firebird/firebird-mirror
firebird/firebird-mirror
8
0
Fork 1
mirror of https://github.com/FirebirdSQL/firebird.git synced 2025-01-22 20:43:02 +01:00
Code Issues

Misc docs

Browse Source
This commit is contained in:
AlexPeshkoff 2020-04-13 14:20:53 +03:00
parent ab99779488
commit 928242e54d
1 changed files with 37 additions and 44 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

81
doc/sql.extensions/README.mapping.html
View File

@ -3,19 +3,19 @@
<head> <head>
<meta http-equiv="content-type" content="text/html; charset=utf-8"/> <meta http-equiv="content-type" content="text/html; charset=utf-8"/>
<title></title> <title></title>
<meta name="generator" content="LibreOffice 6.0.6.2 (Linux)"/> <meta name="generator" content="LibreOffice 6.3.4.2.0 (Linux)"/>
<meta name="author" content="irina "/> <meta name="author" content="irina "/>
<meta name="created" content="2014-03-25T00:00:00.010305100"/> <meta name="created" content="2014-03-25T00:00:00.010305100"/>
<meta name="changed" content="2018-12-07T20:15:37.805856298"/> <meta name="changed" content="2020-04-13T14:19:46.849216419"/>
<style type="text/css"> <style type="text/css">
@page { margin: 2.01cm } @page { margin: 2.01cm }
p { margin-bottom: 0.2cm } p { margin-bottom: 0.2cm }
a:link { so-language: zxx } a:link { so-language: zxx }
</style> </style>
</head> </head>
<body lang="ru-RU" dir="ltr"> <body lang="ru-RU" dir="ltr"><p lang="en-US" style="margin-bottom: 0cm">
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">SQL <font size="4" style="font-size: 14pt">SQL Language Extension:
Language Extension: CREATE/ALTER/CREATE_OR_ALTER/DROP MAPPING</font></p> CREATE/ALTER/CREATE_OR_ALTER/DROP MAPPING</font></p>
<p style="margin-bottom: 0cm"><br/> <p style="margin-bottom: 0cm"><br/>
</p> </p>
@ -67,20 +67,16 @@ objects in database – current_user and current_role. Mapping rule
contains 4 parts of information: </font> contains 4 parts of information: </font>
</p> </p>
<ul> <ul>
<li/> <li><p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">mapping
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">mapping
scope (is mapping local for current database or affects all scope (is mapping local for current database or affects all
databases in cluster, including security database),</font></p> databases in cluster, including security database),</font></p>
<li/> <li><p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">mapping
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">mapping
name (mappings are named like all the other objects in database), </font> name (mappings are named like all the other objects in database), </font>
</p> </p>
<li/> <li><p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">from
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">from
what we map </font> what we map </font>
</p> </p>
<li/> <li><p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">to
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">to
what we map.</font></p> what we map.</font></p>
</ul> </ul>
<p style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">Here <p style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">Here
@ -100,19 +96,15 @@ databases - not all of them need/use windows trusted authentication.</font></p>
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">'From' <p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">'From'
part of mapping has 4 items:</font></p> part of mapping has 4 items:</font></p>
<ul> <ul>
<li/> <li><p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">authentication
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">authentication
source (plugin name or result of mapping in other database or use of source (plugin name or result of mapping in other database or use of
serverwide authentication or any method),</font></p> serverwide authentication or any method),</font></p>
<li/> <li><p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">name
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">name
of database where authentication succeeded, </font> of database where authentication succeeded, </font>
</p> </p>
<li/> <li><p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">name
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">name
from which mapping is performed,</font></p> from which mapping is performed,</font></p>
<li/> <li><p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">type
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">type
of that name (username, role, OS group – this depends upon plugin of that name (username, role, OS group – this depends upon plugin
which added that name during authentication).</font></p> which added that name during authentication).</font></p>
</ul> </ul>
@ -125,11 +117,9 @@ definitely bad idea to mix different types of security objects.</font></p>
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">'To' <p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">'To'
part has 2 items:</font></p> part has 2 items:</font></p>
<ul> <ul>
<li/> <li><p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">name
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">name
to which mapping is performed,</font></p> to which mapping is performed,</font></p>
<li/> <li><p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">type
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">type
of that name (only USER/ROLE are accepted here).</font></p> of that name (only USER/ROLE are accepted here).</font></p>
</ul> </ul>
<p style="margin-bottom: 0cm"><br/> <p style="margin-bottom: 0cm"><br/>
@ -289,35 +279,38 @@ DOMAIN\GROUP.</font></p>
</p> </p>
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">Notice:</font></p> <p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">Notice:</font></p>
<p style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt"><span lang="en-US">-
Global mapping works best if firebird 3 or higher version database is
used as security database. If you plan to use other database as
security one (using for example your own provider) please create in
it table RDB$AUTH_MAPPING with structure repeating one in firebird 3
database, public read access and SYSDBA-only write access.</span></font></p>
<p style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt"><span lang="en-US">-
</span></font><font size="4" style="font-size: 14pt"><span lang="en-US">Mappings
work only with information, coming from authentication plugins or
previously done mapping. Information present in DPB (particular SQL
role name) is not affected by mappings and can not be changed using
them.</span></font></p>
<p style="margin-bottom: 0cm"><br/> <p style="margin-bottom: 0cm"><br/>
</p> </p>
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">Global <p style="margin-bottom: 0cm"><br/>
mapping works best if firebird 3 or higher version database is used
as security database. If you plan to use other database as security
one (using for example your own provider) please create in it table
RDB$AUTH_MAPPING with structure repeating one in firebird 3 database,
public read access and SYSDBA-only write access.</font></p>
<p lang="en-US" style="margin-bottom: 0cm"><br/>
</p> </p>
<p lang="en-US" style="margin-bottom: 0cm"><br/> <p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">Tip:</font></p>
<p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">It’s
</p>
<p style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt"><span lang="en-US">Tip:</span></font></p>
<p style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt"><span lang="en-US">It’s
relatively easy to accidentally make a database remotely inaccessible relatively easy to accidentally make a database remotely inaccessible
using CREATE MAPPING statement. For example: </span></font> using CREATE MAPPING statement. For example: </font>
</p> </p>
<p style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt"><span lang="en-US">CREATE <p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">CREATE
MAPPING BREAK_DB_1 USING * FROM ANY USER TO ROLE ROLE1;</span></font></p> MAPPING BREAK_DB_1 USING * FROM ANY USER TO ROLE ROLE1;</font></p>
<p style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt"><span lang="en-US">CREATE <p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">CREATE
MAPPING BREAK_DB_2 USING * FROM ANY USER TO ROLE ROLE2;</span></font></p> MAPPING BREAK_DB_2 USING * FROM ANY USER TO ROLE ROLE2;</font></p>
<p style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt"><span lang="en-US">This <p lang="en-US" style="margin-bottom: 0cm"><font size="4" style="font-size: 14pt">This
will disallow any user (including SYSDBA) to connect. Luckily will disallow any user (including SYSDBA) to connect. Luckily
mappings are not processed when database is used in embedded mode, mappings are not processed when database is used in embedded mode,
i.e. in such a case one should attach to database using embedded i.e. in such a case one should attach to database using embedded
access and fix bad mappings.</span></font></p> access and fix bad mappings.</font></p>
<p style="margin-bottom: 0cm"><br/> <p style="margin-bottom: 0cm"><br/>
</p> </p>