You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafodion.apache.org by "Roberta Marton (JIRA)" <ji...@apache.org> on 2018/04/17 15:41:00 UTC
[jira] [Resolved] (TRAFODION-2407) Need include privilege checking
on 'PUBLIC' when getting privileges for a user
[ https://issues.apache.org/jira/browse/TRAFODION-2407?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Roberta Marton resolved TRAFODION-2407.
---------------------------------------
Resolution: Fixed
> Need include privilege checking on 'PUBLIC' when getting privileges for a user
> ------------------------------------------------------------------------------
>
> Key: TRAFODION-2407
> URL: https://issues.apache.org/jira/browse/TRAFODION-2407
> Project: Apache Trafodion
> Issue Type: Improvement
> Components: sql-security
> Reporter: Gao, Rui-Xian
> Assignee: Roberta Marton
> Priority: Major
>
> Some privilege checking for specific commands will be affected by privileges on PUBLIC, so we'd better include privilege checking for PUBLIC when getting privileges for a user.
> For example, we have privilege checking for SHOWDDL commands. To perform a SHOWDDL one must:
> -- be DB__ROOT
> -- be object owner
> -- have the SHOW privilege (PUBLIC & DB__ROOTROLE has priv)
> -- have SELECT privileges on object
> So a user can do showddl on any objects if PUBLIC has SHOW component privilege.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)