Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

['Bryan Cole' bryan.c...@teraview.com [firebird-support]]

On Wed, 2018-12-19 at 13:46 +1300, Helen Borrie hele...@iinet.net.au 
[firebird-support] wrote:


Bryan,

Maybe something in here will provide that ah-haa moment. ;-)



In Fb 3 and Fb 4-alpha, you must have *both* and perform your login with
the role. In Fb 4 beta 1, a user with the GRANT ADMIN ROLE (SEC$ADMIN TRUE)
does not need to log in with the RDB$ADMIN role. I don't know whether this
is going to be backported to Fb 3.0.5.

Helen


Thanks for the informative post. Turns out my problem was my linux shell 
mangling the role-name.
I've learned a lot about the Firebird security database in process of tracing 
this though. Have also aged about 5 years in the last 2 days.

Bryan

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS) [SOLVED]

['Bryan Cole' bryan.c...@teraview.com [firebird-support]]

On Tue, 2018-12-18 at 20:04 +0100, Dimitry Sibiryakov s...@ibphoenix.com 
[firebird-support] wrote:

18.12.2018 19:17, 'Bryan  Cole' 
bryan.c...@teraview.com [firebird-support] 
wrote:

[root@bryan  bin]# ./isql -user test -pass test -role 
RDB$ADMIN

localhost:employee


   Didn't you forget about a special meaning of $ in bash command line?


YES! That's it!  -> 


OGM I'm an idiot. That bash would mangle the role-name hadn't cross my mind.


Thank you Dimitry. Also Thank You to everyone else who who took the time to 
respond to my pleas for help.

I really appreciate it.


Have a great Xmas/New Year.

Bryan

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

[Helen Borrie hele...@iinet.net.au [firebird-support]]

Bryan,

Maybe something in here will provide that ah-haa moment. ;-)

C:\Programs64\Firebird_3_0_embedded>isql employee -user sysdba
Database: employee, User: SYSDBA
SQL> show version;
ISQL Version: WI-V3.0.4.33054 Firebird 3.0
Server version:
Firebird/Windows/AMD/Intel/x64 (access method), version "WI-V3.0.4.33054 
Firebird 3.0"
on disk structure version 12.0
SQL> create user test password 'testuser' grant admin role;
SQL> -- This statement looks like DDL, so isql should auto-commit it, right?
CON> -- But, under the surface, it is DML (on the security database, natch!)
CON> -- which isql does not autocommit, so
CON> -- we need to commit that DML explicitly before it can be available
CON> -- to grant it the RDB$ADMIN role in the current database;
SQL> --;
SQL> commit;
SQL> select sec$user_name, sec$active, sec$admin, sec$plugin from sec$users;
SEC$USER_NAME   SEC$ACTIVE SEC$ADMIN SEC$PLUGIN 
=== == = 
===
SYSDBA   Srp
DEVELOPER   Srp
TEST Srp
 

SQL> -- Now the user exists, we grant the role to it; 
SQL> grant rdb$admin to test;
SQL> commit;
SQL> select rdb$user, rdb$privilege, rdb$relation_name from rdb$user_privileges
CON> where rdb$user = 'test'; 
SQL> -- no result there:
CON> -- RDB$USER in RDB$USER_PRIVILEGES is stored here as string.  Engine 
CON> -- always stores it in upper case and of course it is case-sensitive.; 
SQL> --
SQL> select rdb$user, rdb$privilege, rdb$relation_name from rdb$user_privileges
CON> where rdb$user = 'TEST';

RDB$USERRDB$PRIVILEGE RDB$RELATION_NAME
=== = ===
TESTM RDB$ADMIN

SQL>quit;

C:\Programs64\Firebird_3_0_embedded>isql employee -user test2 -role rdb$admin
Database: employee, User: TEST, Role: RDB$ADMIN

SQL> create user test2 password 'test2user';
SQL> select sec$user_name, sec$active, sec$admin, sec$plugin from sec$users;

SEC$USER_NAME   SEC$ACTIVE SEC$ADMIN SEC$PLUGIN
=== == = 
===
SYSDBA   Srp
DEVELOPER   Srp
TEST Srp
TEST2   Srp

Take careful note:  the GRANT ADMIN ROLE gives user management privileges to 
the user in ANY database on the server, whereas the RDB$ADMIN role applies 
only in the database where it was granted.  In other words, the user must

