22.05.2013 2:41, Claudio Valderrama C. wrote:
> However, any user can add fields to monitoring tables. I would say this is
> silly but harmless. However, dropping fields is strange, I think:
Surely it's worth protecting/rejecting, as well as the other effects
you've mentioned in the next post.
Other weird tests on FB3, using an unprivileged user:
I can alter the data type of any field in a monitoring table.
I can create triggers on monitoring tables. Apparently, they aren't
executed, but I cannot alter them.
SQL> set term ^;
SQL> create exception ex 'stop'^
SQL> create trigger tr2 for
People, I created two unprivileged users, then with the first I created a
domain. Logged in with the second and tried to drop the domain: error, no
privileges.
This is a great protection compared to previous versions. Now, users cannot
delete records from rdb$pages either.
However, any user can ad
