Subject Re: [firebird-support] Re: ROLE, GRANT, users? Looking for assistance
Author Helen Borrie
At 02:57 PM 1/02/2005 +0000, you wrote:


>No, I loged in just as an user.
>How can I log with role if my USERA and USERB, both, use two roles?
>I believe roles work as logical OR... meaning if I have few roles,
>than user uses all of it when loged.
>
>Does that mean that I have to create simple roles, including all
>grants required for certain user, and not combine roles as I did?

A role is not a group. It is a set of privileges. Grant the ROLE to the
USER, and then, when the USER logs in with that ROLE, he has that set of
privileges (plus any privileges that were already granted that USER or to
PUBLIC.

You can create different roles with overlapping privileges. A user can
only be logged in using a single role. The same user can be logged in at
different connections using different roles.

SQL privileges are at least as funny as the Mickey Mouse show. :-)

./hb