1) be committed first into the security database with the 
   GRANT ADMIN ROLE (and don't forget, you have to commit 
   it if you add it later with ALTER USER as well) 
2) be granted RDB$ADMIN in all the databases where you want it 
   to have user management privileges
3) be logged in to a database with the RDB$ADMIN role

In Fb 3 and Fb 4-alpha, you must have *both* and perform your login with 
the role.  In Fb 4 beta 1, a user with the GRANT ADMIN ROLE (SEC$ADMIN TRUE) 
does not need to log in with the RDB$ADMIN role.  I don't know whether this 
is going to be backported to Fb 3.0.5.

Helen


---
This email has been checked for viruses by AVG.
https://www.avg.com

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

[Dimitry Sibiryakov s...@ibphoenix.com [firebird-support]]

18.12.2018 19:17, 'Bryan  Cole' bryan.c...@teraview.com [firebird-support] 
wrote:
> [root@bryan  bin]# ./isql -user test -pass test -role 
> RDB$ADMIN 
> localhost:employee

   Didn't you forget about a special meaning of $ in bash command line?


-- 
   WBR, SD.






++

Visit http://www.firebirdsql.org and click the Documentation item
on the main (top) menu.  Try FAQ and other links from the left-side menu there.

Also search the knowledgebases at http://www.ibphoenix.com/resources/documents/ 

++


Yahoo Groups Links

<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/firebird-support/

<*> Your email settings:
Individual Email | Traditional

<*> To change settings online go to:
http://groups.yahoo.com/group/firebird-support/join
(Yahoo! ID required)

<*> To change settings via email:
firebird-support-dig...@yahoogroups.com 
firebird-support-fullfeatu...@yahoogroups.com

<*> To unsubscribe from this group, send an email to:
firebird-support-unsubscr...@yahoogroups.com

<*> Your use of Yahoo Groups is subject to:
https://info.yahoo.com/legal/us/yahoo/utos/terms/

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

['Bryan Cole' bryan.c...@teraview.com [firebird-support]]

On Tue, 2018-12-18 at 17:20 +0100, liviuslivius liviusliv...@poczta.onet.pl 
[firebird-support] wrote:


If you try something new better use newest snapshot. There are some fixes

OK, I've built and "make installed" the latest 3.0.5 snapshot. This is a fresh 
install. I'm seeing the same problem:

[root@bryan bin]# ./fbguard -daemon -forever
[root@bryan bin]# ps -A | grep fbguard
 5447 ?00:00:00 fbguard
[root@bryan bin]# ps -A | grep firebird
 5448 ?00:00:00 firebird
[root@bryan bin]# ./isql -user sysdba -pass mydbapassword 
localhost:employee
Database: localhost:employee, User: SYSDBA
SQL> create user test password 'test' grant admin role;
SQL> commit;
SQL> grant RDB$ADMIN TO USER test;
SQL> commit;
SQL> exit;
[root@bryan bin]# ./isql -user test -pass test -role 
RDB$ADMIN localhost:employee
Database: localhost:employee, User: TEST
SQL> create user foo password 'foo';
Statement failed, SQLSTATE = 28000
add record error
-no permission for INSERT access to TABLE PLG$SRP_VIEW
SQL> SELECT rdb$get_context('SYSTEM', 'ENGINE_VERSION')
CON> from rdb$database;

RDB$GET_CONTEXT
===
3.0.5

SQL>


I set my sysdba password during the install routine and ran the server manually 
from the install location /usr/local/firebird/bin
I turned off SELinux (just in case...).

Bryan




Regards,
Karol Bieniaszewski



--

Group Leader, Technical Development Group - Teraview Ltd.
Platinum Building, St. John's Innovation Park, Cambridge CB4 0DS, UK.
tel: +44 (0)1223 435386, fax: +44 (0)1223 435382, web: 
www.teraview.com Registered Number: 04126946, VAT 
Number: 770 8883 84

...preferred document formats: ODF (ISO/IEC 26300:2006), PDF

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

[liviuslivius liviusliv...@poczta.onet.pl [firebird-support]]

If you try something new better use newest snapshot. There are some fixes

Regards,Karol Bieniaszewski
null

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

['Bryan Cole' bryan.c...@teraview.com [firebird-support]]

On Tue, 2018-12-18 at 17:08 +0100, Dimitry Sibiryakov s...@ibphoenix.com 
[firebird-support] wrote:

18.12.2018 16:55, 'Bryan  Cole' 
bryan.c...@teraview.com [firebird-support] 
wrote:

I'm using the default which I believe is SRP.


