alexpeshkoff
1b6632ac8b
Fixed CORE-4811: Make user names behave according to SQL identifiers rules
2015-06-03 13:57:18 +00:00
asfernandes
adf1fd737d
Misc.
2015-05-02 03:54:03 +00:00
alexpeshkoff
30414ee562
Disabled use of system tables in foreign key constraints
2015-04-20 17:04:42 +00:00
alexpeshkoff
1a9830ebd6
Do not let SYSDBA modify structure of system tables
2015-04-20 15:07:14 +00:00
alexpeshkoff
bab9ce6e47
Fixed CORE-4743: Granted role does not work with non-ascii username
2015-04-17 18:35:39 +00:00
alexpeshkoff
d42402d0b9
Fixed CORE-4731: Prohibit an ability to issue DML or DDL statements on RDB$ tables
2015-04-15 13:19:18 +00:00
robocop
ce1233b10c
rdb$system_flag is not nullable in FB3.
2015-03-13 15:31:14 +00:00
alexpeshkoff
7fed9ff78c
cleanup
2015-03-05 16:18:46 +00:00
skidder
7c743fc291
Fix build warnings
2014-07-17 18:48:46 +00:00
asfernandes
9aa49de41a
Misc.
2014-07-13 01:33:34 +00:00
asfernandes
fa0c3dd11c
Misc.
2014-07-10 02:21:18 +00:00
roman-simakov
573e93e5a6
Fixed CORE-735: User rights for metadata changes.
...
We check DDL in DDL nodes and skip at vio level. vio level still exists for direct metadata editing.
2014-07-08 07:35:27 +00:00
alexpeshkoff
0e8e251e03
Avoid non-standard use of RDB$ROLES.RDB$SYSTEM_FLAG
2014-06-24 10:16:24 +00:00
dimitr
153b06b2fd
Minor structure changes.
2014-06-13 16:28:22 +00:00
asfernandes
40b38014e4
Misc.
2014-05-08 23:26:40 +00:00
alexpeshkoff
bf82df1ebb
Postfix for CORE-3242: somewhy when checking metadata access (like MODIFY or DROP) always checked that access from object itself. Strange at the first glance behavior, but let us do not change legacy (at least since FB1.0) when possible.
2014-05-07 11:21:31 +00:00
robocop
c5ff8fb1e6
Avoid var shadowing.
2014-05-01 05:30:14 +00:00
alexpeshkoff
9bd0939f09
Implemented CORE-1377: Add an ability to change role without reconnecting to database
2014-04-30 15:12:12 +00:00
alexpeshkoff
b412d2d001
Postfix for CORE-3242: enable same trick for functions too
2014-04-21 17:05:19 +00:00
alexpeshkoff
68431df02e
Fixed CORE-3242: Recursive stored procedure shouldnt require execute right to call itself
2014-04-21 13:34:06 +00:00
alexpeshkoff
20e846369e
Implemented CORE-3370: Resolve additional aspects of multiple security databases from services and cross-database requests POV (mapping names)
2014-04-04 15:57:18 +00:00
dimitr
3821ec9d41
Implemented CORE-4218 (database owner in MON$DATABASE) and CORE-4222 (auth method in MON$ATTACHMENTS).
2013-09-18 09:37:13 +00:00
dimitr
86f4b02ef3
1) Cleanup and renaming in the SCL code.
...
2) Reimplemented the USAGE privilege as a separate one.
3) Added USAGE permission checks for generators/sequences and exceptions.
4) Supported USAGE in GRANT/REVOKE for all object types.
5) Refactored SET GENERATOR and ALTER SEQUENCE as true DDL. blr_set_generator is supported only for backward compatibility, it's not generated by DSQL anymore.
6) Added START WITH clause for [RE]CREATE SEQUENCE and CREATE OR ALTER SEQUENCE.
7) Fixed a number of related errors.
2013-03-07 13:59:03 +00:00
robocop
844b15bd13
Misc and style.
2012-05-20 10:00:52 +00:00
alexpeshkoff
4e795f4047
Include platform definitions file common.h in firebird.h. Use OS-specific ThreadId instead artificial FB_THREAD_ID, avoiding unneeded casts in the code. This should fix BSD and MAC ports.
