SQL Server修改数据库对象所有者(Owner)浅析

更改当前数据库中对象的所有者。

重要提示：此存储过程只针对 Microsoft SQL Server 2000 中可用的对象进行。后续版本的 Microsoft SQL Server 将删除该功能。请避免在新的开发工作中使用该功能，并着手修改当前还在使用该功能的应用程序。另请使用 ALTER SCHEMA 或 ALTER AUTHORIZATION。sp_changeobjectowner 同时更改架构和所有者。若要保持与早期版本 SQL Server 的兼容性，如果当前所有者和新所有者拥有的架构名称与它们的数据库用户名相同，则此存储过程将只更改对象所有者。

Transact-SQL 语法约定

语法

sp_changeobjectowner [ @objname = ] ‘object‘ , [ @newowner = ] ‘owner‘

参数

[ @objname = ] ‘object‘

当前数据库中现有表、视图、用户定义函数或存储过程的名称。object 是 nvarchar(776)，没有默认值。如果架构及其所有者具有相同的名称，则 object 可由现有对象所有者限定，格式为 existing_owner.object。

[ @newowner=] ‘owner ‘

将成为对象的新所有者的安全帐户的名称。owner 的数据类型为 sysname，没有默认值。owner 必须是可访问当前数据库的有效数据库用户、服务器角色、Microsoft Windows 登录名或 Windows 组。如果新所有者是没有对应数据库级主体的 Windows 用户或 Windows 组，则将创建数据库用户。

返回代码值

0（成功）或 1（失败）

注释

sp_changeobjectowner 删除对象中的所有现有权限。在运行 sp_changeobjectowner 之后，必须重新应用要保留的任何权限。因此，建议首先编写现有权限的脚本，然后再运行sp_changeobjectowner。更改了对象的所有权之后，便可使用该脚本重新应用权限。在运行该脚本之前必须在权限脚本中修改对象所有者。有关数据库脚本的详细信息，请参阅编写数据库文档和脚本。

若要更改安全对象的所有者，请使用 ALTER AUTHORIZATION.若要更改架构，请使用 ALTER SCHEMA。

权限

要求具有 db_owner 固定数据库角色的成员身份，或 db_ddladmin 固定数据库角色和 db_securityadmin 固定数据库角色的成员身份，同时还需要对对象具有 CONTROL 权限。

use test;

go

exec sp_changeobjectowner ‘[db_owner].[T1]‘,‘dbo‘;

use test;

go

exec sp_MSforeachtable ‘exec sp_changeobjectowner ‘‘?‘‘,‘‘dbo‘‘ ‘

SELECT  ‘exec sp_changeobjectowner ‘‘‘  + USER_NAME(uid) +‘.‘ + name + ‘‘‘, ‘‘dbo‘‘;‘   

from sys.sysobjects where xtype in (‘V‘,‘P‘,‘F‘)

declare tb cursor local for

select ‘sp_changeobjectowner ‘‘[‘+replace(user_name(uid),‘]‘,‘]]‘)+‘].[‘

+replace(name,‘]‘,‘]]‘)+‘]‘‘,‘‘dbo‘‘‘

from sysobjects

where xtype in(‘U‘,‘V‘,‘P‘,‘TR‘,‘FN‘,‘IF‘,‘TF‘) and status>=0

open tb

declare @s nvarchar(4000)

fetch tb into @s

while @@fetch_status=0

begin

exec(@s)

fetch tb into @s

end

close tb

deallocate tb

go

USE Test;

GO

CREATE TABLE [db_owner].T1

(

 ID   INT ,

 NAME VARCHAR(20)

);

CREATE VIEW [db_owner].V_T1

AS

  SELECT * FROM T1;

CREATE VIEW [db_owner].V_T2

AS

  SELECT * FROM db_owner.T1;

CREATE PROCEDURE PRC_TEST_ONE

AS

 SELECT * FROM T1;

GO

CREATE PROCEDURE PRC_TEST_TWO

AS

 SELECT * FROM db_owner.T1;

GO

CREATE TABLE [db_owner].T1

(

 ID   INT ,

 NAME VARCHAR(20)

)

CREATE SYNONYM T1

FOR [db_owner].T1

GO

exec sp_changeobjectowner ‘db_owner.T1‘, ‘dbo‘;

CREATE PROCEDURE Sp_changeobjectowner @objname  NVARCHAR(517), 

                                      -- may be "[owner].[object]" 

