Roman Simakov <roman.sima...@red-soft.biz> wrote Fri, 04 Jul 2014 18:23:38  
+0400:

> Hello!
>
> I'd like to present a patch for firebird trunk which implements
> http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does.
>
> Patch was discussed with Dmitry Yemanov, Alex Peshkoff and Vlad Khorsun.
> Small description you can find in  
> doc/sql.extensions/README.ddl_access.txt
>
> I'm ready to answer any questions.
>
> I'd like to commit it. Opinions?
>

The file doc/sql.extensions/README.ddl_access.txt description issuing  
privileges to manipulate the objects in the database looks like this

GRANT CREATE <OBJECT> TO USER | ROLE [with grant option];
GRANT ALTER ANY <OBJECT> TO USER | ROLE [with grant option];
GRANT DROP ANY <OBJECT> TO USER | ROLE [with grant option];

REVOKE [grant option for] CREATE <OBJECT> FROM USER | ROLE;
REVOKE [grant option for] ALTER ANY <OBJECT> FROM USER | ROLE;
REVOKE [grant option for] DROP ANY <OBJECT> FROM USER | ROLE;

I think it is more correct to describe it as

GRANT CREATE <OBJECT> TO [USER | ROLE] <user/role name> [with grant  
option];
GRANT ALTER ANY <OBJECT> TO [USER | ROLE] <user/role name> [with grant  
option];
GRANT DROP ANY <OBJECT> TO [USER | ROLE] <user/role name> [with grant  
option];

REVOKE [grant option for] CREATE <OBJECT> FROM [USER | ROLE] <user/role  
name>;
REVOKE [grant option for] ALTER ANY <OBJECT> FROM [USER | ROLE] <user/role  
name>;
REVOKE [grant option for] DROP ANY <OBJECT> FROM [USER | ROLE] <user/role  
name>;

-- 
Simonov Denis


------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck&#174;
Code Sight&#153; - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to