Subject Re: How to prevent SYSDBA to connect to database
Author Alexander V.Nevsky
--- In firebird-support@yahoogroups.com, Pablo Sánchez <pablos@a...>
wrote:
> Hi, that could be nice, but i get in isql :
>
> SQL> create ROLE SYSDBA ;
> Statement failed, SQLCODE = -607
>
> unsuccessful metadata update
> -user name SYSDBA could not be used for SQL role
> SQL>
>
> It could be nice, at least to keep some lurkers out of the job.
>

Pablo, this trick can be used only if:

a) database was created not by SYSDBA
b) there are not objects created or altered by SYSDBA in this database
c) there are not grants made by SYSDBA in this database

else FB see conflict user name - role name on role creation. It is
related not to SYSDBA only, to any user mentioned as 'owner' or
'grantor' in system tables.

Best regards,
Alexander.