Simple?  Well, I guess it is if I don't have any care about
security.  But context variables are not the way to do this
sort of thing, load on demand from a secured table is a less
open way of dealing with such private data.

But I got exactly what I wanted, without spreading passwords
around, with just a few lines of code in ExtDS.cpp, which
was simple enough for me.  I don't know why the restriction
was coded originally, but removing it works and I can't see
any obvious downsides (I'm already using a lightly customised
build of Firebird for this application, so another small
change is not a problem to me).

P.S. Thanks Alex for your input into this.

-- 
Geoff Worboys
Telesis Computing Pty Ltd

liviusliv...@poczta.onet.pl wrote:
> Hi,

> This is simple
> Store your user, password and role in context variable and
> use it in execute statement

> Regards,
> Karol Bieniaszewski

> ----- Reply message -----
> Od: "Geoff Worboys" <ge...@telesiscomputing.com.au>
> Do: <firebird-devel@lists.sourceforge.net>
> Temat: [Firebird-devel] execute statement on external role
> Data: czw., lut 5, 2015 13:36


> Hi,

> Firebird v2.5.3

> I've been studying the source trying to understand the reasons
> behind a particular aspect of EXECUTE STATEMENT with ON EXTERNAL.

> Specifically, why are USER PASSWORD and ROLE tied together here?

> I had thought it should have been feasible to have
> EXECUTE STATEMENT issued with a specific ROLE but no USER and
> PASSWORD, and still be able to use the current user credentials
> and it would be up to the external database to accept or reject
> the requested role access.

> In the code this appears to be a deliberate restriction rather
> than a practical matter of what is possible, so I am imagining
> there must have been security or other concerns about this.
> Can someone enlighten me, or maybe hint where I might find prior
> discussions on this (I can't find anything in my archives of
> this list).


------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to