Subject Firebird 2.x security and non-SYSDBA users
Author Christian Waldmann
Hi security experts

With Firebird 1.5 I have modified the security.fdb to let an non-SYSDBA
user add and delete USERS.

The same modification works with Firebird 2.1.2 and security2.fdb only
for adding users with an non-SYSDBA user. Deleting is not possible,
because a non-SYSDBA user can not see other users.

Two questions:
- Is this a bug or a feature that a non-SYSDBA user can ad users?
- Can I configure firebird 2.1, so that a non-SYSDBA user (with the
needed grants in the security2.fdb) can delete users?

Best regards
Christian


__________ Hinweis von ESET NOD32 Antivirus, Signaturdatenbank-Version
4073 (20090513) __________

E-Mail wurde gepruft mit ESET NOD32 Antivirus.

http://www.eset.com