Subject Re: must I grant select in order to DELETE ... WHERE,
Author miloshd2003
--- In firebird-support@yahoogroups.com, "Ann W. Harrison"
<aharrison@i...> wrote:
> miloshd2003 wrote:
> >
> > Do I have to grant SELECT permission on a table T in order to
allow
> > the user to execute:
> >
> > DELETE FROM T WHERE ID=5
> >
> > I can wipe the table (DELETE FROM T), but if I try to reference
any
> > fields, FB complains (see below)... BTW, user sees the data
through a
> > view, but the view references several tables and thus isn't
> > updateable.
>
> As people have no doubt told you, you can make the view
updateable. The
> reason for requiring select privilege on a searched delete is that
the
> delete could be used to probe data. A sequence like this:
>
> select count (*) from employees;
>
> delete from employees where name = 'Ann' and salary > 20000;
>
> select count (*) from employees;
>
> rollback;
>
> delete from employees where name = 'Ann' and salary > 10000;
>
> etc.
>
> Ann

Thanks for replying. The view references several tables and I thought
that such views can not be updateable. OK, I will try something.

Regards,
Milos