Unprivileged user is no longer able to see their own context variables in 
MON$CONTEXT_VARIABLES
-----------------------------------------------------------------------------------------------

                 Key: CORE-6375
                 URL: http://tracker.firebirdsql.org/browse/CORE-6375
             Project: Firebird Core
          Issue Type: Bug
          Components: Engine, Security
    Affects Versions: 4.0 Beta 2
         Environment: Firebird-4.0.0.2126-0_x64 on WIndows 10
            Reporter: Mark Rotteveel


An unprivileged user (as in: newly created, nothing explicitly granted), is 
unable to see their own context variables in MON$CONTEXT_VARIABLES.

Steps to reproduce:

1. As SYSDBA create a new user:
create user someuser password 'somepassword';
2. Connect to a database with that user:
connect 'localhost:e:/db/somedatabase.fdb' user someuser password 
'somepassword';
3. Add a context variable
select rdb$set_context('USER_SESSION', 'owned_by_someuser', 'true') from 
rdb$database;
4. Query MON$CONTEXT_VARIABLES
select mon$attachment_id, mon$transaction_id, mon$variable_name, 
mon$variable_value from mon$context_variables;

Expected: 1 row with variable name 'owned_by_someuser' and value 'true'
Actual behaviour: no row shown

Firebird 3.0.6 behaves as expected.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://tracker.firebirdsql.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to