FB4 from FB25 migration admin role issue

[Hugo Larson]

Hello,

I create a user (FB4) with isql

SQL> CREATE USER newuser PASSWORD '123456' grant admin role;

SQL> GRANT RDB$ADMIN TO newuser;

Now I backup a FB25 a database and restore it with FB4.

CONNECT DB.FDB USER 'newuser' password '123456' role 'rdb@admin';

When connection with user "newuser" to the converted db i get 

Statement failed, SQLSTATE = 28000

no permission for SELECT access to TABLE EMPLOYEE 

-Effective user is NEWUSER

When connecting to example db EMPLOYEE.FDB that comes with FB40 newuser have access to the tables.

Is something lost during conversion from FB25?

Thanks,
Hugo. 

[Dimitry Sibiryakov]

'Hugo Larson' via firebird-support wrote 02.11.2022 17:48:
> SQL> GRANT RDB$ADMIN TO newuser;
>
> Now I backup a FB25 a database and restore it with FB4.
>
> CONNECT DB.FDB USER 'newuser' password '123456' role 'rdb@admin';

There is a definite difference between "RDB$ADMIN" and "RDB@ADMIN".

--
WBR, SD.

[Mark Rotteveel]

On 02-11-2022 17:48, 'Hugo Larson' via firebird-support wrote:
> I create a user (FB4) with isql
> SQL> CREATE USER newuser PASSWORD '123456' grant admin role;
> SQL> GRANT RDB$ADMIN TO newuser;
>
> Now I backup a FB25 a database and restore it with FB4.
>
> CONNECT DB.FDB USER 'newuser' password '123456' role 'rdb@admin';

1) You specified the role rdb@admin, not rdb$admin (though I guess this
is a typo in your question)
2) The RDB$ADMIN role is *per database*

Following your own description, you
1) With FB 4.0, created a user with RDB$ADMIN in the security database,
2) granted that user RDB$ADMIN in whichever database you were connected
to at that time,
and then you
3) restored a different database from 2.5 to 4.0

It sounds like the database you just restored in step 3 doesn't have
that user with role RDB$ADMIN.

You need to explicitly grant this user RDB$ADMIN in that database.

Mark
--
Mark Rotteveel

[Hugo Larson]

Sorry it's a type in the email.

role is 'RDB$ADMIN' when connection.

--

You received this message because you are subscribed to the Google Groups "firebird-support" group.

To unsubscribe from this group and stop receiving emails from it, send an email to firebird-support+unsub...@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/firebird-support/313de707-ccb6-02e2-3f3f-fbbc7d167a74%40ibphoenix.com.

[Hugo Larson]

Of course.....

Many thanks guys! 

--

You received this message because you are subscribed to the Google Groups "firebird-support" group.

To unsubscribe from this group and stop receiving emails from it, send an email to firebird-support+unsub...@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/firebird-support/10f4e8c1-323a-1f5d-f320-b99116bca7b5%40lawinegevaar.nl.