On 10-11-2018 13:33, Mark Rotteveel mark@...
[firebird-support] wrote:

>> I can confirm it works correctly in 2.5.x (can't say anything about 3.x
>> though). We're using the same approach (the users of our system are
>> actually created as FB users, so granting access to PUBLIC is more
>> convenient than having to execute dozens of grants after adding each new
>> user; I know it has some downsides, but that's not the point here).
>
> Firebird 4 will introduce default roles (though technically PUBLIC is a
> default role as well) which will allow more control by granting users a
> default role. That way they will get the rights of those default roles
> without having to explicitly specify a role on connect.

And I just found out that with Firebird 3's authentication mapping, you
can define a mapping that will automatically grant and enable a role.

Mark
--
Mark Rotteveel