Re: [Firebird-devel] Refresh roles

2022-05-11 Thread Jim Starkey
Both Amorphous and NuoDB have server synchronization issues in spades.  In NuoDB I created an internal event mechanism; in Amorpohous I formalized and exposed the mechanism to the client API.  Unlike the Interbase event mechanism, Amorphous events are deliver asynchronously (generally on a

Re: [Firebird-devel] Refresh roles

2022-05-11 Thread Adriano dos Santos Fernandes
On 11/05/2022 16:03, Roman Simakov wrote: > > SQL SECURITY replaces an effective user for some time. Can you use the > same trick while profiler initializing? > No. Profiler plugin creates tables and views and grant access to them to role PLG$PROFILER that is grated to users. Users directly

Re: [Firebird-devel] Refresh roles

2022-05-11 Thread Roman Simakov
ср, 11 мая 2022 г. в 21:10, Adriano dos Santos Fernandes : > > On 11/05/2022 14:47, Roman Simakov wrote: > > > > I was thinking the profiler should not touch profiled attachments at > > all. It might influence its logic. > > > > The profiler should work on its initial usage when it creates its

Re: [Firebird-devel] Refresh roles

2022-05-11 Thread Adriano dos Santos Fernandes
On 11/05/2022 14:47, Roman Simakov wrote: > > I was thinking the profiler should not touch profiled attachments at > all. It might influence its logic. > The profiler should work on its initial usage when it creates its metadata. This is priority for me than theoretical problems due to roles

Re: [Firebird-devel] Refresh roles

2022-05-11 Thread Roman Simakov
ср, 11 мая 2022 г. в 19:40, Adriano dos Santos Fernandes : > > On 11/05/2022 11:55, Roman Simakov wrote: > > Can you make up or describe a potential case of the situation? > > Undoubtedly the feature would be useful but we've lived without it for > > all the time. > > > > In the profiler, I will

Re: [Firebird-devel] Refresh roles

2022-05-11 Thread Mark Rotteveel
On 11-05-2022 18:56, Alex Peshkoff via Firebird-devel wrote: On the other hand I see no problems if we have dedicated command peforming desired action. Suggest syntax: SET ROLE without parameters. (but not insist on it) To me, `SET ROLE` without a role name doesn't feel correct, and doesn't

Re: [Firebird-devel] Refresh roles

2022-05-11 Thread Alex Peshkoff via Firebird-devel
On 5/11/22 19:40, Adriano dos Santos Fernandes wrote: On 11/05/2022 11:55, Roman Simakov wrote: Can you make up or describe a potential case of the situation? Undoubtedly the feature would be useful but we've lived without it for all the time. In the profiler, I will create a role, the tables

Re: [Firebird-devel] Refresh roles

2022-05-11 Thread Adriano dos Santos Fernandes
On 11/05/2022 11:55, Roman Simakov wrote: > Can you make up or describe a potential case of the situation? > Undoubtedly the feature would be useful but we've lived without it for > all the time. > In the profiler, I will create a role, the tables and views in another connection. I'll grant

Re: [Firebird-devel] Refresh roles

2022-05-11 Thread Roman Simakov
Can you make up or describe a potential case of the situation? Undoubtedly the feature would be useful but we've lived without it for all the time. If a role is revoked from a user, it will affect the next attachment only, won't it? ср, 11 мая 2022 г. в 16:36, Adriano dos Santos Fernandes : > >

Re: [Firebird-devel] Refresh roles

2022-05-11 Thread Dimitry Sibiryakov
Adriano dos Santos Fernandes wrote 11.05.2022 15:35: I think we should improve that automatically refreshing roles via AST or creating some command like ALTER SESSION REFRESH ROLES. IMHO it is an unnecessary complication with negative effect on performance. -- WBR, SD. Firebird-Devel

[Firebird-devel] Refresh roles

2022-05-11 Thread Adriano dos Santos Fernandes
Hi! When roles are default granted to an user, they are not immediately reflected in the attachments. Attachments need to issue a SET ROLE which should be different than currently used, then another SET ROLE to the correct one to refresh the roles. Or re-attach. I think we should improve that