Re: [Firebird-devel] DDL permissions

2015-03-01 Thread Simonov Denis
Roman Simakov wrote Fri, 04 Jul 2014 17:23:38 +0300: > Hello! > > I'd like to present a patch for firebird trunk which implements > http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does. > > Patch was discussed with Dmitry Yemanov, Alex Peshkoff and Vlad Khorsun. > Small descrip

Re: [Firebird-devel] DDL permissions

2014-08-17 Thread Simonov Denis
Alex Peshkoff wrote Sun, 17 Aug 2014 13:00:52 +0400: > > Denis, please add a ticket to the tracker. > OK. http://tracker.firebirdsql.org/browse/CORE-4522 -- Simonov Denis -- Firebird-Devel mailing list, web interfac

Re: [Firebird-devel] DDL permissions

2014-08-17 Thread Alex Peshkoff
On 08/16/14 18:07, Simonov Denis wrote: > Roman Simakov писал(а) в своём письме Fri, 04 > Jul 2014 18:23:38 +0400: > >> Hello! >> >> I'd like to present a patch for firebird trunk which implements >> http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does. >> >> Patch was discussed w

Re: [Firebird-devel] DDL permissions

2014-08-16 Thread Simonov Denis
Roman Simakov писал(а) в своём письме Fri, 04 Jul 2014 18:23:38 +0400: > Hello! > > I'd like to present a patch for firebird trunk which implements > http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does. > > Patch was discussed with Dmitry Yemanov, Alex Peshkoff and Vlad Khorsu

Re: [Firebird-devel] DDL permissions

2014-08-03 Thread Claudio Valderrama C.
> -Original Message- > From: Dmitry Yemanov [mailto:firebi...@yandex.ru] > Sent: Sábado, 02 de Agosto de 2014 12:15 > > 01.08.2014 18:55, Simonov Denis wrote: > > > SQL> insert into RDB$EXCEPTIONS(RDB$EXCEPTION_NAME) VALUES ('E1'); > > At the first glance, I don't see why it cannot be p

Re: [Firebird-devel] DDL permissions

2014-08-03 Thread Simonov Denis
Dmitry Yemanov wrote Sat, 02 Aug 2014 20:14:38 +0400: > 01.08.2014 18:55, Simonov Denis wrote: > >> SQL> insert into RDB$EXCEPTIONS(RDB$EXCEPTION_NAME) VALUES ('E1'); Note that I did this unprivileged user! > > At the first glance, I don't see why it cannot be prohibited. But I see > from the c

Re: [Firebird-devel] DDL permissions

2014-08-02 Thread Dmitry Yemanov
01.08.2014 18:55, Simonov Denis wrote: > SQL> insert into RDB$EXCEPTIONS(RDB$EXCEPTION_NAME) VALUES ('E1'); At the first glance, I don't see why it cannot be prohibited. But I see from the code that many system tables are still unprotected from user inserts. Maybe Claudio still has some pending

Re: [Firebird-devel] DDL permissions

2014-08-01 Thread Roman Simakov
2014-08-01 18:55 GMT+04:00 Simonov Denis : > DDL permissions is very good, but so far it is possible to modify the > system tables are not useful enough. For some system tables is already > banned, but some still allow some nastiness. > A few simple examples: Yes. Direct changing system tables wa

Re: [Firebird-devel] DDL permissions

2014-08-01 Thread Simonov Denis
Roman Simakov wrote Fri, 04 Jul 2014 18:23:38 +0400: > Hello! > > I'd like to present a patch for firebird trunk which implements > http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does. > > I'm ready to answer any questions. > > I'd like to commit it. Opinions? > DDL permissio

Re: [Firebird-devel] DDL permissions

2014-07-22 Thread Simonov Denis
Roman Simakov wrote, 04 Jul 2014 18:23:38 +0400: In doc/sql.extensions/README.ddl_access.txt write Where could be: TABLE, VIEW, PROCEDURE, FUNCTION, PACKAGE, GENERATOR, SEQUENCE, DOMAIN, EXCEPTION, ROLE, SHADOW, DATABASE, CHARACTER SET, COLLATION, FILTER . h

