> > You have to specify the role when connecting to the
> > database.
>
> Hm... it looks like you can specify only one role per connection.
> So you can't use roles the way I understood... I thought roles
> were just a 'bunch of permissions' that can be granted to a user.
> That means a user only 'belongs to' one role at a time and
> has to reconnect to use the rights he/she might have with another role?

Correct.

> And how do you know which roles the user belongs to before
> you connect to the database? Let's say the admin granted you
> new permissions on a table via a role, but didn't tell you.

You can get the roles a user is a member of by querying one
of the system tables. If you need that query, then let me
know and I will look it up for you.

> Sorry, but I don't think I got the idea behind roles right.

AFAIK, Firebird's implementation of role support strictly follows
the SQL standard.


HTH,
Thomas Steinmaurer

The IB LogManager Product Family
Logging/Auditing Suite for InterBase and Firebird
http://www.iblogmanager.com