You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafodion.apache.org by "Roberta Marton (JIRA)" <ji...@apache.org> on 2017/03/14 22:57:41 UTC

[jira] [Assigned] (TRAFODION-2538) Revoking privileges from role not invoking query invalidation

     [ https://issues.apache.org/jira/browse/TRAFODION-2538?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Roberta Marton reassigned TRAFODION-2538:
-----------------------------------------

    Assignee: Roberta Marton

> Revoking privileges from role not invoking query invalidation
> -------------------------------------------------------------
>
>                 Key: TRAFODION-2538
>                 URL: https://issues.apache.org/jira/browse/TRAFODION-2538
>             Project: Apache Trafodion
>          Issue Type: Bug
>          Components: sql-cmp, sql-security
>            Reporter: Roberta Marton
>            Assignee: Roberta Marton
>
> Privilege information is cached.  When a revoke is performed, query invalidation occurs.  Query invalidation sends the revoke operation to RMS and each executor process checks for keys.  If the key affect cache, the cache entry is refreshed.
> Query invalidation keys are not be created for revoke privileges from roles.
> Create a table
> create a role
> grant select, insert on table to role;
> grant role to user1.
> as user1, select and insert into table
> in another session, revoke insert from role
> user1 should no longer be able to insert 



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)