Subject RE: [firebird-support] Firebird sysdba account
Author Alan McDonald
> Sorry to post again but can anyone clarify what I should do for the
> situation described below in my last email?
>
> How do I create the user from the application when the user installs my
> application (and installs Firebird for the first time)?
>
> How do I go about changing the owner of my database from sysdba to a
> new
> owner? I have a near-empty version of my database (just 3 or 4 records
> in
> it). Do you need to recreate it or can you use something like IB_SQL to
> do
> it?

the easiest way with your situation is to take a meta data backup and create
a new database with the name of the new owner (a new/separate user).
Then insert the data as this or another user.

You need user management as part of your application (I suggest). GSEC is
pretty ordinary for an application. most component sets have a services
manager/security component. The first thing after installing to a new
server, the appointed SYSDBA (the person who installs the server and has to
know what the SYSDAB password is) has to create this DB owner user and
provide it a password.
Then this admin person needs to create additional users.
This person has to either grant roles to these users or give the owner
password to a person who administers the application (not the server), so
the new users (created by SYSDBA) can be granted the appropriate roles to
access the database by the owner user.
Therein lies the hierarchical nature of granting permissions. Someone at the
client, since they own the hardware that FB resides on, must have the right
to have the SYSDBA password. And so they have the right to provide
permissions down the line of administrators and users.

If you choose to deploy with embedded only, then no such user management is
required.
Alan

>
> Thanks,
> Stephen