Ability to get any permissions (including SYSDBA) working with services [CORE2657]

[firebird-automations]

Submitted by: @AlexPeshkoff

Using poor documented (at least not mentioned by Borland in 6.0 beta doc) tag isc_spb_command_line one can pass arbitrary trusted user name to service.

Commits: dbbea09

[firebird-automations]

Modified by: @AlexPeshkoff

assignee: Alexander Peshkov [ alexpeshkoff ]

[firebird-automations]

Commented by: @AlexPeshkoff

Fix contains 2 parts - first was needed to learn some utilities to accept minimum switch length in switch table. Next, service manager must detect that switches in command line.

I understand that in the worst case (when for example database name contains something like trusted_svc) error may be thrown in case of actually valid command line. Unfortunately, there is absolutely no way to distinguish between valid and wrong -trusted_role swicth in utility's command line parser.

The only correct solution is to stop passing normal parameters from services manager to services themself using command line, instead pass ready switchtable (which will be also passed from standalone utility main() function), but I wish to leave it for next FB version.

[firebird-automations]

Modified by: @AlexPeshkoff

status: Open [ 1 ] => Resolved [ 5 ]

resolution: Fixed [ 1 ]

Fix Version: 2.5 RC1 [ 10362 ]

[firebird-automations]

Modified by: @pcisar

status: Resolved [ 5 ] => Closed [ 6 ]

[firebird-automations]

Modified by: @pavel-zotov

QA Status: No test