Subject Re: [firebird-support] Grant alter to a table or any other object
Author Michael Ludwig
Michael Ludwig schrieb am 31.05.2010 um 19:22:12 (+0200):
> Ramiro Barreca schrieb am 31.05.2010 um 12:32:41 (-0300):
> > Is there the possibility to grant DDL permissions to any object for
> > users other than SYSDBA or its owner?
> >
> > I mean, We have several databases that are accessed by developers
> > that must have alter permission to work at development time. But
> > there are only grant to DML sentencies.
>
> It's possible in Oracle and MSSQL and possibly others:
>
> http://technet.microsoft.com/en-us/library/ms178569.aspx
> http://ss64.com/ora/grant.html
>
> Not sure about other systems. In Firebird, it looks like those
> operations are restricted to owner and SYSDBA.

They're not. I'm surprised to find that a user with no privileges
whatsoever in a database may create tables (and possibly other objects
as well), and also alter and drop those tables.

So Ramiro, why don't you just have your users create your database in
the first place so they'll have all the rights they can possibly need?

--
Michael Ludwig