Export-DbaUser - Add schema ownership to exported scripts (#10275)

Author: andreasjordan

public/Export-DbaUser.ps1

@@ -562,6 +562,16 @@ function Export-DbaUser {
                         $outsql += "$grantObjectPermission $($objectPermission.PermissionType) ON $object TO [$grantee]$withGrant AS [$($objectPermission.Grantor)];"
                     }
 
+                    #Schema Ownership
+                    foreach ($schema in $db.Schemas | Where-Object { $_.Owner -eq $dbuser.Name -and @("sa", "dbo", "information_schema", "sys", "guest") -notcontains $_.Name }) {
+                        if ($Template) {
+                            $ownerName = "{templateUser}"
+                        } else {
+                            $ownerName = $schema.Owner
+                        }
+                        $outsql += "ALTER AUTHORIZATION ON SCHEMA::[{0}] TO [{1}];" -f $schema.Name, $ownerName
+                    }
+
                 } catch {
                     Stop-Function -Message "This user may be using functionality from $($versionName[$db.CompatibilityLevel.ToString()]) that does not exist on the destination version ($versionNameDesc)." -Continue -InnerErrorRecord $_ -Target $db
                 }

tests/Export-DbaUser.Tests.ps1

@@ -56,6 +56,7 @@ Describe $CommandName -Tag IntegrationTests {
         $user2 = "dbatoolsci_exportdbauser_user2"
         $table = "dbatoolsci_exportdbauser_table"
         $role = "dbatoolsci_exportdbauser_role"
+        $schema = "dbatoolsci_exportdbauser_schema"
 
         $outputPath = "$($TestConfig.Temp)\Dbatoolsci_user_CustomFolder"
         $outputFile = "$($TestConfig.Temp)\Dbatoolsci_user_CustomFile.sql"
@@ -93,6 +94,7 @@ Describe $CommandName -Tag IntegrationTests {
         $null = $db.Query("CREATE TABLE $table (C1 INT);")
         $null = $db.Query("GRANT SELECT ON OBJECT::$table TO [$user];")
         $null = $db.Query("EXEC sp_addrolemember '$role', '$user';")
+        $null = $db.Query("CREATE SCHEMA [$schema] AUTHORIZATION [$user];")
         $null = $db.Query("EXEC sp_addrolemember '$role01', '$user01';")
         $null = $db.Query("EXEC sp_addrolemember '$role02', '$user01';")
         $null = $db.Query("EXEC sp_addrolemember '$role02', '$user02';")
@@ -216,4 +218,16 @@ Describe $CommandName -Tag IntegrationTests {
             }
         }
     }
+
+    Context "Schema ownership" {
+        It "Exports schema ownership for users that own schemas" {
+            $results = Export-DbaUser -SqlInstance $TestConfig.InstanceSingle -Database $dbname -User $user -Passthru
+            $results | Should -BeLike "*ALTER AUTHORIZATION ON SCHEMA::[[]$schema] TO [[]$user]*"
+        }
+
+        It "Exports schema ownership with template placeholders" {
+            $results = Export-DbaUser -SqlInstance $TestConfig.InstanceSingle -Database $dbname -User $user -Template -Passthru
+            $results | Should -BeLike "*ALTER AUTHORIZATION ON SCHEMA::[[]$schema] TO [[]``{templateUser``}]*"
+        }
+    }
 }