Re: [Firebird-devel] DDL permissions

2015-03-01 Thread Simonov Denis
Roman Simakov roman.sima...@red-soft.biz wrote Fri, 04 Jul 2014 17:23:38 +0300: Hello! I'd like to present a patch for firebird trunk which implements http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does. Patch was discussed with Dmitry Yemanov, Alex Peshkoff and Vlad

Re: [Firebird-devel] DDL permissions

2014-08-17 Thread Alex Peshkoff
On 08/16/14 18:07, Simonov Denis wrote: Roman Simakov roman.sima...@red-soft.biz писал(а) в своём письме Fri, 04 Jul 2014 18:23:38 +0400: Hello! I'd like to present a patch for firebird trunk which implements http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does. Patch was

Re: [Firebird-devel] DDL permissions

2014-08-17 Thread Simonov Denis
Alex Peshkoff peshk...@mail.ru wrote Sun, 17 Aug 2014 13:00:52 +0400: Denis, please add a ticket to the tracker. OK. http://tracker.firebirdsql.org/browse/CORE-4522 -- Simonov Denis -- Firebird-Devel mailing

Re: [Firebird-devel] DDL permissions

2014-08-16 Thread Simonov Denis
Roman Simakov roman.sima...@red-soft.biz писал(а) в своём письме Fri, 04 Jul 2014 18:23:38 +0400: Hello! I'd like to present a patch for firebird trunk which implements http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does. Patch was discussed with Dmitry Yemanov, Alex

Re: [Firebird-devel] DDL permissions

2014-08-03 Thread Simonov Denis
Dmitry Yemanov firebi...@yandex.ru wrote Sat, 02 Aug 2014 20:14:38 +0400: 01.08.2014 18:55, Simonov Denis wrote: SQL insert into RDB$EXCEPTIONS(RDB$EXCEPTION_NAME) VALUES ('E1'); Note that I did this unprivileged user! At the first glance, I don't see why it cannot be prohibited. But I see

Re: [Firebird-devel] DDL permissions

2014-08-03 Thread Claudio Valderrama C.
-Original Message- From: Dmitry Yemanov [mailto:firebi...@yandex.ru] Sent: Sábado, 02 de Agosto de 2014 12:15 01.08.2014 18:55, Simonov Denis wrote: SQL insert into RDB$EXCEPTIONS(RDB$EXCEPTION_NAME) VALUES ('E1'); At the first glance, I don't see why it cannot be prohibited.

Re: [Firebird-devel] DDL permissions

2014-08-02 Thread Dmitry Yemanov
01.08.2014 18:55, Simonov Denis wrote: SQL insert into RDB$EXCEPTIONS(RDB$EXCEPTION_NAME) VALUES ('E1'); At the first glance, I don't see why it cannot be prohibited. But I see from the code that many system tables are still unprotected from user inserts. Maybe Claudio still has some pending

Re: [Firebird-devel] DDL permissions

2014-08-01 Thread Simonov Denis
Roman Simakov roman.sima...@red-soft.biz wrote Fri, 04 Jul 2014 18:23:38 +0400: Hello! I'd like to present a patch for firebird trunk which implements http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does. I'm ready to answer any questions. I'd like to commit it.

Re: [Firebird-devel] DDL permissions

2014-08-01 Thread Roman Simakov
2014-08-01 18:55 GMT+04:00 Simonov Denis sim-m...@list.ru: DDL permissions is very good, but so far it is possible to modify the system tables are not useful enough. For some system tables is already banned, but some still allow some nastiness. A few simple examples: Yes. Direct changing

Re: [Firebird-devel] DDL permissions

2014-07-23 Thread Simonov Denis
Roman Simakov roman.sima...@red-soft.biz wrote, 04 Jul 2014 18:23:38 +0400: In doc/sql.extensions/README.ddl_access.txt write Where OBJECT could be: TABLE, VIEW, PROCEDURE, FUNCTION, PACKAGE, GENERATOR, SEQUENCE, DOMAIN, EXCEPTION, ROLE, SHADOW, DATABASE, CHARACTER SET,

