[firebird-support] Firebird 2.5 windows authentication and roles grants question?
Hi guys, I `ve read all support docs included in firebird 2.5 installation together with several internet articals but I could not find a solution of the following problem I have: I am using firebird 2.5.1 x64 version on Windows Server 2008 R2 Enterprise. This machine is part of a domain structure. My account is part of a D-RND group in that domain. The Firebird is configured in mixed authentication (I've tried trusted also). I have a database called XXX.FDB. I define several tables and views as SYSDBA. I also define a role called D-RND and grant all rights for all tables and views to that role. Everything is OK till here. When I try to connect using trusted authentication and role D-RND, after open the database and try to select/update/insert whatever table or view I receive the error This user does not provolige to perform this operation on this object. No permission for operation access to table/view . Please help what should I do? Why it happens like that? Regards P.S. This scene works under Firebird 2.1.
Re: [firebird-support] Firebird speed degrades during the day
On Wed, 06 Feb 2013 16:04:45 -, peter...@rocketmail.com peter...@rocketmail.com wrote: Hi, I have a customer with FB 1.56 sitting on SBS 2008 std and mostly xp clients. In certain areas of the program where activity is heaviest (server side procedures are being run to calculate the data) it takes over 5 minutes to complete the process. I have put their fdb on my system and do not have the same issue. At first I thought this pointed to an issue on their network but then they told me that if they run a backup and restore there is no issue with delays and it runs fine; however, over the period of a day the speed degrades back to the 5 minutes plus for the function to complete. If they back up and restore all is initially well again - but again things degrade over the period of the day. If anyone can tell me what is occurring and how to fix it I would be most grateful. Windows SBS 2008 is 64 bit, so maybe you are being bitten by the filesystem cache consuming all memory (also discussed in another thread this week). Mark
Re: [firebird-support] Re: Firebird speed degrades during the day
Are you sure you ran gstat when things were already slow (as asked by Thomas)? Carlos Firebird Performance in Detail - http://videos.firebirddevelopersday.com www.firebirdnews.org - www.FireBase.com.br prc --- In firebird-support@yahoogroups.com, Thomas Steinmaurer wrote: Hi, I have a customer with FB 1.56 sitting on SBS 2008 std and mostly xp clients. In certain areas of the program where activity is heaviest (server side procedures are being run to calculate the data) it takes over 5 minutes to complete the process. I have put their fdb on my system and do not have the same issue. At first I thought this pointed to an issue on their network but then they told me that if they run a backup and restore there is no issue with delays and it runs fine; however, over the period of a day the speed degrades back to the 5 minutes plus for the function to complete. If they back up and restore all is initially well again - but again things degrade over the period of the day. If anyone can tell me what is occurring and how to fix it I would be most grateful. Run gstat -h for the database while things are slow and report back. -- With regards, Thomas Steinmaurer http://www.upscene.com/ prc Hi Thomas here are the results prc Flags 0 prc Checksum 12345 prc Generation 25779 prc Page Size 4096 prc ODS 10.1 prc Oldest Transaction 19525 prc Oldest Active 19526 prc Oldest Snapshot 19526 prc Next Transaction 19531 prc Bumped transaction 1 prc Sequence No 0 prc Page Buffer 0 prc Next Header Page 0 prc Database dialect 3 prc Creation Date Jan 22 2013 prc Attributes Force Write prc Sweep Interval 2000 prc prc ++ prc Visit http://www.firebirdsql.org and click the Resources item prc on the main (top) menu. Try Knowledgebase and FAQ links ! prc Also search the knowledgebases at http://www.ibphoenix.com prc ++ prc Yahoo! Groups Links
Re: [firebird-support] Some alternative to ZeBeDee?
Em 7/2/2013 04:04, W O escreveu: Hello everybody In some articles I saw that people use ZeBeDee for Internet communication with Firebird, however that product seems discontinued since the year 2005. Do you know another software similar to ZeBeDee which works well with Firebird and it's free? Greetings. Walter. you could use ssh see you !
