At 02:46 AM 8/12/2005 +0000, you wrote:

>Dear all,
>
>I have a table MYTABLE and a user USER1 in the FB 1.5 database, what
>I do is:
>
>CREATE ROLE REF_READONLY
>GRANT SELECT ON MYTABLE TO REF_READONLY
>GRANT REF_READONLY TO USER1
>
>However, when I login as USER1 and do a SELECT * FROM MYTABLE, I am
>unable to select that table with an error saying: No permission for
>read/select access to COLUMN MYTABLECOL1. I do not understand why
>can't I select the table with USER1.
>
>I check the RDB$USER_PRIVILEGES, I can see the following:
>
>REF_READONLY SYSDBA S 0 MYTABLE
>USER1 SYSDBA M 0 REF_READONLY
>
>It seems that USER1 is the member of REF_READONLY.
>
>Is there something I am missing here?

Yup. Roles are not groups, they are privileges - usually (but not always)
used for rolling a set of privileges together to be granted as a whole to
specific users.

The requirement is supply both the username of the user who has the role
AND the role at login.

./heLen

>Regards,
>Zion
>
>
>
>
>
>
>
>
>
>++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
>
>Visit http://firebird.sourceforge.net and click the Resources item
>on the main (top) menu. Try Knowledgebase and FAQ links !
>
>Also search the knowledgebases at http://www.ibphoenix.com
>
>++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
>
>Yahoo! Groups Links
>
>
>
>