Re: [Firebird-net-provider] FirebirdSql.Data.Services demands SYSDBA to list users, where RDB$ADMIN insufficient?

[David C. <wav...@gm...>]

Hi Jiri,

I also posted on the Firebird Yahoo group, and received an informative
response that from what the person looked at, they wrote that it seemed
that the .NET Provider does not use the ROLE when connecting.

When I dig into the .NET Provider source, specifically the
FbSecurity.DisplayUsers() call, I see that the call to FbService.Open() in
turn calls FbService.BuildSpb() which does seem to set the ROLE if given
(FbService.cs, line 98):

if ((_csManager?.Role.Length ?? 0) != 0)
spb.Append((byte)IscCodes.isc_spb_sql_role_name, _csManager.Role);

That being said, it doesn't seem to have an effect and even if logged in
with role RDB$ADMIN, only the given user is returned (other than if SYSDBA).

Thoughts? Is there any way to list the users?

If not, can it be added as a features that if logged in with RDB$ADMIN
role, that the users can be listed?

Thanks,
David


On 24 February 2017 at 01:13, Jiří Činčura <ji...@ci...> wrote:

> > This is different from how things work in gsec. There, enumeration of
> > users
> > IS possible by connecting via the RDB$ADMIN role;
> > >gsec -user MyAdm -pass admpw -role rdb$admin -display
>
> This gsec command is not connecting to remote database using services
> API.
>
> --
> Mgr. Jiří Činčura
> Independent IT Specialist
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> Firebird-net-provider mailing list
> Fir...@li...
> https://lists.sourceforge.net/lists/listinfo/firebird-net-provider
>