[firebird-support] Re: restore a firebird 2.1 gbk in firebird 2.5
Hi, View the following: http://paulbeachsblog.blogspot.com.ar/2011/07/firebird-v21-error-value-exceeds-range.html Regards. -Christian- [Non-text portions of this message have been removed]
Re: AW: [firebird-support] restore a firebird 2.1 gbk in firebird 2.5
2013.02.07. 15:36 keltezéssel, Olaf Kluge írta: I am the first and only firbird user with this issue? What can I do? Thanks. I think no. ;-) In example: http://sourceforge.net/mailarchive/message.php?msg_id=23092682 Gabor ++ Visit http://www.firebirdsql.org and click the Resources item on the main (top) menu. Try Knowledgebase and FAQ links ! Also search the knowledgebases at http://www.ibphoenix.com ++ Yahoo! Groups Links * To visit your group on the web, go to: http://groups.yahoo.com/group/firebird-support/ * Your email settings: Individual Email | Traditional * To change settings online go to: http://groups.yahoo.com/group/firebird-support/join (Yahoo! ID required) * To change settings via email: firebird-support-dig...@yahoogroups.com firebird-support-fullfeatu...@yahoogroups.com * To unsubscribe from this group, send an email to: firebird-support-unsubscr...@yahoogroups.com * Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
SV: [firebird-support] Scaling up Firebird-2.5.2.26539_0_x64.exe
I came across this document: http://www.firebirdsql.org/file/documentation/papers_presentations/html /paper-fbent-impacting.html It seems to be talking about a much older version of FB than is available now. Even back in the days of Win 2003 Server, I've built systems that had probably 300 concurrent users without performance degradation. I intend to connect about 2000 concurrent users. Is the subject FB version capable on say, 16GB ram, assuming I have a very simple and efficient table structure, queries, plans, FKs and PKs? If FB cannot handle this number of concurrent connections, what DB should I move to? MS SQL or Oracle? or something else? We are running a database (built on 2.1.x classic) that easily runs more than 1000. I think to recall almost 2000 connections at one time. The problem might be if all the connections are very active that the interprocess communication to the lock manager might slow it down a bit. But I don't think that there are any issues per se in running 2000 connections. If you use 2.5.2 you can run the super classic version, which will be somewhat more agile on the locking afaiu. But with the downside that if one thread crashes it will take everyone else with it down. But it might be worth a try :) Best regards Poul Dige
[firebird-support] Re: restore a firebird 2.1 gbk in firebird 2.5
Hi, En la db del ejemplo http://sourceforge.net/mailarchive/message.php?msg_id=23092682 The messages table has several timestamp fields, but the field (expired) is generating the error. Database: cabrweb.fdb, User: sysdba SQL select expired from messages; EXPIRED = 2009-09-10 19:26:24.7296 2009-09-06* 36:46:12.6240* 2009-09-30 *37:45:23.1696* Time values are out of range. Something fast could leave at zero (0) time SQL *update messages set expired = cast(expired as date);* SQL select expired from messages; EXPIRED = 2009-09-10 00:00:00. 2009-09-06 00:00:00. 2009-09-30 00:00:00. Regards. -Christian- [Non-text portions of this message have been removed]
Re: SV: [firebird-support] Scaling up Firebird-2.5.2.26539_0_x64.exe
On Thu, 07 Feb 2013 15:37:59 -, red_october2009 kevin.wendy.mor...@telus.net wrote: Hi Poul, At the bottom of your message you recommended both: If you use 2.5.2 you can run the super classic version, Are you recommending the super or the classic for the high number of concurrent connections on an SMTP machine situation? There are three types in 2.5.2: ClassicServer SuperClassic SuperServer SuperServer is not very suitable for high concurrency and SMP, because it - by default - works on a single CPU core. See http://www.firebirdsql.org/manual/qsg25-classic-or-super.html and http://www.firebirdsql.org/manual/qsg25-appx-architectures.html
Re: SV: [firebird-support] Scaling up Firebird-2.5.2.26539_0_x64.exe
Doh! Thanks Mark. I install FB about once every 2 years... forgot about the 3 choices. ClassicServer SuperClassic SuperServer
[firebird-support] Help!
