Subject Re: [firebird-support] Firebird 2.0 Security
Author Helen Borrie
At 05:51 AM 17/01/2007, you wrote:
>As a new user of Firebird 2.0 I was suprised to learn that the master
>database password was limited to 8 characters.

Currently the authentication considers only the first 8 bytes

>Are there any limits to
>the characters that can be used in the password?

31 bytes - but 'accounts', 'accounts_payable' and
'accounts_receivable' are the same password of course.

>Secondly. Is there a way to create a Security2.fdb file in code so
>that each application developed can have its on specific UID and PWD?

Security2.fdb is server-wide (Firebird doesn't have database-level
authentication) so no. Applications are clients. Authentication
gets the client past the centurion at the gate of the server. You
can create as many users as you want. Pass the required one via the
application's connection request.

By default, only the object owner and the SYSDBA user have access to
objects. SQL privileges inside a database determine which user may
access which objects and for which operations. You can use ROLES to
package groups of privileges and then assign a role to a user - so
possibly what you want is to create a role that is applicable to the
specific group of privileges that is needed by a particular application.

./heLen