Subject Re: [IBO] Using a different user
Author Helen Borrie
At 03:53 PM 24/02/2003 +1100, you wrote:
>Can I use a TIB_Script to modify the database ?
>
>If so, I guess I can use something like:
>
>GRANT SELECT, INSERT, UPDATE, DELETE, REFERENCES ON GROUPS TO USER NEWUSER;
>GRANT SELECT, INSERT, UPDATE, DELETE, REFERENCES ON IPLOOKUP TO USER
>NEWUSER;
>GRANT SELECT, INSERT, UPDATE, DELETE, REFERENCES ON SPRITEDETAIL TO USER
>NEWUSER;
>
>along with some kind of prefix to indicate the database is to be updated.
>I'm looking for some SQL references on this but if anyone can answer this in
>the meantime I'd appreciate it.

Malcolm,
Your questions are really off-topic for the IBO list but I'll give some
brief indicators to get you started on questions you might need to ask in
ib-support...

First, someone logged in as SYSDBA can add or modify users. No other user
can do so.

Don't distribute your trial app with the default password 'masterkey'. Use
a new, non-obvious SYSDBA password and get your customer to go into the
security database on his own server and change the default SYSDBA password
to this.

For code to add and modify users from IBO, look at the source for IB_SQL
(in the root of your IBO installation and see how it's done there.

No users have any access rights at all except SYSDBA and the owner. The
owner is the user which created the database, if that wasn't SYSDBA. All
other users have to be GRANTed specific privileges by the owner or
SYSDBA. Granting rights can be passed on to other users. Study the manual
for all of this.

Helen