[fpc-pascal] Re: Connecting to Firebird using FPC/Lazarus over a LAN with user creation privilege

[Mark Morgan Lloyd]

Reinier Olislagers wrote:
> On 9-3-2013 17:31, Mark Morgan Lloyd wrote:

>> [Nod] I suspect that the key is the way that Firebird documents various
>> activities as differing subsets of SQL, i.e. defining a table is one
>> subset, accessing it is another, managing users a third and so on. I
>> could have been naive in assuming that isql's CREATE USER was submitted
>> as such, rather than being translated to API call(s) inside the program.
> 
> Don't know exactly what you mean by differing subsets; AFAIU they're all
> regular SQL as far as Firebird is concerned. They should work in e.g.
> Flamerobin just as they do in isql.
> 
> Management tasks that used to only be exposed by the services API are
> now also being offered through SQL (user management, grant management...)
> You do need to pay attention you're not using some prehistory FB version
> - don't know when exactly CREATE USER was introduced, probably in 2.0 or
> 2.1 or something...

It identifies itself as 2.5, and by that I explicitly mean that I'm 
querying it rather than trusting any claims by the Debian package 
maintainer, and according to the documentation that's the version at 
which rdb$admin system role was added.

I suspect that I'm supposed to be doing something like granting 
rdb$admin to the user concerned in the security database, but so far I 
can't work out how.

-- 
Mark Morgan Lloyd
markMLl .AT. telemetry.co .DOT. uk

[Opinions above are the author's, not those of his employers or colleagues]