Can someone please tell me what I am missing here? I just can't see what
the problem is.
insert into
CTDC(CPYNO,CENNO,CONNO,REGDT,GRADE,GRDDT,STTUS,CPTUS,CIPDT,TAXDT,COIDT,BELVL,NHBDT)
VALUES('1','11','2','2012-12-05','1','2012-12-05','Active','Registered','2013-02-22','2013-02-28','2013-05-15','4','2013-02-14';
*Warning*: ibase_query()
[function.ibase-queryhttp://localhost/SCI/function.ibase-query]:
Dynamic SQL Error SQL error code = -104 Unexpected end of command - line 1,
column 212.
Please note that column 212 is the apostrophe (') after the last comma
separating the last two column values which are '4' and '2013-02-14'.
I am at my wits end as I don't see the problem.
In case the following is relevant:
Operating system: Ubuntu 11.10
Firebird: 2.5.0.26074 Firebird 2.5
Table CTDC columns:
CPYNO smallint NOT NULL,
CENNO smallint NOT NULL,
CONNO integer NOT NULL,
REGDT date,
GRADE char(1),
GRDDT date,
STTUS varchar(12),
CPTUS varchar(12),
CIPDT date,
TAXDT date,
COIDT date,
BELVL char(1),
NHBDT date
Regards,
Mags
[Non-text portions of this message have been removed]
Re: [firebird-support] Help!
You are missing the matching ) right before the ;. After VALUES
you have a (. That needs a matching ).
Mags Phangisa wrote:
Can someone please tell me what I am missing here? I just can't see what
the problem is.
insert into
CTDC(CPYNO,CENNO,CONNO,REGDT,GRADE,GRDDT,STTUS,CPTUS,CIPDT,TAXDT,COIDT,BELVL,NHBDT)
VALUES('1','11','2','2012-12-05','1','2012-12-05','Active','Registered','2013-02-22','2013-02-28','2013-05-15','4','2013-02-14';
*Warning*: ibase_query()
[function.ibase-queryhttp://localhost/SCI/function.ibase-query]:
Dynamic SQL Error SQL error code = -104 Unexpected end of command -
line 1,
column 212.
Please note that column 212 is the apostrophe (') after the last comma
separating the last two column values which are '4' and '2013-02-14'.
I am at my wits end as I don't see the problem.
In case the following is relevant:
Operating system: Ubuntu 11.10
Firebird: 2.5.0.26074 Firebird 2.5
Table CTDC columns:
CPYNO smallint NOT NULL,
CENNO smallint NOT NULL,
CONNO integer NOT NULL,
REGDT date,
GRADE char(1),
GRDDT date,
STTUS varchar(12),
CPTUS varchar(12),
CIPDT date,
TAXDT date,
COIDT date,
BELVL char(1),
NHBDT date
Regards,
Mags
[Non-text portions of this message have been removed]
++
Visit http://www.firebirdsql.org and click the Resources item
on the main (top) menu. Try Knowledgebase and FAQ links !
Also search the knowledgebases at http://www.ibphoenix.com
++
Yahoo! Groups Links
* To visit your group on the web, go to:
http://groups.yahoo.com/group/firebird-support/
* Your email settings:
Individual Email | Traditional
* To change settings online go to:
http://groups.yahoo.com/group/firebird-support/join
(Yahoo! ID required)
* To change settings via email:
firebird-support-dig...@yahoogroups.com
firebird-support-fullfeatu...@yahoogroups.com
* To unsubscribe from this group, send an email to:
firebird-support-unsubscr...@yahoogroups.com
* Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
Re: [firebird-support] Help!
Thanks. This is what happens when you work 18 hours non-stop. You start
making silly errors.
On Thu, Feb 7, 2013 at 6:59 PM, Ted Miglautsch mtm...@mail.ru wrote:
You are missing the matching ) right before the ;. After VALUES
you have a (. That needs a matching ).
Mags Phangisa wrote:
Can someone please tell me what I am missing here? I just can't see what
the problem is.
insert into
CTDC(CPYNO,CENNO,CONNO,REGDT,GRADE,GRDDT,STTUS,CPTUS,CIPDT,TAXDT,COIDT,BELVL,NHBDT)
VALUES('1','11','2','2012-12-05','1','2012-12-05','Active','Registered','2013-02-22','2013-02-28','2013-05-15','4','2013-02-14';
*Warning*: ibase_query()
[function.ibase-queryhttp://localhost/SCI/function.ibase-query]:
Dynamic SQL Error SQL error code = -104 Unexpected end of command -
line 1,
column 212.
