Subject Re: [firebird-support] Connect using a ROLE that has not been GRANTed
Author Dean Harding
Jarrod Hollingworth wrote:
> GRANT SELECT, REFERENCES ON CATEGORY TO USER ADVUSER
> GRANT SELECT, REFERENCES ON V_CATEGORYGEN TO USER ADVUSER
> GRANT SELECT, REFERENCES ON V_CATEGORYGEN TO USER GENUSER
> GRANT ADVROLE TO ADVUSER
> GRANT GENROLE TO GENUSER

You've granted the privileges directly to the users, not to the roles.

I presume that if you specify a role that a user has not been granted,
it's the same as not specifying any role at all -- that you get just the
privileges granted directly to the user.

Dean.