Hi,

> At 14:10 01.10.2002 +0300, you wrote:
> >Is it possible to create another user with full SYSDBA rights
> >(create/modify/delete users, grant rigths)? If yes, then how?
> >
> >Currently my app users are stored into ISC4 and all users administration
> >is done by SYSDBA.
> >But some users have more than one application that uses firebird and they
> >want to have separate admin for my programs user administration.
>
> As Martijn said, you cannot give another user full SYSDBA rights. However,
> rights to the tables are given to SYSDBA as well as the creator of each
> table (and I guess the same goes for stored procedures, views etc). So if
> you write a script creating your tables/SPs etc. and make sure that script
> is run by the person supposed to do the administration, (s)he should be
> able to grant the rights for existing users.
>
> Alternatively, if the databases are already in production, you could write
> a script to be executed by SYSDBA which grants necessary rights WITH GRANT
> OPTION.

A lot of additional work to do ;-). The best way is *always* to use a SYSDBA
different user as database owner and for creating *all* database objects.

Usually changing this in a production database causes the recreation of the
database with a new owner and pumping all data from the source into the
destination database.

Btw, another way is to use FBOwnerMigrator - The Firebird Owner Migration Utility,
another tool in my tool family ;-). It helps you in migrating a database from
one user to a new one, without recreation of the database and pumping data.

There is a freeware version (FBOwnerMigrator.exe with GUI) and a commercial
version (a DLL version to embed to entire migration process into your
application or update routine) available.

Interested peoples can contact me directly "ts @ iblogmanager.com".


Regards,
Thomas Steinmaurer
IB LogManager 2.1 - The Logging/Auditing Tool for InterBase and Firebird
http://www.iblogmanager.com