Please note that column 212 is the apostrophe (') after the last comma
separating the last two column values which are '4' and '2013-02-14'.
I am at my wits end as I don't see the problem.
In case the following is relevant:
Operating system: Ubuntu 11.10
Firebird: 2.5.0.26074 Firebird 2.5
Table CTDC columns:
CPYNO smallint NOT NULL,
CENNO smallint NOT NULL,
CONNO integer NOT NULL,
REGDT date,
GRADE char(1),
GRDDT date,
STTUS varchar(12),
CPTUS varchar(12),
CIPDT date,
TAXDT date,
COIDT date,
BELVL char(1),
NHBDT date
Regards,
Mags
[Non-text portions of this message have been removed]
++
Visit http://www.firebirdsql.org and click the Resources item
on the main (top) menu. Try Knowledgebase and FAQ links !
Also search the knowledgebases at http://www.ibphoenix.com
++
Yahoo! Groups Links
[Non-text portions of this message have been removed]
AW: [firebird-support] Help!
Hello,
is the closing braket missing? Or is it a typo in the email?
Niko
Can someone please tell me what I am missing here? I just can't see what
the problem is.
insert into
CTDC(CPYNO,CENNO,CONNO,REGDT,GRADE,GRDDT,STTUS,CPTUS,CIPDT,TAXDT,COIDT,BELVL
,NHBDT)
VALUES('1','11','2','2012-12-05','1','2012-12-05','Active','Registered','201
3-02-22','2013-02-28','2013-05-15','4','2013-02-14';
*Warning*: ibase_query()
[function.ibase-queryhttp://localhost/SCI/function.ibase-query]:
Dynamic SQL Error SQL error code = -104 Unexpected end of command - line 1,
column 212.
Please note that column 212 is the apostrophe (') after the last comma
separating the last two column values which are '4' and '2013-02-14'.
I am at my wits end as I don't see the problem.
In case the following is relevant:
Operating system: Ubuntu 11.10
Firebird: 2.5.0.26074 Firebird 2.5
Table CTDC columns:
CPYNO smallint NOT NULL,
CENNO smallint NOT NULL,
CONNO integer NOT NULL,
REGDT date,
GRADE char(1),
GRDDT date,
STTUS varchar(12),
CPTUS varchar(12),
CIPDT date,
TAXDT date,
COIDT date,
BELVL char(1),
NHBDT date
Regards,
Mags
[Non-text portions of this message have been removed]
[Non-text portions of this message have been removed]
Re: [firebird-support] Help!
is missing the last )
On Thu, Feb 7, 2013 at 12:23 PM, Mags Phangisa magut...@gmail.com wrote:
**
Can someone please tell me what I am missing here? I just can't see what
the problem is.
insert into
CTDC(CPYNO,CENNO,CONNO,REGDT,GRADE,GRDDT,STTUS,CPTUS,CIPDT,TAXDT,COIDT,BELVL,NHBDT)
VALUES('1','11','2','2012-12-05','1','2012-12-05','Active','Registered','2013-02-22','2013-02-28','2013-05-15','4','2013-02-14';
*Warning*: ibase_query()
[function.ibase-queryhttp://localhost/SCI/function.ibase-query]:
Dynamic SQL Error SQL error code = -104 Unexpected end of command - line 1,
column 212.
Please note that column 212 is the apostrophe (') after the last comma
separating the last two column values which are '4' and '2013-02-14'.
I am at my wits end as I don't see the problem.
In case the following is relevant:
Operating system: Ubuntu 11.10
Firebird: 2.5.0.26074 Firebird 2.5
Table CTDC columns:
CPYNO smallint NOT NULL,
CENNO smallint NOT NULL,
CONNO integer NOT NULL,
REGDT date,
GRADE char(1),
GRDDT date,
STTUS varchar(12),
CPTUS varchar(12),
CIPDT date,
TAXDT date,
COIDT date,
BELVL char(1),
NHBDT date
Regards,
Mags
[Non-text portions of this message have been removed]
--
Ricardo...
