SQL Privileges - Firebird

A privilege represents permission to perform a DML operation. Table lists the SQL privileges that can be granted and revoked.

SQL Privileges

SQL Privileges

Packaging Privileges

Firebird SQL implements features for packaging multiple privileges for assignment to individual recipients, lists, or special groupings of users. One is the ALL package, another is comma-separated lists, and yet another is SQL roles.

The ALL Keyword

The ALL keyword packages the SELECT, INSERT, UPDATE, DELETE, and REFERENCES privileges in a single assignment. Roles and the EXECUTE privilege are not included in the ALL package.

Lists of Privileges

SELECT, INSERT, UPDATE, DELETE, and REFERENCES privileges can also be granted or revoked singly or in comma -separated lists. However, statements that grant or revoke either the EXECUTE privilege or a role cannot grant or revoke other privileges.

Roles

A role is created in a database and is available only to that database. Think of a role as a container for a bundle of privileges. Once the container is “filled” by having some privileges granted to it, it becomes available to be assigned —as a privilege—to some types of users.

Multiple roles can be created, the idea being to package and control discrete sets of privileges that can be granted and revoked as a whole, rather than as numerous collections of individual privileges being granted and revoked repetitively and in an adhoc fashion.

A role can never be granted as part of the ALL package, although a role can be granted ALL privileges.

Roles Are Not Groups

Roles are not like operating system user groups. A Firebird user can be assigned more than one role, but can log in under only one role in a session.

UNIX Groups

Firebird supports UNIX groups on POSIX platforms. If system-level authentication is implemented, you can grant privileges to UNIX groups. Refer to the TO GROUP <UNIX-group> option for GRANT and REVOKE.


All rights reserved © 2018 Wisdom IT Services India Pvt. Ltd DMCA.com Protection Status

Firebird Topics