Subject | Re: [firebird-support] creating roles as no-SYSDBA-owner of a DB |
---|---|
Author | Björn Reimer |
Post date | 2007-03-05T15:30:40Z |
Hello,
Hm, well no.
There is no user account.
There was a CREATE ROLE statement which failed during installation
and many grants to that role which haven't failed.
so there are many entries for a user RRZE in RDB$USER but there is
no USER RRZE in the security DB and there should!
RRZE should get a role.
What to do now?
DELETE FROM RDB$USER_PRIVILEGES WHERE RDB$USER='RRZE' ?
Or write a stored procedure which generates code to revoke al
granted permissions?
--
Björn Reimer -- R R Z E -- Datenbanken und DV-Verfahren
Hm, well no.
There is no user account.
There was a CREATE ROLE statement which failed during installation
and many grants to that role which haven't failed.
so there are many entries for a user RRZE in RDB$USER but there is
no USER RRZE in the security DB and there should!
RRZE should get a role.
What to do now?
DELETE FROM RDB$USER_PRIVILEGES WHERE RDB$USER='RRZE' ?
Or write a stored procedure which generates code to revoke al
granted permissions?
>> On Firebird 2.0 (LI-V6.3.0.12748) I'm getting the following strange messages:Björn
>> /*******************************************************************************
>> The next statement causes the following error:
>> This operation is not defined for system tables.
>> unsuccessful metadata update.
>> user name RRZE could not be used for SQL role.
>> *******************************************************************************/
>> CREATE ROLE RRZE;
> You already have user RRZE in your database
> (i.e. RRZE is owner of some objects, or RRZE has granted some rights), try
> SELECT * FROM RDB$USER_PRIVILEGES WHERE RDB$USER='RRZE';
> Ivan
> http://www.volny.cz/iprenosil/interbase/
--
Björn Reimer -- R R Z E -- Datenbanken und DV-Verfahren