   Make sure by select from MON$ATTACHMENTS.


Confirmed:


[bryan@bryan RPMS]$ isql-fb -user sysdba -pass 
mydbapassword localhost:employee

Database: localhost:employee, User: SYSDBA

SQL> select r.MON$USER, r.MON$AUTH_METHOD from MON$ATTACHMENTS r;


MON$USERMON$AUTH_METHOD

=== 
===

SYSDBA  Srp

Cache Writer

Garbage Collector   


SQL>


Bryan

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

[Dimitry Sibiryakov s...@ibphoenix.com [firebird-support]]

18.12.2018 16:55, 'Bryan  Cole' bryan.c...@teraview.com [firebird-support] 
wrote:
> I'm using the default which I believe is SRP.

   Make sure by select from MON$ATTACHMENTS.


-- 
   WBR, SD.






++

Visit http://www.firebirdsql.org and click the Documentation item
on the main (top) menu.  Try FAQ and other links from the left-side menu there.

Also search the knowledgebases at http://www.ibphoenix.com/resources/documents/ 

++


Yahoo Groups Links

<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/firebird-support/

<*> Your email settings:
Individual Email | Traditional

<*> To change settings online go to:
http://groups.yahoo.com/group/firebird-support/join
(Yahoo! ID required)

<*> To change settings via email:
firebird-support-dig...@yahoogroups.com 
firebird-support-fullfeatu...@yahoogroups.com

<*> To unsubscribe from this group, send an email to:
firebird-support-unsubscr...@yahoogroups.com

<*> Your use of Yahoo Groups is subject to:
https://info.yahoo.com/legal/us/yahoo/utos/terms/

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

['Bryan Cole' bryan.c...@teraview.com [firebird-support]]

I'm using the default which I believe is SRP.

I tried switching to the legacy one earlier today (using FB v3.0.3) but it did 
not make any difference.

Thanks,
Bryan

On Tue, 2018-12-18 at 16:36 +0100, liviuslivius liviusliv...@poczta.onet.pl 
[firebird-support] wrote:


Which plugin do you use, srp or legacy?



Regards,
Karol Bieniaszewski



--

Group Leader, Technical Development Group - Teraview Ltd.
Platinum Building, St. John's Innovation Park, Cambridge CB4 0DS, UK.
tel: +44 (0)1223 435386, fax: +44 (0)1223 435382, web: 
www.teraview.com Registered Number: 04126946, VAT 
Number: 770 8883 84

...preferred document formats: ODF (ISO/IEC 26300:2006), PDF

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

[liviuslivius liviusliv...@poczta.onet.pl [firebird-support]]

Which plugin do you use, srp or legacy?


Regards,Karol Bieniaszewski
null

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

['Bryan Cole' bryan.c...@teraview.com [firebird-support]]

On Tue, 2018-12-18 at 14:56 +0100, Dimitry Sibiryakov s...@ibphoenix.com 
[firebird-support] wrote:

18.12.2018 14:44, 'Bryan  Cole' 
bryan.c...@teraview.com [firebird-support] 
wrote:

I understand I'm doing it wrong. I don't understand what I need to do 
different. I've read all the documentation (really!).


If you could give me a working example, that would be awesome.


 >isql -u sysdba -p masterkey localhost:employee

SQL> CREATE USER test PASSWORD 'test' GRANT ADMIN ROLE;

SQL> grant RDB$ADMIN to user test;

SQL> commit;

 >isql -u test -p test -role RDB$ADMIN localhost:employee

Database: localhost:employee, User: TEST, Role: RDB$ADMIN

SQL> CREATE USER test1 PASSWORD 'test';

SQL> show users;

Users in the database

   0  SYSDBA  1 #TEST

   0  TEST1



Thanks for the example. I do appreciate this. Sadly, I still have the same 
problem:


[bryan@bryan RPMS]$ isql-fb -user SYSDBA -pass pythagorus 
localhost:employee

Database: localhost:employee, User: SYSDBA

SQL> DROP USER test;

