Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Regression - trusted role does not work with version 3.0.10 #7406

Closed
pwbzh opened this issue Dec 1, 2022 · 5 comments
Closed

Regression - trusted role does not work with version 3.0.10 #7406

pwbzh opened this issue Dec 1, 2022 · 5 comments

Comments

@pwbzh
Copy link

pwbzh commented Dec 1, 2022

Hello,

Tested on GNU/Linux and Windows, the Mapping of Users to Objects does not work with version 3.0.10 but works with version 3.0.7

https://firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-security-mapping.html

Thanks

@AlexPeshkoff AlexPeshkoff self-assigned this Dec 1, 2022
@AlexPeshkoff
Copy link
Member

AlexPeshkoff commented Dec 1, 2022

Doubt that:

# ./isql -user sysdba -pas masterkey localhost:employee
Database: localhost:employee, User: SYSDBA
SQL> select current_user from rdb$database;

USER
===============================
SYSDBA

SQL> create mapping sysg using * from user sysdba to user guest;
SQL>

# ./isql -user sysdba -pas masterkey localhost:employee
Database: localhost:employee, User: GUEST
SQL> select current_user from rdb$database;

USER
===============================
GUEST

SQL>

@pwbzh
Copy link
Author

pwbzh commented Dec 1, 2022

GRANT SELECT ON TEST TO ROLE SALE;
CREATE MAPPING ROLE_JDOE USING PLUGIN SRP FROM USER JDOE TO ROLE SALE;

The user JDOE can execute the SELECT on the table TEST in 3.0.7, not in 3.0.8 and next.
After testing, the problem occurs in 3.0.8.
Overwriting the SRP DLL and the main executable from 3.0.8 with those of from 3.0.7 works.

@pwbzh
Copy link
Author

pwbzh commented Dec 1, 2022

The problem seems to come from the engine12 DLL between version 3.0.7 and 3.0.8.

@AlexPeshkoff
Copy link
Member

That's not mapping by itself (current_role is correct) problem but something bad with trusted role. Will fix.

@AlexPeshkoff AlexPeshkoff changed the title Regression - Mapping of Users to Objects does not work with version 3.0.10 Regression - trusted role does not work with version 3.0.10 Dec 1, 2022
@AlexPeshkoff
Copy link
Member

An issue is specific for 3.0.x, no need front-porting.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants