You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@trafodion.apache.org by "Alice Chen (JIRA)" <ji...@apache.org> on 2015/07/22 20:19:10 UTC

[jira] [Created] (TRAFODION-949) LP Bug: 1414234 - Anyone can perform a SHOWDDL USER command

Alice Chen created TRAFODION-949:
------------------------------------

             Summary: LP Bug: 1414234 - Anyone can perform a SHOWDDL USER command
                 Key: TRAFODION-949
                 URL: https://issues.apache.org/jira/browse/TRAFODION-949
             Project: Apache Trafodion
          Issue Type: Bug
          Components: sql-security
            Reporter: Roberta Marton
            Assignee: Cliff Gray
            Priority: Critical
             Fix For: 1.1 (pre-incubation)


Anyone can perform the following SHOWDDL commands even if they have no privileges:

SHOWDDL COMPONENT 
SHOWDDL FUNCTION
SHOWDDL PROCEDURE
SHOWDDL ROLE
SHOWDDL SCHEMA
SHOWDDL SEQUENCE
SHOWDDL USER

Only users that have the appropriate privilege should be able to execute the command.

Also, support for SHOWDDL LIBRARY is missing.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)