SQL> CREATE USER test PASSWORD 'test' GRANT ADMIN ROLE;

SQL> grant RDB$ADMIN to user test;

SQL> commit;

SQL> exit;

[bryan@bryan RPMS]$ isql-fb -user test -pass test -role 
RDB$ADMIN localhost:employee

Database: localhost:employee, User: TEST

SQL> CREATE USER test1 PASSWORD 'test1';

Statement failed, SQLSTATE = 28000

add record error

-no permission for INSERT access to TABLE PLG$SRP_VIEW

SQL> show users;

Users in the database

  1 #TEST

SQL> exit;

[bryan@bryan RPMS]$


Do I need to define the RDB$ADMIN role before hand? Seems like the user 'test' 
isn't getting the RDB$ADMIN role assigned on connect.


Ideas?


Thanks,

Bryan


--

Group Leader, Technical Development Group - Teraview Ltd.
Platinum Building, St. John's Innovation Park, Cambridge CB4 0DS, UK.
tel: +44 (0)1223 435386, fax: +44 (0)1223 435382, web: 
www.teraview.com Registered Number: 04126946, VAT 
Number: 770 8883 84

...preferred document formats: ODF (ISO/IEC 26300:2006), PDF

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

[Dimitry Sibiryakov s...@ibphoenix.com [firebird-support]]

18.12.2018 14:44, 'Bryan  Cole' bryan.c...@teraview.com [firebird-support] 
wrote:
> I understand I'm doing it wrong. I don't understand what I need to do 
> different. I've read all the documentation (really!).
> 
> If you could give me a working example, that would be awesome.

 >isql -u sysdba -p masterkey localhost:employee
SQL> CREATE USER test PASSWORD 'test' GRANT ADMIN ROLE;
SQL> grant RDB$ADMIN to user test;
SQL> commit;
 >isql -u test -p test -role RDB$ADMIN localhost:employee
Database: localhost:employee, User: TEST, Role: RDB$ADMIN
SQL> CREATE USER test1 PASSWORD 'test';
SQL> show users;
Users in the database
   0  SYSDBA  1 #TEST
   0  TEST1

-- 
   WBR, SD.






++

Visit http://www.firebirdsql.org and click the Documentation item
on the main (top) menu.  Try FAQ and other links from the left-side menu there.

Also search the knowledgebases at http://www.ibphoenix.com/resources/documents/ 

++


Yahoo Groups Links

<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/firebird-support/

<*> Your email settings:
Individual Email | Traditional

<*> To change settings online go to:
http://groups.yahoo.com/group/firebird-support/join
(Yahoo! ID required)

<*> To change settings via email:
firebird-support-dig...@yahoogroups.com 
firebird-support-fullfeatu...@yahoogroups.com

<*> To unsubscribe from this group, send an email to:
firebird-support-unsubscr...@yahoogroups.com

<*> Your use of Yahoo Groups is subject to:
https://info.yahoo.com/legal/us/yahoo/utos/terms/

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

['Bryan Cole' bryan.c...@teraview.com [firebird-support]]

On Tue, 2018-12-18 at 14:28 +0100, Dimitry Sibiryakov s...@ibphoenix.com 
[firebird-support] wrote:

18.12.2018 14:25, 'Bryan  Cole' 
bryan.c...@teraview.com [firebird-support] 
wrote:

Database: localhost:employee, User: TEST


   Do you see "Role: RDB$ADMIN" here? It must be.




OK, but how do I get "Role: RDB$ADMIN" to show up there? Please tell me what to 
do to achieve this.


I've tried:

[bryan@bryan RPMS]$ isql-fb -user SYSDBA -pass 
mydbapassword localhost:employee

Database: localhost:employee, User: SYSDBA

SQL> drop user test;

SQL> commit;

SQL> CREATE USER test PASSWORD 'test' GRANT RDB$ADMIN ROLE;

Statement failed, SQLSTATE = 42000

Dynamic SQL Error

-SQL error code = -104

-Token unknown - line 1, column 40

-RDB$ADMIN

SQL>


I understand I'm doing it wrong. I don't understand what I need to do 
different. I've read all the documentation (really!).

If you could give me a working example, that would be awesome.