2012-03-01 08:55:43 +00:00
robocop
0b5ee78cb7
Make more members of blb private.
2012-02-15 07:13:41 +00:00
robocop
eed418a89e
Make blb resemble more a class: private data members, convert some functions into methods, add methods with code that was in other files, etc.
2012-02-15 03:34:21 +00:00
robocop
186c817caa
Playing with fire: converting some static functions into member functions. I tried to check every change I did.
2012-02-07 03:17:52 +00:00
alexpeshkoff
d9fd86a645
Warning
2012-01-25 13:30:52 +00:00
robocop
e2914070b9
Misc.
2012-01-19 04:54:39 +00:00
dimitr
e956e2e6c0
1) Restricted ALTER/DROP permissions to the object owners only. Now this applies to domains, charsets, collations, generators and exceptions. This fixes CORE-304: Metadata security hole - any user can alter/drop generators and exceptions.
...
2) Opened the gates to implement the standard USAGE privilege (CORE-2884). SQL support and validation logic are still to be developed.
3) Added the grant option to the owner permissions for packages, procedures and functions.
4) Misc cleanup and refactoring.
2012-01-08 14:05:29 +00:00
asfernandes
92cb1cbd87
Fix ACL checking. Alex, please review.
2011-10-01 21:38:02 +00:00
alexpeshkoff
491ce86c72
Fixed CORE-3329:Windows administrator gets RDB$ADMIN role when this is not expected
2011-02-02 11:30:55 +00:00
dimitr
af23581244
Front ported my recent changes. I'm unable to verify the compilation now, sorry.
2010-10-14 05:27:08 +00:00
alexpeshkoff
e05c1a825f
Moved some more .h-files to common from jrd as Vlad suggested
2010-10-13 10:39:52 +00:00
alexpeshkoff
83d6a2f88c
Restored a lot of changes, rolled back by me unintentionally
2010-10-12 11:36:51 +00:00
alexpeshkoff
2dc25a44bb
OSRI and new posix build
2010-10-12 08:02:57 +00:00
robocop
7051ceb301
Cleanup.
2010-04-29 10:13:38 +00:00
asfernandes
0c47a04538
1) Use RAII with the non-cached requests.
...
2) Change GPRE generated code to something that fits the future SMP-aware engine, replacing calls of "request = CMP_compile2(...)" by "request.compile(...)". Boot build required.
2010-04-19 22:49:18 +00:00
asfernandes
39498cb65b
Use AutoCacheRequest in all cacheable system requests. Fixes some request leakages.
2010-04-18 15:04:52 +00:00
robocop
ac551e2b71
Cleanup.
2010-04-04 08:52:10 +00:00
asfernandes
e1ba33a2ae
Fix problem of the system transaction storing pointer to random or already deallocated attachment. Full build (or kind of) required.
2010-04-02 21:48:15 +00:00
asfernandes
7937d6d0e2
Misc
2010-02-13 20:01:12 +00:00
robocop
3b5a0fdae5
The way AccessItem instances were ordered was a hack that sooner or later would fail when adding more object types (that now have ACLs but we still don't enfornce them). Further, comparing numbers is faster than comparing strings.
2010-02-13 08:31:16 +00:00
alexpeshkoff
b67e973d1e
cleanup - noticed by Adriano
2010-01-25 11:37:50 +00:00
alexpeshkoff
55e717f810
Moved authentication code from engine to remote listener.
...
Get ready for authentication plugins.
2010-01-22 14:55:11 +00:00
dimitr
d36473d47e
Corrections.
2009-12-25 12:28:05 +00:00
asfernandes
024c09403b
Misc
2009-12-23 01:19:18 +00:00
dimitr
debe65bcfb
Support for PSQL functions (other JRD changes). Still work in progress.
2009-12-21 17:43:01 +00:00
robocop
5cfc9dc78b
CORE-2787: Make rdb$system_flag not null.
...
Please do a full rebuild.
2009-12-03 12:52:10 +00:00
