sp_changeobjectowner
SQL Server系统存储过程,更改当前数据库中对象的所有者。
语法
sp_changeobjectowner [ @objname = ] 'object' , [ @newowner = ] 'owner'
参数
[@objname =] 'object'
当前数据库中现有的表、视图或存储过程的名称。object 的数据类型为 nvarchar(517),没有默认值。object 可用现有对象所有者限定,格式为 existing_owner.object。
[@newowner =] 'owner'
即将成为对象的新所有者的安全帐户的名称。owner 的数据类型为 sysname,没有默认值。owner 必须是当前数据库中有效的 Microsoft? SQL Server? 用户或角色或 Microsoft Windows NT? 用户或组。指定 Windows NT 用户或组时,请指定 Windows NT 用户或组在数据库中已知的名称(用 sp_grantdbaccess 添加)。
返回代码值
0(成功)或 1(失败)
注释
对象所有者(或拥有对象的组或角色的成员)对对象有特殊的权限。对象所有者可以执行任何与对象有关的 Transact-SQL 语句(例如 Insert、Update、Delete、Select 或 EXECUTE),也可以管理对象的权限。
如果拥有对象的安全帐户必须要除去,但同时要保留该对象,请使用 sp_changeobjectowner 更改对象所有者。该过程从对象中删除所有现有权限。在运行 sp_changeobjectowner 之后,需要重新应用要保留的任何权限。
由于这个原因,建议在运行 sp_changeobjectowner 之前,编写现有权限的脚本。一旦更改了对象的所有权,可能要使用该脚本重新应用权限。在运行该脚本之前需要在权限脚本中修改对象所有者。有关编写数据库脚本的更多信息,请参见编写数据库文档和脚本。
可以使用 sp_changedbowner 更改数据库的所有者。
权限
只有 sysadmin 固定服务器角色和 db_owner 固定数据库角色成员,或既是 db_ddladmin 固定数据库角色又是 db_securityadmin 固定数据库角色的成员,才能执行 sp_changeobjectowner。
示例
下面的示例将 authors 表的所有者改为 Corporate\GeorgeW。
EXEC sp_changeobjectowner 'authors', 'Corporate\GeorgeW'
声明:这是微软的文档,使用不当发生意外与我无关!
程序代码
create procedure sp_changeobjectowner
@objname nvarchar(517), -- may be "[owner].[object]"
@newowner sysname -- must be entry from sysusers
as
Set nocount on
Set ansi_padding on
declare @objid int,
@newuid smallint
-- CHECK PERMISSIONS: Because changing owner changes both schema and
-- permissions, the caller must be one of:
-- (1) db_owner
-- (2) db_ddladmin AND db_securityadmin
if (is_member('db_owner') = 0) and
(is_member('db_securityadmin') = 0 or is_member('db_ddladmin') = 0)
begin
raiserror(15247,-1,-1)
return (1)
end
-- RESOLVE OBJECT NAME (CANNOT BE A CHILD OBJECT: TRIGGER/CONSTRAINT) --
select @objid = object_id(@objname, 'local')
if (@objid is null) or
(select parent_obj from sysobjects where id = @objid) <> 0 or
ObjectProperty(@objid, 'IsMSShipped') = 1 or
ObjectProperty(@objid, 'IsSystemTable') = 1 or
ObjectProperty(@objid, 'ownerid') in (0,3,4) or --public, INFORMATION_SCHEMA, system_function_schema
-- Check for Dependencies: No RENAME or CHANGEOWNER of OBJECT when exists:
EXISTS (Select * FROM sysdepends d Where
d.depid = @objid -- A dependency on this object
AND d.deptype > 0 -- that is enforced
AND @objid <> d.id -- that isn't a self-reference (self-references don't use object name)
AND @objid <> -- And isn't a reference from a child object (also don't use object name)
(Select o.parent_obj FROM sysobjects o Where o.id = d.id)
)
begin
-- OBJECT NOT FOUND
raiserror(15001,-1,-1,@objname)
return 1
end
-- RESOLVE NEW OWNER NAME (ATTEMPT ADDING IMPLICIT ROW FOR NT NAME) --
-- Disallow aliases, and public cannot own objects --
select @newuid = uid from sysusers where name = @newowner
and isaliased = 0
and uid not in (0,3,4) --public, INFORMATION_SCHEMA, system_function_schema
if @newuid is null
begin
execute sp_MSadduser_implicit_ntlogin @newowner
select @newuid = uid from sysusers where name = @newowner
and isaliased = 0 and name <> 'public'
end
if @newuid is null
begin
raiserror(15410, -1, -1, @newowner)
return (1)
end
-- CHECK IF CHANGING OWNER OF OBJECT or ITS CHILDREN WOULD PRODUCE A DUPLICATE
if exists (select * from sysobjects where uid = @newuid and name in
(select name from sysobjects where id = @objid or parent_obj = @objid))
begin
raiserror(15505,-1,-1,@objname,@newowner)
return (1)
end
-- DO THE OWNER TRANSFER (WITH A WARNING) --
raiserror(15477,-1,-1)
begin transaction
-- Locks Object and increments schema_ver.
DBCC LockObjectSchema(@objname)
-- drop permissions (they'll be incorrect with new owner) --
delete syspermissions where id = @objid
update sysobjects set uid = @newuid where id = @objid
update sysobjects set uid = @newuid where parent_obj = @objid
commit transaction
return 0 -- sp_changeobjectowner

