I have two web applications running on separate application pool accounts. I have a user control on the first web application that should read data from the second web app. I have verified that Kerberos works (Fiddler, RSS Web part..) but when I try to access data in the control I get this error:
*"There is a compatibility range mismatch between the Web server and database "WSS_Content_MYCONTENTDB", and connections to the data have been blocked to due to this incompatibility. This can happen when a content database has not been upgraded to be within the compatibility range of the Web server, or if the database has been upgraded to a higher level than the web server. The Web server and the database must be upgraded to the same version and build level to return to compatibility range."*
The only way to solve this is to set the application pool account from the web app where the user control resides to db_owner on the other database but that doesn't seem ideal from a security perspective.
I thought that I could work with the normal object model without restrictions when Kerberos is enabled but that doesn't seem to be the case or have I misunderstood how to work with cross web app data?