Hi Anderson,

--- In firebird-support@yahoogroups.com, "Anderson Farias"
<peixedragao@...> wrote:

>
> Hi,
>
> AFAIK you are missing:
>
> GRANT EXECUTE ON PROCEDURE JUST_CHECKING TO MYUSERNAME;

That's exactly we do not want : to direct grant to MYUSERNAME
execution rights on procedure JUST_CHECKING.
The point is : if you check the grant chain more carefully, the error
shouldn't happen. MYUSERNAME has rights to update TABLE1 ; by update
to fire TABLE1_AU ; and made TABLE1_AU to attend comfortably to the
TABLE2 update process ; and fire the TABLE2_AU ; whom is granted to
run JUST_CHECKING.
The grant's chain is ok.

>
>
> BTW, instead of direct grant to user, use ROLES

Yes, you're right. This is an ancient heritage from the time when IB
roles were not doing what FB roles are doing today. But even with
roles we will get stuck in the same point.

>
>
> Regards,
> Anderson Farias
>

Thank you,
Doru