Simple answer is that isc4.gdb (common to all databases on the server)
contains only username/encrypted-password pairs.
All other is specific to each database (i.e. rights granted to users,
rights granted to roles, roles granted to users, database owner, table owner, ...)

The only way how to "switch" to specific role is to specify it during login.
IB does not implement SET ROLE command (from standard SQL)
to change role after login.

> 2. How can I ascertain the role immedietly after logging in so that I
> can make certain menu items invisible?

Because _you_ (your application, user) must specify role during login,
you know what the role is.

Or another possibility is to not use roles at all (grant all required rights directly to users),
and create table with list of users and informations needed to change menu items visibility.

Ivan
prenosil@...
http://www.volny.cz/iprenosil/interbase

----------

> From: Wayne <Wayne@...>
> To: ib-support@yahoogroups.com
> Subject: [ib-support] A Newbie Question
> Date: 20. srpna 2001 11:46
>
> Hi All,
>
> I have developed an app in Delphi. I have been adding and deleting
> users in the database direct from my app, using TIBSecurityservice.
>
> No Problem. My question relates to roles.
>
> Am I right in saying the following, users are for the server but
> roles are database specific?
>
> This is what I want to achieve. Currently I have no roles at all but
> have decided to implement roles, security will be at database level
> as well as app level. At the app level, certain roles will access
> certain forms (menu Items).
>
> Currently users log in showing user name and password.
>
> 1. I do not want the user to have to enter a role at log in time (In
> fact each user will only have one possible role and as far as I am
> concerned, need not even know what that role is)
>
> 2. How can I ascertain the role immedietly after logging in so that I
> can make certain menu items invisible?
>
> 3. How do I allocate a role to a user, is it via isc4.gdb or my own
> database?