Re: [Firebird-devel] DDL permissions

2014-07-17 Thread Simonov Denis
Roman Simakov roman.sima...@red-soft.biz wrote, 04 Jul 2014 18:23:38 +0400: Hello! I'd like to present a patch for firebird trunk which implements http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does. After adding restrictions on DDL statements, I can not start

Re: [Firebird-devel] DDL permissions

2014-07-17 Thread Dmitry Yemanov
17.07.2014 12:32, Simonov Denis wrote: After adding restrictions on DDL statements, I can not start initialized security3.fdb GSEC add sysdba -pw masterkey An error occurred while attempting to add the user. unsuccessful metadata update CREATE TABLE PLG$SRP failed There is no privilege

Re: [Firebird-devel] DDL permissions

2014-07-17 Thread Simonov Denis
Dmitry Yemanov firebi...@yandex.ru wrote Thu, 17 Jul 2014 17:58:59 +0400: 17.07.2014 12:32, Simonov Denis wrote: Two workarounds are possible: (1) gsec -user sysdba -pass masterkey GSEC add sysdba -pw masterkey or (2) isql -user sysdba employee SQL create user sysdba password

Re: [Firebird-devel] DDL permissions

2014-07-14 Thread Simonov Denis
Roman Simakov roman.sima...@red-soft.biz wrote Fri, 04 Jul 2014 18:23:38 +0400: Hello! I'd like to present a patch for firebird trunk which implements http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does. Patch was discussed with Dmitry Yemanov, Alex Peshkoff and Vlad

Re: [Firebird-devel] DDL permissions

2014-07-14 Thread Roman Simakov
2014-07-14 10:18 GMT+04:00 Simonov Denis sim-m...@list.ru: I think it is more correct to describe it as Agreed. -- Roman Simakov -- Want fast and easy access to all the code in your enterprise? Index and search up to

Re: [Firebird-devel] DDL permissions

2014-07-14 Thread Dalton Calford
It would be nice if there was an option for visibility ie GRANT VISIBLE FOR OBJECT TYPE OBJECT TO [USER|ROLE] user/role name [with grant option]; REVOKE VISIBLE FOR OBJECT TYPE OBJECT FROM [USER|ROLE] user/role name; With a default of all things being visible to maintain backwards

Re: [Firebird-devel] DDL permissions

2014-07-14 Thread Roman Simakov
2014-07-14 16:22 GMT+04:00 Dalton Calford dalton.calf...@gmail.com: It would be nice if there was an option for visibility ie GRANT VISIBLE FOR OBJECT TYPE OBJECT TO [USER|ROLE] user/role name [with grant option]; REVOKE VISIBLE FOR OBJECT TYPE OBJECT FROM [USER|ROLE] user/role name; With

Re: [Firebird-devel] DDL permissions

2014-07-14 Thread Dalton Calford
Hi Roman, On 14 July 2014 08:37, Roman Simakov roman.sima...@gmail.com wrote: I do not think that separate operators for these are good. It can lead to inconsistence like user has permissions on object but cannot see it. Actually, that is preferred. For developers and power users, we can

Re: [Firebird-devel] DDL permissions

2014-07-07 Thread Roman Simakov
Hi, Mark! Thanks for your reply: 2014-07-05 10:30 GMT+04:00 Mark Rotteveel m...@lawinegevaar.nl: I have not checked the code thoroughly, but I noticed two things: 1) there are still some TODOs in the code Yes. The main part is done. The rest one is about user management which will be

Re: [Firebird-devel] DDL permissions

2014-07-05 Thread Mark Rotteveel
On 4-7-2014 16:23, Roman Simakov wrote: Hello! I'd like to present a patch for firebird trunk which implements http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does. Patch was discussed with Dmitry Yemanov, Alex Peshkoff and Vlad Khorsun. Small description you can find in

Re: [Firebird-devel] DDL permissions

2014-07-05 Thread Mark Rotteveel
On 5-7-2014 08:30, Mark Rotteveel wrote: For 2 (entirely based on the name), I'd propose: * dyn_no_priv (335545094): 42000 (syntax error or access rule violation) * dsql_cant_grant_option (336397330) : 42000 (syntax error or access rule violation), I had hoped there was a closer one, but