Hey there,

Is the user sUser a SQL account or AD account and if so is it a member of any groups which could be registered with SQL and conflicting?

Regrading your app, can you be sure that the account being used to connect to SQL IS the sUser account? For example if you are connceting with local authentication (AD), this does not mean that there is not some underlying service (maybe on an app server) which isnt connecting to SQL with a different account.

If in doubt try with a completely new account (either AD or SQL) and then set up basic rights and work backward from there. 😎