Re: [Firebird-devel] DDL permissions

2014-07-17 Thread Simonov Denis
Dmitry Yemanov wrote Thu, 17 Jul 2014 17:58:59 +0400: > 17.07.2014 12:32, Simonov Denis wrote: > > > Two workarounds are possible: > > (1) > gsec -user sysdba -pass masterkey > GSEC> add sysdba -pw masterkey > > or > > (2) > isql -user sysdba employee > SQL> create user sysdba password 'masterkey

Re: [Firebird-devel] DDL permissions

2014-07-17 Thread Dmitry Yemanov
17.07.2014 12:32, Simonov Denis wrote: > After adding restrictions on DDL statements, I can not start initialized > security3.fdb > > GSEC> add sysdba -pw masterkey > An error occurred while attempting to add the user. > unsuccessful metadata update > CREATE TABLE PLG$SRP failed > There is no priv

Re: [Firebird-devel] DDL permissions

2014-07-17 Thread Simonov Denis
Roman Simakov wrote, 04 Jul 2014 18:23:38 +0400: > Hello! > > I'd like to present a patch for firebird trunk which implements > http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does. > After adding restrictions on DDL statements, I can not start initialized security3.fdb GSE

Re: [Firebird-devel] DDL permissions

2014-07-14 Thread Dalton Calford
Hi Roman, On 14 July 2014 08:37, Roman Simakov wrote: > > I do not think that separate operators for these are good. It can lead > to inconsistence like "user has permissions on object but cannot see > it". > > Actually, that is preferred. For developers and power users, we can appreciate seei

Re: [Firebird-devel] DDL permissions

2014-07-14 Thread Roman Simakov
2014-07-14 16:22 GMT+04:00 Dalton Calford : > It would be nice if there was an option for visibility ie > > GRANT VISIBLE FOR TO [USER|ROLE] > [with grant option]; > > REVOKE VISIBLE FOR FROM [USER|ROLE] ; > > With a default of all things being visible to maintain backwards > compatibility, bu

Re: [Firebird-devel] DDL permissions

2014-07-14 Thread Dalton Calford
It would be nice if there was an option for visibility ie GRANT VISIBLE FOR TO [USER|ROLE] [with grant option]; REVOKE VISIBLE FOR FROM [USER|ROLE] ; With a default of all things being visible to maintain backwards compatibility, but, allowing the developer to remove sql objects from being

Re: [Firebird-devel] DDL permissions

2014-07-14 Thread Roman Simakov
2014-07-14 10:18 GMT+04:00 Simonov Denis : > I think it is more correct to describe it as Agreed. -- Roman Simakov -- Want fast and easy access to all the code in your enterprise? Index and search up to 200,000 lines of

Re: [Firebird-devel] DDL permissions

2014-07-13 Thread Simonov Denis
Roman Simakov wrote Fri, 04 Jul 2014 18:23:38 +0400: > Hello! > > I'd like to present a patch for firebird trunk which implements > http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does. > > Patch was discussed with Dmitry Yemanov, Alex Peshkoff and Vlad Khorsun. > Small descrip

Re: [Firebird-devel] DDL permissions

2014-07-07 Thread Roman Simakov
Hi, Mark! Thanks for your reply: 2014-07-05 10:30 GMT+04:00 Mark Rotteveel : > I have not checked the code thoroughly, but I noticed two things: > 1) there are still some TODOs in the code Yes. The main part is done. The rest one is about user management which will be implemented a bit later wit

Re: [Firebird-devel] DDL permissions

2014-07-04 Thread Mark Rotteveel
On 5-7-2014 08:30, Mark Rotteveel wrote: > For 2 (entirely based on the name), I'd propose: > * dyn_no_priv (335545094): 42000 (syntax error or access rule violation) > > * dsql_cant_grant_option (336397330) : 42000 (syntax error or access > rule violation), I had hoped there was a closer one, but

Re: [Firebird-devel] DDL permissions

2014-07-04 Thread Mark Rotteveel
On 4-7-2014 16:23, Roman Simakov wrote: > Hello! > > I'd like to present a patch for firebird trunk which implements > http://tracker.firebirdsql.org/browse/CORE-735 like Red Database does. > > Patch was discussed with Dmitry Yemanov, Alex Peshkoff and Vlad Khorsun. > Small description you can find