Subject | Re: [firebird-support] Grant alter to a table or any other object |
---|---|
Author | Ramiro Barreca |
Post date | 2010-05-31T22:00:16Z |
Michael:
The problem is there is a team of more than 2 persons that must work with
the database during development time.
On the same way, If the DBA wants some other person to alter just some
objects in this database, and don't want to allow any change to the other
objects, we can't.
Ramiro
2010/5/31 Michael Ludwig <milu71@...>
Ramiro Barreca
rbarreca@...
[Non-text portions of this message have been removed]
The problem is there is a team of more than 2 persons that must work with
the database during development time.
On the same way, If the DBA wants some other person to alter just some
objects in this database, and don't want to allow any change to the other
objects, we can't.
Ramiro
2010/5/31 Michael Ludwig <milu71@...>
>--
>
> Michael Ludwig schrieb am 31.05.2010 um 19:22:12 (+0200):
>
> > Ramiro Barreca schrieb am 31.05.2010 um 12:32:41 (-0300):
> > > Is there the possibility to grant DDL permissions to any object for
> > > users other than SYSDBA or its owner?
> > >
> > > I mean, We have several databases that are accessed by developers
> > > that must have alter permission to work at development time. But
> > > there are only grant to DML sentencies.
> >
> > It's possible in Oracle and MSSQL and possibly others:
> >
> > http://technet.microsoft.com/en-us/library/ms178569.aspx
> > http://ss64.com/ora/grant.html
> >
> > Not sure about other systems. In Firebird, it looks like those
> > operations are restricted to owner and SYSDBA.
>
> They're not. I'm surprised to find that a user with no privileges
> whatsoever in a database may create tables (and possibly other objects
> as well), and also alter and drop those tables.
>
> So Ramiro, why don't you just have your users create your database in
> the first place so they'll have all the rights they can possibly need?
>
> --
> Michael Ludwig
>
>
>
Ramiro Barreca
rbarreca@...
[Non-text portions of this message have been removed]