not included in
the microsoft documents for shared hosting I think for security
reason;
On documentation for SQL2008 shared hosting Microsoft set only
(db_ddladmin, db_datareader, db_datawriter)
my problem is to find a way for add CREATE ROLE command to user login
without give it the permission for ALTER DATABASE;
with ALTER DATABASE user can modify database size or can open security
problem and I don't want this.
do you know if there is a way to solve the problem?

thanks and regards
Antony

Antony (antony.kll (AT) hotmail (DOT) com) writes:
I'm unfmailiar with the documents you refer to, but if you want to
create roles and users, you will need sufficient permission for
this. That is, membership in db_owner or db_securityadmin.

Note that the application should log in with db_owner, but the application
should not create users and that.


--
Erland Sommarskog, SQL Server MVP, esquel (AT) sommarskog (DOT) se

Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx