On 2/9/21 6:23 PM, Mark Rotteveel wrote:

CREATE MAPPING WIN_ADMINS
  USING PLUGIN WIN_SSPI
  FROM Predefined_Group DOMAIN_ANY_RID_ADMINS
  TO ROLE RDB$ADMIN
```

While SET AUTO ADMIN MAPPING will apply RDB$ADMIN automatically if no explicit role is specified on connect.

In other words, does my confusion derive from the fact the Firebird 3 release notes say that CREATE MAPPING ... TO ROLE ... updates the CURRENT_ROLE, while in fact it does no such thing?


That 2 commands behave ABSOLUTELY identical - current_role will become RDB$ADMIN after attach to database if no explicit role is specified on connect. SET AUTO ADMIN MAPPING is just syntax sugar in grammar parser needed for backward compatibility, internally absolutely sam things are done.





Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to