Understanding Permissions and Ownership Chaining in Stored Procedures: Why Explicit Permissions Are Necessary for Secure Access to External Database Objects