[Non-text portions of this message have been removed]
++
Visit http://www.firebirdsql.org and click the Resources item
on the main (top) menu. Try Knowledgebase and FAQ links !
Also search the knowledgebases at http://www.ibphoenix.com
++
Yahoo! Groups Links
* To visit your group on the web, go to:
http://groups.yahoo.com/group/firebird-support/
* Your email settings:
Individual Email | Traditional
* To change settings online go to:
http://groups.yahoo.com/group/firebird-support/join
(Yahoo! ID required)
* To change settings via email:
firebird-support-dig...@yahoogroups.com
firebird-support-fullfeatu...@yahoogroups.com
* To unsubscribe from this group, send an email to:
firebird-support-unsubscr...@yahoogroups.com
* Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
[firebird-support] Re: Ambiguous field names in selection statement errors on 2.5.1
I did update this user to Firebird 2.5.2 but the problem persists. --- In firebird-support@yahoogroups.com, Mark Rotteveel wrote: On 5-2-2013 20:22, Paul R. Gardner wrote: Hi all, I have two tables that have some duplicated column names by design. The server is a Win2008 server. I have numerous clients, running Win XP and Win 7. SOME of the clients have the following problem and some do NOT. I cannot figure out the difference between the two types of client though. The Firebird version is 2.5.1 64 bit, and all clients have the same client dll file. Firebird 1.5, 2.0, and 2.5.1 32 bit do not have this issue. The issue I have is that when I run the following statement from some clients, I get an error saying Unable to complete network request to host [Server's IP]. Error writing data to the connection. An existing connection was forcibly closed by the remote host.: select * from first_table f left join ambiguous_fields_table1 a1 on f.foo = a1.bar left join ambiguous_fields_table2 a2 on f.foo = a2.bar Just for fun, I removed the select * and manually typed all fields in both tables. (e.g. select a1.foo, a2.foo, ). This gave the same error. I then found that if I remove any of these ambiguous fields, the error goes away. It only happens if I have all of them typed in. Any field removed causes the query to start working. Have I found some sort of bug? There are around 20 fields in each table with around 5 being ambiguous. I'm not a fan of the (select *) syntax, but it's unfortunately needed for this query. Any ideas anyone? A number of issues was fixed with Firebird 2.5.2, but nothing immediately jumps out as causing this kind of behavior. You might want to try upgrade to 2.5.2. See http://www.firebirdsql.org/file/documentation/release_notes/html/rlsnotes252.html#bug-252 for bugs fixed in 2.5.2 Marl -- Mark Rotteveel
Re: [firebird-support] Some alternative to ZeBeDee?
Thank you Karl. Thank you Alexandre. I shall try both of them. Greetings. Walter. On Thu, Feb 7, 2013 at 8:44 AM, Alexandre Benson Smith ibl...@thorsoftware.com.br wrote: ** Em 7/2/2013 04:04, W O escreveu: Hello everybody In some articles I saw that people use ZeBeDee for Internet communication with Firebird, however that product seems discontinued since the year 2005. Do you know another software similar to ZeBeDee which works well with Firebird and it's free? Greetings. Walter. you could use ssh see you ! [Non-text portions of this message have been removed] ++ Visit http://www.firebirdsql.org and click the Resources item on the main (top) menu. Try Knowledgebase and FAQ links ! Also search the knowledgebases at http://www.ibphoenix.com ++ Yahoo! Groups Links * To visit your group on the web, go to: http://groups.yahoo.com/group/firebird-support/ * Your email settings: Individual Email | Traditional * To change settings online go to: http://groups.yahoo.com/group/firebird-support/join (Yahoo! ID required) * To change settings via email: firebird-support-dig...@yahoogroups.com firebird-support-fullfeatu...@yahoogroups.com * To unsubscribe from this group, send an email to: firebird-support-unsubscr...@yahoogroups.com * Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
Re: [firebird-support] Help!
It was the bracket. My brain is toast, too tired.
On Thu, Feb 7, 2013 at 7:04 PM, Parzival parzival1...@gmx.at wrote:
**
Hello,
is the closing braket missing? Or is it a typo in the email?
