I have just upgraded from Beta 2 to Version 2 of the open source edition of dotShoppingCart.

I am hitting a DB permission issue when loggin in as an administrator and depressing the "Enter Store Admin" Button.

This is because in this version, some of the stored procedures generate SQL dynamically and then they call "EXEC <dynamic statement>".

For the above to work, the DSC account should have db_ownership privileges rather than the standard public ones.

Could somebody please let me know what's the right way for configuring the permission levels.

Is anybody else having similar issues?

Kind regards,

Daniel

You could check CreateDB.sql to see how it solves this. If you use InstDSC.exe you should not see this issue.

Thanks for the reply.

I did use InstDSC.exe to create the database, but unfortunately it is complaining about running DSC_Parse_IDs which dynamically called from [DSC_Order_GetByDateRangeAndStatusList].

Tried granting access to the dynamicCertUser account, but did not get much further.

Here's the actual message.

Thanks in advance,

Daniel

<span>

The SELECT permission was denied on the object 'DSC_Parse_Ids', database 'dotShoppingCart2', schema 'dbo'.

Line 583:            db.AddOutParameter(cmd, "@totalOrders", DbType.Int32, sizeof(Int32));
Line 584:
Line 585:            DataSet ds = db.ExecuteDataSet(cmd);
Line 586:            int totalNumber = (int)db.GetParameterValue(cmd, "@totalOrders");
Line 587:

Looks like CreateDB.sql is missing the following. Try running this directly.

<font color="#0000ff" size="2"><font color="#0000ff" size="2">

GRANT SELECT ON

[dbo].[DSC_Parse_Ids] <font color="#0000ff" size="2"><font color="#0000ff" size="2">TO [DSC_Public]

Thanks again. 

This time it DOES work.

You will also need to grant the above permissions on the DSC_Order table.

You don't need to grant Select to DSC_Order because they loosen the table DSC_Order  permission. Here is the complete fix.