Pavel Cisar wrote 09.08.2022 16:14:
I really don't understand WHY it's necessary to authenticate user against some database for *create database*.

  Imagine someone creating thousands of databases without authentication.

It's definitely not necessary to provide any kind of database reference to attach to service manager.

  That's exactly what isc_spb_expected_db is for.

but to authenticate the right to invoke the database creation itself, no 
database should be needed (like it's not needed for attachment to service 
manager).

  But how are you going to check users' rights for database creation in this 
case?

--
  WBR, SD.


Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to