Niko
Can someone please tell me what I am missing here? I just can't see what
the problem is.
insert into
CTDC(CPYNO,CENNO,CONNO,REGDT,GRADE,GRDDT,STTUS,CPTUS,CIPDT,TAXDT,COIDT,BELVL
,NHBDT)
VALUES('1','11','2','2012-12-05','1','2012-12-05','Active','Registered','201
3-02-22','2013-02-28','2013-05-15','4','2013-02-14';
*Warning*: ibase_query()
[function.ibase-queryhttp://localhost/SCI/function.ibase-query]:
Dynamic SQL Error SQL error code = -104 Unexpected end of command - line 1,
column 212.
Please note that column 212 is the apostrophe (') after the last comma
separating the last two column values which are '4' and '2013-02-14'.
I am at my wits end as I don't see the problem.
In case the following is relevant:
Operating system: Ubuntu 11.10
Firebird: 2.5.0.26074 Firebird 2.5
Table CTDC columns:
CPYNO smallint NOT NULL,
CENNO smallint NOT NULL,
CONNO integer NOT NULL,
REGDT date,
GRADE char(1),
GRDDT date,
STTUS varchar(12),
CPTUS varchar(12),
CIPDT date,
TAXDT date,
COIDT date,
BELVL char(1),
NHBDT date
Regards,
Mags
[Non-text portions of this message have been removed]
[Non-text portions of this message have been removed]
[Non-text portions of this message have been removed]
++
Visit http://www.firebirdsql.org and click the Resources item
on the main (top) menu. Try Knowledgebase and FAQ links !
Also search the knowledgebases at http://www.ibphoenix.com
++
Yahoo! Groups Links
* To visit your group on the web, go to:
http://groups.yahoo.com/group/firebird-support/
* Your email settings:
Individual Email | Traditional
* To change settings online go to:
http://groups.yahoo.com/group/firebird-support/join
(Yahoo! ID required)
* To change settings via email:
firebird-support-dig...@yahoogroups.com
firebird-support-fullfeatu...@yahoogroups.com
* To unsubscribe from this group, send an email to:
firebird-support-unsubscr...@yahoogroups.com
* Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
Re: [firebird-support] Help!
jejeje. sure. i thinks it's a day to day thin
On Thu, Feb 7, 2013 at 3:01 PM, Mags Phangisa magut...@gmail.com wrote:
It was the bracket. My brain is toast, too tired.
On Thu, Feb 7, 2013 at 7:04 PM, Parzival parzival1...@gmx.at wrote:
**
Hello,
is the closing braket missing? Or is it a typo in the email?
Niko
Can someone please tell me what I am missing here? I just can't see what
the problem is.
insert into
CTDC(CPYNO,CENNO,CONNO,REGDT,GRADE,GRDDT,STTUS,CPTUS,CIPDT,TAXDT,COIDT,BELVL
,NHBDT)
VALUES('1','11','2','2012-12-05','1','2012-12-05','Active','Registered','201
3-02-22','2013-02-28','2013-05-15','4','2013-02-14';
*Warning*: ibase_query()
[function.ibase-queryhttp://localhost/SCI/function.ibase-query]:
Dynamic SQL Error SQL error code = -104 Unexpected end of command - line
1,
column 212.
Please note that column 212 is the apostrophe (') after the last comma
separating the last two column values which are '4' and '2013-02-14'.
I am at my wits end as I don't see the problem.
In case the following is relevant:
Operating system: Ubuntu 11.10
Firebird: 2.5.0.26074 Firebird 2.5
Table CTDC columns:
CPYNO smallint NOT NULL,
CENNO smallint NOT NULL,
CONNO integer NOT NULL,
REGDT date,
GRADE char(1),
GRDDT date,
STTUS varchar(12),
CPTUS varchar(12),
CIPDT date,
TAXDT date,
COIDT date,
BELVL char(1),
NHBDT date
Regards,
Mags
[Non-text portions of this message have been removed]
[Non-text portions of this message have been removed]
[Non-text portions of this message have been removed]
++
Visit http://www.firebirdsql.org and click the Resources item
on the main (top) menu. Try Knowledgebase and FAQ links !
Also search the knowledgebases at http://www.ibphoenix.com
++
Yahoo! Groups Links
--
Ricardo...
