Alex Peshkoff via Firebird-devel wrote 12.12.2021 18:52:

If it does not return sensitive information, I see no problem in add it to examples UDR project.

With a check for SYSDBA I see no security risk with this UDR

  Isn't GRANT EXECUTE to RDB$ADMIN enough? Or UDRs are not subject of SQL 
rights?

--
  WBR, SD.


Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to