meta data for this page
  •  

Security hardening

Windows platforms

No SYSDBA auto-mapping (Windows)

In v.2.1, members of administrative Windows groups were mapped to SYSDBA by default. From v.2.5 forward, automatic SYSDBA mapping is controlled on per-database basis using the new SQL command

ALTER ROLE RDB$ADMIN SET/DROP AUTO ADMIN MAPPING

Note: For a full overview of the RDB$ADMIN role, refer to the topic New RDB$ADMIN system role in the Administrative Features chapter.