Issue Details (XML | Word | Printable)

Key: CORE-4507
Type: Bug Bug
Status: Resolved Resolved
Resolution: Fixed
Priority: Major Major
Assignee: Dmitry Yemanov
Reporter: Imam Chalimi
Votes: 0
Watchers: 5

If you were logged in you would be able to see more operations.
Firebird Core

Unable delete procedure source on Firebird 3.0 Alpha 2.0

Created: 02/Aug/14 11:42 AM   Updated: 28/May/15 03:11 PM
Component/s: Engine
Affects Version/s: 3.0 Alpha 2
Fix Version/s: 3.0 Beta 2

Environment: Firebird 3.0 Alpha 2 snapshot build (all version) on Windows 32 bit

QA Status: Done successfully

 Description  « Hide
When using Interbase, Firebird 2.5 or Firebird 3.0 Alpha 1, to improve the security I can successfully remove the body of the procedure source.


But I failed to do it in Firebird 3.0 Alpha 2 with an error message :

"Unsuccessful execution caused by a system error that precludes successful execution of subsequent statements.
UPDATE operation is not allowed for system table RDB$PROCEDURES."

 All   Comments   Change History   Subversion Commits      Sort Order: Ascending order - Click to sort in descending order
Simonov Denis added a comment - 02/Aug/14 01:13 PM
Ban modification of system tables is one of the most important security tasks. If you need a mechanism which allows to hide the source code stored procedures, functions, triggers, and packages for this purpose it is necessary to make a separate DDL statement. Or another solution in which the text of the procedures is only visible to the owner or SYSDBA.
I suggest not to consider it as a bug, and to preserve this opportunity to create a separate ticket as an improvement.

Dmitry Yemanov added a comment - 09/Nov/14 04:43 PM
The ability to explicitly set the source code to NULL is restored. All other kinds of direct modifications are still prohibited. Later (v4?) it will be replaced with a proper solution, be it special permissions or new DDL command or whatever else.

Imam Chalimi added a comment - 09/Nov/14 10:18 PM
great solusion (y)