Hi,

> Roles only get effective when you specify it during connections.
> Firebird seems to work this way because you can have as much roles as
> you like, so the DB cannot decide which one to use.
>
> I would like to suggest one "Default Role" or a Role that gets
> effective automatically. So, you can choose between an Active or
> Passive role when creating a new role.
>
> It would be very usefull for managing grants for groups of users, like
> I have here.
>
> Please, feel free for comment this sugestion.

The current ROLE mechanism works according to the SQL
standard. A bit strange, true, but standard.

Perhaps, when security gets renewed, a GROUP would be
better. Any (server or database)user can be a member of
one or more groups. Each group can have rights granted to
it.

With regards,

Martijn Tonies
Database Workbench - developer tool for InterBase, Firebird, MySQL & MS SQL
Server.
Upscene Productions
http://www.upscene.com