Win XP SP3 - EDB Uni 2.03b18

Hi.

1_In Sessions where I created one user (Granted role Admin - Revoked role Public (anything wrong here?)) I see this:
__A  If I log in as "added user":
   Opening "Database Privileges" dialog the selected "user or role" is "Administrator", which of course has all     privileges checked.
Switching between users & roles then selecting back Administrator, it shows with all privileges checkboxes UNchecked.
__B  If I log in as "Administrator" (passw:EDBDefault) :
   Opening "Database Privileges" dialog the selected "user or role" ("Administrator"),  has all privileges UNchecked.
Switching between users & roles then selecting back Administrator, all privileges checkboxes STAY UNchecked.

In both cases (added usr & admin) I can SELECT fine, as expected on privileges basis.

2_In Sessions where I did NOT created any user  I see this:

   Everything shows properly.

It seems an issue simply concerning how privileges values are loaded and displayed on list box when switching between users/roles.
But may be I am missing something, or I made some mistake I am not aware of.

Any hints on what is going on here?

Regards.

Franco,

<< 1_In Sessions where I created one user (Granted role Admin - Revoked role
Public (anything wrong here?)) I see this:
__A  If I log in as "added user":
  Opening "Database Privileges" dialog the selected "user or role" is
"Administrator", which of course has all     privileges checked.
Switching between users & roles then selecting back Administrator, it shows
with all privileges checkboxes UNchecked.
__B  If I log in as "Administrator" (passw:EDBDefault) :
   Opening "Database Privileges" dialog the selected "user or role"
("Administrator"),  has all privileges UNchecked.
Switching between users & roles then selecting back Administrator, all
privileges checkboxes STAY UNchecked. >>

Please look at the SQL History under the Explorer menu, and send me every
statement that deals with creating/altering users/roles and their privileges
(in the order that they were executed, please).

I'll run them and see what I can find out.

--
Tim Young
Elevate Software
www.elevatesoft.com

"Tim Young [Elevate Software]" wrote:

Franco,

<< 1_In Sessions where I created one user (Granted role Admin - Revoked role
Public (anything wrong here?)) I see this:
__A  If I log in as "added user":
  Opening "Database Privileges" dialog the selected "user or role" is
"Administrator", which of course has all     privileges checked.
Switching between users & roles then selecting back Administrator, it shows
with all privileges checkboxes UNchecked.
__B  If I log in as "Administrator" (passw:EDBDefault) :
   Opening "Database Privileges" dialog the selected "user or role"
("Administrator"),  has all privileges UNchecked.
Switching between users & roles then selecting back Administrator, all
privileges checkboxes STAY UNchecked. >>

Please look at the SQL History under the Explorer menu, and send me every
statement that deals with creating/altering users/roles and their privileges
(in the order that they were executed, please).

I'll run them and see what I can find out.

--
Tim Young
Elevate Software
www.elevatesoft.com

**************************

Tim,

I attach here a .zip with  ANSI config + database + SQL history + EDBMgr.ini (just in case).

I point out that I have been able to reproduce the issue both in Uni & Ansi Manager, and on two different
machines, and for both of two Users: Admin, and Pippo granted of admin privileges.
This, both on a pre-existent session and on a new one.
As I thought it had, may be, something to do with Db ownership, I created and populated a db from both users.
In each and every case I had the same erratic behavior in the list of privileges.
Querying the Dbs, as well as inserting, was fine.
I hope it can help.

Tim,

I attach here a .zip with  ANSI config + database + SQL history + EDBMgr.ini (just in case).

I point out that I have been able to reproduce the issue both in Uni & Ansi Manager, and on two different
machines, and for both of two Users: Admin, and Pippo granted of admin privileges.
This, both on a pre-existent session and on a new one.
As I thought it had, may be, something to do with Db ownership, I created and populated a db from both users.
In each and every case I had the same erratic behavior in the list of privileges.
Querying the Dbs, as well as inserting, was fine.
I hope it can help.
****************************
Tim,
just to give an idea of what I see when I play with the Users/Roles combo values:

logged as pippo.

1_ pippo_db
   admin privileges fine
   I select pippo privileges. fine.
   I selct admin privs. fine.
   I select Admins role privs. fine
   I reselect admin privs. ---->>>> Empty

2_ admin_db
   admin privs empty
   I select Admins privs. fine.
   I reselect admin priv. Empty
   I select pippo privs. Empty
   I reselect admin privs. now fine!!!!

logged as Admin

1_ admin_db
   adminfine
   pippo empty

2_ pippo_db
   admin empty always
   others fine.


regards.

Franco,

<< As I thought it had, may be, something to do with Db ownership, I created
and populated a db from both users. In each and every case I had the same
erratic behavior in the list of privileges.  >>

Are you expecting the privileges to be *effective* privileges ?  The
privileges dialog in EDB does not currently show effective privileges, only
directly-assigned privileges.

For example, with the Administrator logged into the ADMIN_DB database, the
pippo user does not show privileges for the ADMIN_DB database because that
user was not assigned those specific privileges.  Those privileges are
*inherited* from the Administrators role, which does show the proper
privileges.

The ability to show effective privileges will be in 2.04 (including a system
table that shows effective privileges for users).

--
Tim Young
Elevate Software
www.elevatesoft.com

"Tim Young [Elevate Software]" wrote:

Franco,

<< As I thought it had, may be, something to do with Db ownership, I created
and populated a db from both users. In each and every case I had the same
erratic behavior in the list of privileges.  >>

Are you expecting the privileges to be *effective* privileges ?  The
privileges dialog in EDB does not currently show effective privileges, only
directly-assigned privileges.

For example, with the Administrator logged into the ADMIN_DB database, the
pippo user does not show privileges for the ADMIN_DB database because that
user was not assigned those specific privileges.  Those privileges are
*inherited* from the Administrators role, which does show the proper
privileges.

The ability to show effective privileges will be in 2.04 (including a system
table that shows effective privileges for users).

--
Tim Young
Elevate Software
www.elevatesoft.com

*******************************************

Thanks for explanations, now it makes sense to me.