Thanks,

Bryan

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

['Bryan Cole' bryan.c...@teraview.com [firebird-support]]

On Tue, 2018-12-18 at 12:12 +0100, Dimitry Sibiryakov s...@ibphoenix.com 
[firebird-support] wrote:

18.12.2018 12:04, 'Bryan  Cole' 
bryan.c...@teraview.com [firebird-support] 
wrote:

[mypc]$ isql-fb -u test -p test -r rdb$admin localhost:mydatabase

Database: localhost:mydatabase, User: TEST


   At first, role rdb$admin wasn't granted to this user and applied how you can 
see in

second quoted line.

   At second, grants are per-database, so the role must be granted in the 
database that

keeps list of users.



OK, Thanks for the comments. I don't understand what I need to do different to 
fix these things.


The v2.5 docs indicate I should simple append "GRANT ADMIN ROLE" when I create 
the test-user in order to grant the RDB$ADMIN role.

Are the docs incorrect or out-of-date for v3.0.x?


This doesn't work for me:


[mypc]$ isql-fb -u SYSDBA -p mydbapassword localhost:mydatabase

Database: localhost:mydatabase, User: SYSDBA

SQL>

SQL> ALTER USER test GRANT RDB$ADMIN ROLE;

Statement failed, SQLSTATE = 42000

Dynamic SQL Error

-SQL error code = -104

-Token unknown - line 1, column 23

-RDB$ADMIN

SQL> exit;


If there is documentation explaining how this works in firebird-v3 (I didn't 
have a problem in v2.5), please help me with a link to it.


This also doesn't work:


[mypc]$ isql-fb -u SYSDBA -p mydbapassword localhost:mydatabase

Database: localhost:mydatabase, User: SYSDBA

SQL> GRANT RDB$ADMIN TO test;

SQL> commit;

SQL> exit;

[mypc]$ isql-fb -u test -p test -r rdb$admin localhost:mydatabase

Database: localhost:mydatabase, User: TEST

SQL> create user owner password 'owner';

Statement failed, SQLSTATE = 28000

add record error

-no permission for INSERT access to TABLE PLG$VIEW_USERS

SQL>


If someone could post an example of the actual correct approach to achieving a 
non-SYSDBA user who can create/drop other users,

I'd be most grateful.


Thanks,

Bryan


--

Group Leader, Technical Development Group - Teraview Ltd.
Platinum Building, St. John's Innovation Park, Cambridge CB4 0DS, UK.
tel: +44 (0)1223 435386, fax: +44 (0)1223 435382, web: 
www.teraview.com Registered Number: 04126946, VAT 
Number: 770 8883 84

...preferred document formats: ODF (ISO/IEC 26300:2006), PDF

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

[Dimitry Sibiryakov s...@ibphoenix.com [firebird-support]]

18.12.2018 14:25, 'Bryan  Cole' bryan.c...@teraview.com [firebird-support] 
wrote:
> Database: localhost:employee, User: TEST

   Do you see "Role: RDB$ADMIN" here? It must be.


-- 
   WBR, SD.






++

Visit http://www.firebirdsql.org and click the Documentation item
on the main (top) menu.  Try FAQ and other links from the left-side menu there.

Also search the knowledgebases at http://www.ibphoenix.com/resources/documents/ 

++


Yahoo Groups Links

<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/firebird-support/

<*> Your email settings:
Individual Email | Traditional

<*> To change settings online go to:
http://groups.yahoo.com/group/firebird-support/join
(Yahoo! ID required)

<*> To change settings via email:
firebird-support-dig...@yahoogroups.com 
firebird-support-fullfeatu...@yahoogroups.com

<*> To unsubscribe from this group, send an email to:
firebird-support-unsubscr...@yahoogroups.com

<*> Your use of Yahoo Groups is subject to:
https://info.yahoo.com/legal/us/yahoo/utos/terms/

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

['Bryan Cole' bryan.c...@teraview.com [firebird-support]]

On Tue, 2018-12-18 at 12:52 +0100, Mark Rotteveel m...@lawinegevaar.nl 
[firebird-support] wrote:


On 2018-12-18 12:12, Dimitry Sibiryakov s...@ibphoenix.com
[firebird-support] wrote:
> 18.12.2018 12:04, 'Bryan Cole' bryan.c...@teraview.com
> [firebird-support] wrote:
>> [mypc]$ isql-fb -u test -p test -r rdb$admin localhost:mydatabase
>> Database: localhost:mydatabase, User: TEST
>
> At first, role rdb$admin wasn't granted to this user and applied
> how you can see in
> second quoted line.
> At second, grants are per-database, so the role must be granted in
> the database that
> keeps list of users.

