You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by "Velmurugan Periasamy (JIRA)" <ji...@apache.org> on 2014/10/16 22:25:33 UTC

[jira] [Created] (ARGUS-116) Modify DB permissions for xalogger user account

Velmurugan Periasamy created ARGUS-116:
------------------------------------------

             Summary: Modify DB permissions for xalogger user account
                 Key: ARGUS-116
                 URL: https://issues.apache.org/jira/browse/ARGUS-116
             Project: Argus
          Issue Type: Bug
            Reporter: Velmurugan Periasamy


The default permissions granted to the database users appear to be higher than necessary. The user for the audit log 'xalogger' has full access to all tables in all databases, even ones not related to xasecure. This could raise concerns in a shared environment. 

Permissions should be restricted to only allow what is required. xalogger user should have only insert privileges in only xa_access_audit table. xaadmin user need select privilege on xa_access_audit table.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)