members of db_owner can't mangage roles?

I have two people assigned to the db_owner role in a database and they can d
o
everything except manage users and roles. For example when they try to look
at the properties of a role in EM they get the following error message:
Error229: EXECUTE permission denied on object ‘sp_helprolemember’, data
base
‘master’, owner dbo
(The same thing happens in QA)
In master, the public role has permission to execute sp_helprolemember and
both of these users are members of the public role in master.
I also tried adding them to the db_accessadmin and db_securityadmin roles in
the database as well as making them members of the securityadmin server role
.
None of this worked either.
Any suggestions?Did you check for user, roles denied execute on the stored
procedure?
use master
go
sp_helprotect 'sp_helprolemember'
-Sue
On Wed, 27 Apr 2005 14:22:07 -0700, "AlexB_05"
<AlexB_05@.discussions.microsoft.com> wrote:

>I have two people assigned to the db_owner role in a database and they can
do
>everything except manage users and roles. For example when they try to loo
k
>at the properties of a role in EM they get the following error message:
>Error229: EXECUTE permission denied on object sp_helprolemember, databas
e
>master, owner dbo
>(The same thing happens in QA)
>In master, the public role has permission to execute sp_helprolemember and
>both of these users are members of the public role in master.
>I also tried adding them to the db_accessadmin and db_securityadmin roles i
n
>the database as well as making them members of the securityadmin server rol
e.
> None of this worked either.
>Any suggestions?|||That was it. Somehow the public role did not have permission to execute
sp_helprolemember. Once I granted those permissions everything worked.
"Sue Hoegemeier" wrote:

> Did you check for user, roles denied execute on the stored
> procedure?
> use master
> go
> sp_helprotect 'sp_helprolemember'
> -Sue
> On Wed, 27 Apr 2005 14:22:07 -0700, "AlexB_05"
> <AlexB_05@.discussions.microsoft.com> wrote:
>
>sql