                                      @newowner SYSNAME 

-- must be entry from sysusers 

AS 

    SET nocount ON 

    SET ansi_padding ON 

    DECLARE @objid  INT, 

            @newuid SMALLINT 

    -- CHECK PERMISSIONS: Because changing owner changes both schema and 

    --        permissions, the caller must be one of: 

    -- (1) db_owner 

    -- (2) db_ddladmin AND db_securityadmin 

    IF ( Is_member(‘db_owner‘) = 0 ) 

       AND ( Is_member(‘db_securityadmin‘) = 0 

              OR Is_member(‘db_ddladmin‘) = 0 ) 

      BEGIN 

          RAISERROR(15247,-1,-1) 

          RETURN ( 1 ) 

      END 

    -- RESOLVE OBJECT NAME (CANNOT BE A CHILD OBJECT: TRIGGER/CONSTRAINT) -- 

    SELECT @objid = Object_id(@objname, ‘local‘) 

    IF ( @objid IS NULL ) 

        OR (SELECT parent_obj 

            FROM   sysobjects 

            WHERE  id = @objid) <> 0 

        OR Objectproperty(@objid, ‘IsMSShipped‘) = 1 

        OR Objectproperty(@objid, ‘IsSystemTable‘) = 1 

        OR Objectproperty(@objid, ‘ownerid‘) IN ( 0, 3, 4 ) 

        OR --public, INFORMATION_SCHEMA, system_function_schema 

       -- Check for Dependencies: No RENAME or CHANGEOWNER of OBJECT when exists: 

       EXISTS (SELECT * 

               FROM   sysdepends d 

               WHERE  d.depid = @objid -- A dependency on this object 

                      AND d.deptype > 0 -- that is enforced 

                      AND @objid <> d.id 

                      -- that isn‘t a self-reference (self-references don‘t use object name) 

                      AND @objid <> 

                          -- And isn‘t a reference from a child object (also don‘t use object name) 

                          (SELECT o.parent_obj 

                           FROM   sysobjects o 

                           WHERE  o.id = d.id)) 

      BEGIN 

          -- OBJECT NOT FOUND 

          RAISERROR(15001,-1,-1,@objname) 

          RETURN 1 

      END 

    -- RESOLVE NEW OWNER NAME (ATTEMPT ADDING IMPLICIT ROW FOR NT NAME) -- 

    --  Disallow aliases, and public cannot own objects -- 

    SELECT @newuid = uid 

    FROM   sysusers 

    WHERE  NAME = @newowner 

           AND isaliased = 0 

           AND uid NOT IN ( 0, 3, 4 ) 

    --public, INFORMATION_SCHEMA, system_function_schema 

    IF @newuid IS NULL 

      BEGIN 

          EXECUTE Sp_msadduser_implicit_ntlogin 

            @newowner 

          SELECT @newuid = uid 

          FROM   sysusers 

          WHERE  NAME = @newowner 

                 AND isaliased = 0 

                 AND NAME <> ‘public‘ 

      END 

    IF @newuid IS NULL 

      BEGIN 

          RAISERROR(15410,-1,-1,@newowner) 

          RETURN ( 1 ) 

      END 

    -- CHECK IF CHANGING OWNER OF OBJECT OR ITS CHILDREN WOULD PRODUCE A DUPLICATE 

    IF EXISTS (SELECT * 

               FROM   sysobjects 

               WHERE  uid = @newuid 

                      AND NAME IN (SELECT NAME 

                                   FROM   sysobjects 

                                   WHERE  id = @objid 

                                           OR parent_obj = @objid)) 

      BEGIN 

          RAISERROR(15505,-1,-1,@objname,@newowner) 

          RETURN ( 1 ) 

      END 

    -- DO THE OWNER TRANSFER (WITH A WARNING) -- 

    RAISERROR(15477,-1,-1) 

    BEGIN TRANSACTION 

    -- Locks Object and increments schema_ver. 

    DBCC lockobjectschema(@objname) 

    -- drop permissions (they‘ll be incorrect with new owner) -- 

    DELETE syspermissions 

    WHERE  id = @objid 

    UPDATE sysobjects 

    SET    uid = @newuid 

    WHERE  id = @objid 

    UPDATE sysobjects 

    SET    uid = @newuid 

    WHERE  parent_obj = @objid 

    COMMIT TRANSACTION 

    RETURN 0 -- sp_changeobjectowner 

go