I have an External Content Type created. It connects to a SQL Server 2005 db, using "Impersonate Windows Identity" authentication, with an account over in Secure Store Service. I've got a Read List and Read Item action defined. I created a BDC Profile Page. I created an External List, based on the External Content Type. It all works perfectly. For me.
Others, however, they get "Access Denied". I picked an individual user and in vain tried granting the other user all four permissions (Edit, Execute, Set Permissions, Selectable in Clients) on both "Set Object Permissions" and "Set Metadata Store Permissions" over in BDC. I did this for the BDC Model, the External System, and the External Content Type. As far as the "View External Content Types" page in Central Admin > BDC goes, they have it all. And yet they still get denied. This is true for the External List, and the BDC Profile Page with a works-for-me URL picking a specific item from the external data.
I tried placing the 'other user' into the "Owners" group in the site collection holding the External LIst based on the ECT. No luck. I verified that group has "use remote objects" in its permission level. As far as I can tell, this account has all the permission one could it. Yet no access to the BDC. Any suggestions? This is SP2010 Server.