Commented by: Jorge Andres Brugger (jbrugger)

Nobody should see other users passwords, even if he is the sysdba.

Commented by: Sean Leyne (seanleyne)

The visibility of a user list violates many standards regarding system security. Accordingly, it is likely that this case will be rejected.

Commented by: Pabloj (pabloj_sourceforge)

While I understand the comment about passwords I don't see why there shouldn't be a way of listing all users with a simple sql query.
This is somehow doable by a privileged user with a select distinct on rdb$user_privileges, this system table would just make things cleaner.
Also, it could allow to drop support (Firebird 2.5 and above) for gsec as now creating, deleting and listing users would be available through simple sql commands.

Commented by: Smirnoff Serg (wildsery)

User privileges may be granted without user existance, and user may be without any privileges in this database.
Huh?

Commented by: Pabloj (pabloj_sourceforge)

That's another use for rdb$users, it could show those existing users that don't have privileges on a specific database, joining with the rdb$user_privileges.

Commented by: Smirnoff Serg (wildsery)

No, I don't need to see this users from another database.

Commented by: Pabloj (pabloj_sourceforge)

If there is a plan, as it seems to be, to have a centralized user management then something like what I said is definitely useful, and implemented through a table is certainly better than through some special command or an external tool like gsec.