non-priviledged user can block creation of new tables by select ... from 
rdb$database FOR UPDATE WITH LOCK
----------------------------------------------------------------------------------------------------------

                 Key: CORE-4357
                 URL: http://tracker.firebirdsql.org/browse/CORE-4357
             Project: Firebird Core
          Issue Type: Bug
          Components: Engine
    Affects Versions: 3.0 Alpha 2
            Reporter: Pavel Zotov


LI-T3.0.0.30889

session #1 (as SYSDBA)
==========
[root@oel64 15:40:42 fb30]$ /opt/fb30trnk/bin/isql 
localhost/3333:/var/db/fb30/empty30.fdb
Database:  localhost/3333:/var/db/fb30/empty30.fdb
SQL> -- drop user nikto; -- if such user exists...
SQL> create user nikto password 'nikak'; commit;
SQL> revoke all on all from nikto; commit;
Statement failed, SQLSTATE = 00000
Warning: ALL on ALL is not granted to NIKTO.
Warning: ALL on ALL is not granted to NIKTO.

session #2
==========
[root@oel64 15:41:47 fb30]$ /opt/fb30trnk/bin/isql 
localhost/3333:/var/db/fb30/empty30.fdb -user nikto -pas nikak
Database:  localhost/3333:/var/db/fb30/empty30.fdb, User: nikto
SQL> set list on;
SQL> show table rdb$database;
RDB$DESCRIPTION                 (RDB$DESCRIPTION) BLOB segment 80, subtype TEXT 
CHARACTER SET UNICODE_FSS Nullable
RDB$RELATION_ID                 (RDB$RELATION_ID) SMALLINT Nullable
RDB$SECURITY_CLASS              (RDB$SECURITY_CLASS) CHAR(31) CHARACTER SET 
UNICODE_FSS Nullable
RDB$CHARACTER_SET_NAME          (RDB$CHARACTER_SET_NAME) CHAR(31) CHARACTER SET 
UNICODE_FSS Nullable
RDB$LINGER                      (RDB$LINGER) INTEGER Nullable
SQL> select rdb$relation_id from rdb$database for update with lock;

RDB$RELATION_ID                 131 -- passed!! why ???

session #1
==========
SQL> commit;
SQL> set transaction no wait;
SQL> create table tmpnew(x int); -- hangs untill session #2 issues commit or 
rollback.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://tracker.firebirdsql.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

------------------------------------------------------------------------------
Subversion Kills Productivity. Get off Subversion & Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951&iu=/4140/ostg.clktrk
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to