Hi! When roles are default granted to an user, they are not immediately reflected in the attachments.
Attachments need to issue a SET ROLE which should be different than currently used, then another SET ROLE to the correct one to refresh the roles. Or re-attach. I think we should improve that automatically refreshing roles via AST or creating some command like ALTER SESSION REFRESH ROLES. Adriano Firebird-Devel mailing list, web interface at https://lists.sourceforge.net/lists/listinfo/firebird-devel