members of db_owner can't mangage roles?

I have two people assigned to the db_owner role in a database and they can d
o
everything except manage users and roles.  For example when they try to look
at the properties of a role in EM they get the following error message:

Error229:  EXECUTE permission denied on object  ‘sp_helprolemember
’, data
base
‘master’, owner dbo

(The same thing happens in QA)

In master, the public role has permission to execute sp_helprolemember and
both of these users are members of the public role in master.

I also tried adding them to the db_accessadmin and db_securityadmin roles in
the database as well as making them members of the securityadmin server role
.
None of this worked either.

Any suggestions?

Did you check for user, roles denied execute on the stored
procedure?
use master
go
sp_helprotect 'sp_helprolemember'

-Sue

On Wed, 27 Apr 2005 14:22:07 -0700, "AlexB_05"
< AlexB_05@discussions
.microsoft.com> wrote:

>I have two people assigned to the db_owner role in a database and they can 
do
>everything except manage users and roles.  For example when they try to loo
k
>at the properties of a role in EM they get the following error message:
>
>Error229:  EXECUTE permission denied on object  ‘sp_helprolemember’,
 databas
e
>‘master’, owner dbo
>
>(The same thing happens in QA)
>
>In master, the public role has permission to execute sp_helprolemember and
>both of these users are members of the public role in master.
>
>I also tried adding them to the db_accessadmin and db_securityadmin roles i
n
>the database as well as making them members of the securityadmin server rol
e.
> None of this worked either.
>
>Any suggestions?

That was it.  Somehow the public role did not have permission to execute
sp_helprolemember.  Once I granted those permissions everything worked.

"Sue Hoegemeier" wrote:

> Did you check for user, roles denied execute on the stored
> procedure?
> use master
> go
> sp_helprotect 'sp_helprolemember'
>
> -Sue
>
> On Wed, 27 Apr 2005 14:22:07 -0700, "AlexB_05"
> < AlexB_05@discussions
.microsoft.com> wrote:
> 
>
>