Subject | Firebird 2.x security and non-SYSDBA users |
---|---|
Author | Christian Waldmann |
Post date | 2009-05-14T08:59:44Z |
Hi security experts
With Firebird 1.5 I have modified the security.fdb to let an non-SYSDBA
user add and delete USERS.
The same modification works with Firebird 2.1.2 and security2.fdb only
for adding users with an non-SYSDBA user. Deleting is not possible,
because a non-SYSDBA user can not see other users.
Two questions:
- Is this a bug or a feature that a non-SYSDBA user can ad users?
- Can I configure firebird 2.1, so that a non-SYSDBA user (with the
needed grants in the security2.fdb) can delete users?
Best regards
Christian
__________ Hinweis von ESET NOD32 Antivirus, Signaturdatenbank-Version
4073 (20090513) __________
E-Mail wurde gepruft mit ESET NOD32 Antivirus.
http://www.eset.com
With Firebird 1.5 I have modified the security.fdb to let an non-SYSDBA
user add and delete USERS.
The same modification works with Firebird 2.1.2 and security2.fdb only
for adding users with an non-SYSDBA user. Deleting is not possible,
because a non-SYSDBA user can not see other users.
Two questions:
- Is this a bug or a feature that a non-SYSDBA user can ad users?
- Can I configure firebird 2.1, so that a non-SYSDBA user (with the
needed grants in the security2.fdb) can delete users?
Best regards
Christian
__________ Hinweis von ESET NOD32 Antivirus, Signaturdatenbank-Version
4073 (20090513) __________
E-Mail wurde gepruft mit ESET NOD32 Antivirus.
http://www.eset.com