Subject | Re: [firebird-support] Re: gsec in a procedure |
---|---|
Author | Helen Borrie |
Post date | 2003-11-22T22:05:16Z |
At 04:21 PM 22/11/2003 +0000, you wrote:
The APIs do surface functions for doing this. Various graphical utility
tools (e.g. IB_SQL) let you do it if you are logged in as SYSDBA.
If your boss insists you roll your own, and you can not use the API, and
you have Delphi, you could pick up the FreeUDFLib source kit from
www.cvalde.net and compile it in Delphi. It has an external function
called f_IBPassword that takes a user name and password as input.
In the kit is a SQL script which you can run over the security database,
installing some stored procedures and permissions allowing the SYSDBA user
to add and delete users and any non-SYSDBA user to allow a user to log in
and change his own password. Very, very insecure.
The script RIGHTLY has a page-long disclaimer telling you how stupid it is
to do this. Run the text of this disclaimer through Babelfish and give it
to your boss to read before you try it. If he insists you do it anyway,
good luck!
heLen
>Insane DBA???If you *must* do this or lose your job, I feel sorry for you.
>I just have to do my work, my boss told me to write a procedure where
>he can create user as easy as possible. He hate the system console,
>and he hate all DBMS different than SQL server, I am just a simple
>worker, I have to do it.
>I know that is insane create the procedure, but what can I do? lose
>my job? I do not think so.
>I am a new user of FiredBird, I do not know other way to create user
>without using a system call. Can you tell me how?
>
>P.D: I am not the DBA and I do not speak (write) in English perfect.
The APIs do surface functions for doing this. Various graphical utility
tools (e.g. IB_SQL) let you do it if you are logged in as SYSDBA.
If your boss insists you roll your own, and you can not use the API, and
you have Delphi, you could pick up the FreeUDFLib source kit from
www.cvalde.net and compile it in Delphi. It has an external function
called f_IBPassword that takes a user name and password as input.
In the kit is a SQL script which you can run over the security database,
installing some stored procedures and permissions allowing the SYSDBA user
to add and delete users and any non-SYSDBA user to allow a user to log in
and change his own password. Very, very insecure.
The script RIGHTLY has a page-long disclaimer telling you how stupid it is
to do this. Run the text of this disclaimer through Babelfish and give it
to your boss to read before you try it. If he insists you do it anyway,
good luck!
heLen