firebird-support - Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW

Subject	Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)
Author	Bryan Cole
Post date	2018-12-18T11:04:46Z

We've just updated our application to use FB3 (version 3.0.3, on Fedora27). We create a new admin user (not SYSDBA) but no matter what I try, this admin user cannot add/remove other users.

I'm creating the admin user as follows:

[mypc]$ isql-fb -u SYSDBA -p mydbapassword localhost:mydatabase

Database: localhost:mydatabase, User: SYSDBA

SQL> CREATE USER test PASSWORD 'test' GRANT ADMIN ROLE;

SQL> exit;

So far so good. But when I try to create other users I get:

[mypc]$ isql-fb -u test -p test -r rdb$admin localhost:mydatabase

Database: localhost:mydatabase, User: TEST

SQL> CREATE USER owner PASSWORD 'owner';

Statement failed, SQLSTATE = 28000

add record error

-no permission for INSERT access to TABLE PLG$VIEW_USERS

I've no idea what I'm doing wrong. Can anyone advise? This used to work fine on v2.5. I've tried switching back to legacy auth but I see the same behaviour.

Connecting as the "admin" role, rather than "rdb$admin" also doesn't help.

Thanks

Bryan