Other weird tests on FB3, using an unprivileged user:

I can alter the data type of any field in a monitoring table.

I can create triggers on monitoring tables. Apparently, they aren't
executed, but I cannot alter them.

SQL> set term ^;
SQL> create exception ex 'stop'^
SQL> create trigger tr2 for mon$io_stats before insert as begin exception
ex; end ^
SQL> select * from mon$io_stats^  => supposedly there are inserts to
populate the table, but I think the trigger would react only if I do an
explicit INSERT, so here I don't see any effect.

The server says I don't have privileges to alter this trigger, although I
was the creator. However, I was able to drop it.

This stupid experiment killed the server:

SQL> create table t_io(pk int primary key)^
SQL> alter table mon$io_stats add foreign key (mon$stat_id) references
t_io(pk)^

The less rope we give a creative user to hang himself, the better, I think.

C.


------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to