moved logins between servers with their SIDs and passwords intact. That gets a principal through the front door; it says nothing about what the principal can do once inside. Permissions live in a different set…
