← Back to Knowledge Base

KB #240035: SQL Error: Execute permission denied on object xp_n_*

⏱️ 1 min read
Type: Fix
Summary:
When attempting to access an encrypted column as a non-sysadmin user you may receive the following error:

Server: Msg 229, Level 14, ...
EXECUTE permission denied on object 'xp_n_decrypt2', database 'master', owner 'dbo'.
Additional Information:
Each one of the following methods requires Sysadmin rights.Method 1 – Enable Cross Database Chaining

  • Ensure that the target database is owned by ‘sa’. This is the default, however you can determine the owner by the following query:
       exec sp_helpdb 'northwind'
    

    If the owner is not ‘sa’, change with the following:

       use northwind
       exec sp_changedbowner 'sa'
    
  • Enable Cross Database Chainging as follows:
        exec sp_dboption 'northwind', 'db chaining', 'on'
    

Method 2 – Grant Specific Permissions

  • Add user from application database to Master database.
  • Grant execute permission to required extended stored procedures. Procedures required by Col-E are xp_n_encrypt2 and xp_n_decrypt2.

For example:

    use master
    create user appuser1
    grant execute on xp_n_encrypt2 to appuser1
    grant execute on xp_n_decrypt2 to appuser1
    grant execute on xp_n_decrypt2m to appuser1

 

Was this article helpful?

Related Articles

KB #240130: Operator password was set for this utility

Type: Fix Applies to: Encryptionizer Key Manager (EKM) Server To Reproduce: Apply Operator password to…

KB #240102: Encrypted Databases not accessible (Recovery Pending, Suspect)

Type: Information Summary: Your encrypted SQL databases are not accessible after you have started SQL…

KB #240060: Upgrading from an evaluation version to production version of Encryptionizer

Type: Info Summary: You have purchased a production license of Encryptionzier and would like to…

Still need help?

Our support team is here to assist you.

NetLib Security
AI Assistant · Online
Hi! I'm the NetLib Security assistant. I can answer questions about our encryption solutions, HIPAA compliance, Encryptionizer, and more. How can I help you today?