Subject | Re: [firebird-support] Connect using a ROLE that has not been GRANTed |
---|---|
Author | Dean Harding |
Post date | 2008-04-17T06:11:55Z |
Jarrod Hollingworth wrote:
I presume that if you specify a role that a user has not been granted,
it's the same as not specifying any role at all -- that you get just the
privileges granted directly to the user.
Dean.
> GRANT SELECT, REFERENCES ON CATEGORY TO USER ADVUSERYou've granted the privileges directly to the users, not to the roles.
> GRANT SELECT, REFERENCES ON V_CATEGORYGEN TO USER ADVUSER
> GRANT SELECT, REFERENCES ON V_CATEGORYGEN TO USER GENUSER
> GRANT ADVROLE TO ADVUSER
> GRANT GENROLE TO GENUSER
I presume that if you specify a role that a user has not been granted,
it's the same as not specifying any role at all -- that you get just the
privileges granted directly to the user.
Dean.