Issue Details (XML | Word | Printable)

Key: CORE-2322
Type: Improvement Improvement
Status: Closed Closed
Resolution: Fixed
Priority: Major Major
Assignee: Alexander Peshkov
Reporter: Alexander Peshkov
Votes: 0
Watchers: 0
Operations

If you were logged in you would be able to see more operations.
Firebird Core

Support SYSDBA-like access of windows domain administrators to security database

Created: 13/Feb/09 09:57 AM   Updated: 19/Jan/16 04:45 AM
Component/s: GSEC, Security
Affects Version/s: None
Fix Version/s: 2.5 Beta 1

Environment: Windows

QA Status: No test


 Description  « Hide
In 2.1 version of firebird domain admins had full access to user management functions (exactly like to all other databases). In 2.5 one must use ALTER ROLE operator to enable sysdba-like access to any database being connected to that database. That's OK, but it's impossible to directly attach security database, except embedded case (missing with super). Therefore granting user management functions to domain admins using only firebird tools is impossible on SS, which breaks cpmpatibility with FB2.1.

To fix it appropriate gsec switch and services support should be added.

 All   Comments   Change History   Subversion Commits      Sort Order: Ascending order - Click to sort in descending order
Alexander Peshkov added a comment - 13/Feb/09 10:41 AM
Added gsec switch:
     changing admins mapping to RDB$ADMIN role in security database:
       mapping {set|drop}
Added new SPB tags:
isc_action_svc_set_mapping and isc_action_svc_drop_mapping.
Added appropriate fbsvcmgr support.