You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafodion.apache.org by "Alice Chen (JIRA)" <ji...@apache.org> on 2015/07/22 20:18:18 UTC

[jira] [Created] (TRAFODION-816) LP Bug: 1401233 - USAGE privilege not checked when creating procedure

Alice Chen created TRAFODION-816:
------------------------------------

             Summary: LP Bug: 1401233 - USAGE privilege not checked when creating procedure
                 Key: TRAFODION-816
                 URL: https://issues.apache.org/jira/browse/TRAFODION-816
             Project: Apache Trafodion
          Issue Type: Bug
          Components: sql-security
            Reporter: Paul Low
            Assignee: Roberta Marton
            Priority: Critical
             Fix For: 1.0 (pre-incubation)


User is able to create procedure without USAGE privilege on the library.

SQL>create library lib1 file '/home/trafodion/dfr.jar';

--- SQL operation complete.

SQL>connect USERNAME1/PASSWORD1
Connected to Trafodion 

SQL>set schema sch002;

--- SQL operation complete.

SQL>Create procedure testUserFunction()
external name 'TestDML.testUserFunction'
LIBRARY sch002.lib1
language java 
parameter style java
DYNAMIC RESULT SETS 1;

--- SQL operation complete.

SQL>



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)