
If you were logged in you would be able to see more operations.
|
|
|
QA Status: |
Done successfully
|
Test Details: |
About ability of user to remove his 'admin role' (but NOT 'rdb$admin' one) that was granted to him by SYSDBA in 'create user ... grant admin role' statement -- see letters to/from Alex starting 03-jun-2015 19:51.
|
Using WI-T3.0.0.30809 Firebird 3.0 Alpha 2, CREATE USER GRANT ADMIN ROLE does not work (i.e. rdb$admin role is not assigned to user in the security database)
Test scenario:
1) Connect to regular database Test.fdb by user SYSDBA
2) CREATE USER Test PASSWORD 'masterkey' GRANT ADMIN ROLE
COMMIT
3) GRANT rdb$admin TO USER Test
COMMIT
4) Connect to regular database Test.fdb by user Test with role rdb$admin
5) CREATE USER Test2 PASSWORD 'masterkey'
COMMIT
=> SQL Message : -901 Unsuccessful execution caused by system error that does not preclude successful execution of subsequent statements
Also using fbsvcmg after step 2:
C:\Program Files\Firebird\Firebird_3_0>fbsvcmgr localhost:service_mgr user sysdba password masterkey action_display_user_adm
Login Full name uid gid adm
SYSDBA Sql Server Administrator 0 0 no
TEST 0 0 no <<< *** expected: yes
I've executed the same scenario with FB2.5, and here it works correctly.
|
Description
|
Using WI-T3.0.0.30809 Firebird 3.0 Alpha 2, CREATE USER GRANT ADMIN ROLE does not work (i.e. rdb$admin role is not assigned to user in the security database)
Test scenario:
1) Connect to regular database Test.fdb by user SYSDBA
2) CREATE USER Test PASSWORD 'masterkey' GRANT ADMIN ROLE
COMMIT
3) GRANT rdb$admin TO USER Test
COMMIT
4) Connect to regular database Test.fdb by user Test with role rdb$admin
5) CREATE USER Test2 PASSWORD 'masterkey'
COMMIT
=> SQL Message : -901 Unsuccessful execution caused by system error that does not preclude successful execution of subsequent statements
Also using fbsvcmg after step 2:
C:\Program Files\Firebird\Firebird_3_0>fbsvcmgr localhost:service_mgr user sysdba password masterkey action_display_user_adm
Login Full name uid gid adm
SYSDBA Sql Server Administrator 0 0 no
TEST 0 0 no <<< *** expected: yes
I've executed the same scenario with FB2.5, and here it works correctly. |
Show » |
|
SQL Message : -901
Unsuccessful execution caused by system error that does not preclude successful execution of subsequent statements
Engine Code : 336723987
Engine Message :
add record error
no permission for INSERT access to TABLE PLG$SRP_VIEW