Using CREATE USER ... GRANT ADMIN ROLE, will grant the created user
admin rights in the security database, which is what should be
sufficient here.

I wonder if this might be related to CORE-5898 (fixed in 3.0.4).

Thanks for the comments. I've just built a fresh firebird-v3.0.4 rpm and tested 
as follows on a Fedora28 system:

[bryan@bryan RPMS]$ sudo systemctl restart 
firebird-superserver
[bryan@bryan RPMS]$ rpm -q firebird
firebird-3.0.4.33054-1.fc28.x86_64
[bryan@bryan RPMS]$ isql-fb -user SYSDBA -pass 
mydbapassword localhost:employee
Database: localhost:employee, User: SYSDBA
SQL> CREATE USER test PASSWORD 'test' GRANT ADMIN ROLE;
SQL> commit;
SQL> exit;
[bryan@bryan RPMS]$ isql-fb -user test -pass test -r 
rdb$admin localhost:employee
Database: localhost:employee, User: TEST
SQL> CREATE USER owner PASSWORD 'owner';
Statement failed, SQLSTATE = 28000
add record error
-no permission for INSERT access to TABLE PLG$SRP_VIEW
SQL>

Looks like this isn't something fixed in the latest version. I guess I'm doing 
something wrong but don't understand what.
Someone have mercy on me

Thanks,
Bryan




Mark



--

Group Leader, Technical Development Group - Teraview Ltd.
Platinum Building, St. John's Innovation Park, Cambridge CB4 0DS, UK.
tel: +44 (0)1223 435386, fax: +44 (0)1223 435382, web: 
www.teraview.com Registered Number: 04126946, VAT 
Number: 770 8883 84

...preferred document formats: ODF (ISO/IEC 26300:2006), PDF

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

[Mark Rotteveel m...@lawinegevaar.nl [firebird-support]]

On 2018-12-18 12:12, Dimitry Sibiryakov s...@ibphoenix.com 
[firebird-support] wrote:
> 18.12.2018 12:04, 'Bryan  Cole' bryan.c...@teraview.com
> [firebird-support] wrote:
>> [mypc]$ isql-fb -u test -p test -r rdb$admin localhost:mydatabase
>> Database: localhost:mydatabase, User: TEST
> 
>At first, role rdb$admin wasn't granted to this user and applied
> how you can see in
> second quoted line.
>At second, grants are per-database, so the role must be granted in
> the database that
> keeps list of users.

Using CREATE USER ... GRANT ADMIN ROLE, will grant the created user 
admin rights in the security database, which is what should be 
sufficient here.

I wonder if this might be related to CORE-5898 (fixed in 3.0.4).

Mark

Re: [firebird-support] Problems with creating new users (no permission for INSERT access to TABLE PLG$VIEW_USERS)

[Dimitry Sibiryakov s...@ibphoenix.com [firebird-support]]

18.12.2018 12:04, 'Bryan  Cole' bryan.c...@teraview.com [firebird-support] 
wrote:
> [mypc]$ isql-fb -u test -p test -r rdb$admin localhost:mydatabase
> Database: localhost:mydatabase, User: TEST

   At first, role rdb$admin wasn't granted to this user and applied how you can 
see in 
second quoted line.
   At second, grants are per-database, so the role must be granted in the 
database that 
keeps list of users.


-- 
   WBR, SD.






++

Visit http://www.firebirdsql.org and click the Documentation item
on the main (top) menu.  Try FAQ and other links from the left-side menu there.

Also search the knowledgebases at http://www.ibphoenix.com/resources/documents/ 

++


Yahoo Groups Links

<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/firebird-support/

<*> Your email settings:
Individual Email | Traditional

<*> To change settings online go to:
http://groups.yahoo.com/group/firebird-support/join
(Yahoo! ID required)

<*> To change settings via email:
firebird-support-dig...@yahoogroups.com 
firebird-support-fullfeatu...@yahoogroups.com

<*> To unsubscribe from this group, send an email to:
firebird-support-unsubscr...@yahoogroups.com

<*> Your use of Yahoo Groups is subject to:
https://info.yahoo.com/legal/us/yahoo/utos/terms/