[Non-text portions of this message have been removed]
[firebird-support] RDB$ADMIN and Role Revocation
I know in the past that the grantor must be the one who revokes that role. But now we have RDB$ADMIN a user with role RDB$ADMIN can create, edit and delete users and grant a role to another user. I would have thought SYSDBA or indeed any other RDB$ADMIN user could revoke any role. Firebird 2.5.2 - this is not the case. I get an exception unsuccessful metadata update SYSDBA is not grantor of Role on MANAGER to 0S0ASDFASDF. Surely this is not intended? Regards Alan McDonald [Non-text portions of this message have been removed]
Re: [firebird-support] RDB$ADMIN and Role Revocation
Hi Alan, I know in the past that the grantor must be the one who revokes that role. But now we have RDB$ADMIN a user with role RDB$ADMIN can create, edit and delete users and grant a role to another user. I would have thought SYSDBA or indeed any other RDB$ADMIN user could revoke any role. Firebird 2.5.2 - this is not the case. I get an exception unsuccessful metadata update SYSDBA is not grantor of Role on MANAGER to 0S0ASDFASDF. You have to use GRANTED BY here: revoke manager from 0S0ASDFASDF granted by rdb$admin Paul Vinkenoog
RE: [firebird-support] RDB$ADMIN and Role Revocation
Hi Alan, I know in the past that the grantor must be the one who revokes that role. But now we have RDB$ADMIN a user with role RDB$ADMIN can create, edit and delete users and grant a role to another user. I would have thought SYSDBA or indeed any other RDB$ADMIN user could revoke any role. Firebird 2.5.2 - this is not the case. I get an exception unsuccessful metadata update SYSDBA is not grantor of Role on MANAGER to 0S0ASDFASDF. You have to use GRANTED BY here: revoke manager from 0S0ASDFASDF granted by rdb$admin So we're saying SYSDBA has to first make system table enquiries to find out who granted the role and then make the adjustment to the revoke statement? That doesn't sound right or basically logical to me. It's tough enough already without SYSDBA being forced to jump thru all those hoops. SYSDBA can delete everyone from the security database, and delete all the objects no matter who made them but can't revoke a role until he finds out who granted it? Alan Paul Vinkenoog
Re: [firebird-support] RDB$ADMIN and Role Revocation
Alan McDonald wrote: unsuccessful metadata update SYSDBA is not grantor of Role on MANAGER to 0S0ASDFASDF. You have to use GRANTED BY here: revoke manager from 0S0ASDFASDF granted by rdb$admin So we're saying SYSDBA has to first make system table enquiries to find out who granted the role and then make the adjustment to the revoke statement? That doesn't sound right or basically logical to me. It's tough enough already without SYSDBA being forced to jump thru all those hoops. SYSDBA can delete everyone from the security database, and delete all the objects no matter who made them but can't revoke a role until he finds out who granted it? Yes. AFAIU, the reasoning was that a user can be granted the same privilege multiple times, by different users, and REVOKE should only remove the privilege instance (== row in RDB$USER_PRIVILEGES) that was granted by the current user (or the user specified after GRANTED BY). FWIW, this complies with the SQL standard. If SYSDBA (or RDB$ADMIN, or the database owner) wants to remove this kind of multiple-grantor but otherwise equal privileges now without finding out the grantors first, it has to be done with a searched delete statement on RDB$USER_PRIVILEGES. Which is a hack of course, like any direct manipulation of metadata. It would be better if this were possible in SQL, e.g. by implementing CASCADE for REVOKE statements (like PostgreSQL has done). Cheers, Paul Vinkenoog
Re: [firebird-support] Script with 'Drop' in it
Hello Todd, I would like to add a script that does a DROP EXTERNAL FUNCTION SQRT. The problem I have is that some of the databases that will run this script already have the UDF dropped and so the script errors. Is there a way to run statements like DROP INDEX, DROP EXTERNAL FUNCTION, etc. in a script without generating an error of the object isn't found? In a pure SQL script, I wouldn't know. But your application could check if the UDF name exists in RDB$FUNCTIONS and if so, execute DROP EXTERNAL FUNCTION. Cheers, Paul Vinkenoog
