You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@trafodion.apache.org by Ming <ov...@sina.com> on 2018/06/19 08:53:58 UTC
[DISCUSS] Filter out SYSTEM object for various GET utilities
Hi, all,
I have got some requirements from the support engineers of Trafodion, that
wish to filter out those system objects when doing 'get tables', for
example, those histogram tables, not showing them.
I have created JIRA: https://issues.apache.org/jira/browse/TRAFODION-3113
What do all others think about this? Shall we need to do this? Or you have
better ideas?
I noticed there are various GET commands, and maybe we can show all object
when it is DB__ROOT, but for normal user, just show normal objects. Or we
should add some new command like 'get all tables' , 'get user tables' , 'get
system tables' , for example?
thanks,
Ming
Re: [DISCUSS] Filter out SYSTEM object for various GET utilities
Posted by Qifan Chen <qi...@esgyn.com>.
+1 on Selva's suggestion, and we can define the semantics of these GET commands as follows.
"get table" and "get user table": all user-defined tables minus the histogram ones;
"get all tables": all user-defined tables, plus the histogram tables;
"get system tables": all meta-data tables;
Agree with Roberta on the role that the privileges play in this context.
--Qifan
________________________________
From: Roberta Marton <ro...@esgyn.com>
Sent: Tuesday, June 19, 2018 10:06:10 AM
To: dev@trafodion.apache.org
Subject: RE: [DISCUSS] Filter out SYSTEM object for various GET utilities
We do only show objects that the current user has privileges on. So db__root would see everything while sql_user1 sees only tables that they have at least one privilege. Would this be sufficient?
Of course authentication has to be enabled and the user cannot be granted the SHOW privilege.
Roberta
-----Original Message-----
From: Selva Govindarajan [mailto:selva.govindarajan@esgyn.com]
Sent: Tuesday, June 19, 2018 7:58 AM
To: dev@trafodion.apache.org
Subject: RE: [DISCUSS] Filter out SYSTEM object for various GET utilities
I believe " get all tables", " get user tables", "get system tables" commands are already available. But it seems to return the same information. I would think you might consider fixing these commands if possible.
Selva
-----Original Message----
From: Ming <ov...@sina.com>
Sent: Tuesday, June 19, 2018 1:54 AM
To: dev@trafodion.apache.org
Subject: [DISCUSS] Filter out SYSTEM object for various GET utilities
Hi, all,
I have got some requirements from the support engineers of Trafodion, that wish to filter out those system objects when doing 'get tables', for example, those histogram tables, not showing them.
I have created JIRA: https://issues.apache.org/jira/browse/TRAFODION-3113
What do all others think about this? Shall we need to do this? Or you have better ideas?
I noticed there are various GET commands, and maybe we can show all object when it is DB__ROOT, but for normal user, just show normal objects. Or we should add some new command like 'get all tables' , 'get user tables' , 'get system tables' , for example?
thanks,
Ming
RE: [DISCUSS] Filter out SYSTEM object for various GET utilities
Posted by Roberta Marton <ro...@esgyn.com>.
Be sure to -> revoke component privilege "SHOW" on sql_operations from "PUBLIC";
Roberta
-----Original Message-----
From: Liu, Ming (Ming) [mailto:ming.liu@esgyn.cn]
Sent: Tuesday, June 19, 2018 8:29 AM
To: dev@trafodion.apache.org
Subject: RE: [DISCUSS] Filter out SYSTEM object for various GET utilities
Thanks Roberta, that reminds me. Let me test with Security 'ON'. Probably it is already sufficient...
Ming
-----Original Message-----
From: Roberta Marton <ro...@esgyn.com>
Sent: Tuesday, June 19, 2018 11:06 PM
To: dev@trafodion.apache.org
Subject: RE: [DISCUSS] Filter out SYSTEM object for various GET utilities
We do only show objects that the current user has privileges on. So db__root would see everything while sql_user1 sees only tables that they have at least one privilege. Would this be sufficient?
Of course authentication has to be enabled and the user cannot be granted the SHOW privilege.
Roberta
-----Original Message-----
From: Selva Govindarajan [mailto:selva.govindarajan@esgyn.com]
Sent: Tuesday, June 19, 2018 7:58 AM
To: dev@trafodion.apache.org
Subject: RE: [DISCUSS] Filter out SYSTEM object for various GET utilities
I believe " get all tables", " get user tables", "get system tables" commands are already available. But it seems to return the same information. I would think you might consider fixing these commands if possible.
Selva
-----Original Message----
From: Ming <ov...@sina.com>
Sent: Tuesday, June 19, 2018 1:54 AM
To: dev@trafodion.apache.org
Subject: [DISCUSS] Filter out SYSTEM object for various GET utilities
Hi, all,
I have got some requirements from the support engineers of Trafodion, that wish to filter out those system objects when doing 'get tables', for example, those histogram tables, not showing them.
I have created JIRA: https://issues.apache.org/jira/browse/TRAFODION-3113
What do all others think about this? Shall we need to do this? Or you have better ideas?
I noticed there are various GET commands, and maybe we can show all object when it is DB__ROOT, but for normal user, just show normal objects. Or we should add some new command like 'get all tables' , 'get user tables' , 'get system tables' , for example?
thanks,
Ming
RE: [DISCUSS] Filter out SYSTEM object for various GET utilities
Posted by "Liu, Ming (Ming)" <mi...@esgyn.cn>.
Thanks Roberta, that reminds me. Let me test with Security 'ON'. Probably it is already sufficient...
Ming
-----Original Message-----
From: Roberta Marton <ro...@esgyn.com>
Sent: Tuesday, June 19, 2018 11:06 PM
To: dev@trafodion.apache.org
Subject: RE: [DISCUSS] Filter out SYSTEM object for various GET utilities
We do only show objects that the current user has privileges on. So db__root would see everything while sql_user1 sees only tables that they have at least one privilege. Would this be sufficient?
Of course authentication has to be enabled and the user cannot be granted the SHOW privilege.
Roberta
-----Original Message-----
From: Selva Govindarajan [mailto:selva.govindarajan@esgyn.com]
Sent: Tuesday, June 19, 2018 7:58 AM
To: dev@trafodion.apache.org
Subject: RE: [DISCUSS] Filter out SYSTEM object for various GET utilities
I believe " get all tables", " get user tables", "get system tables" commands are already available. But it seems to return the same information. I would think you might consider fixing these commands if possible.
Selva
-----Original Message----
From: Ming <ov...@sina.com>
Sent: Tuesday, June 19, 2018 1:54 AM
To: dev@trafodion.apache.org
Subject: [DISCUSS] Filter out SYSTEM object for various GET utilities
Hi, all,
I have got some requirements from the support engineers of Trafodion, that wish to filter out those system objects when doing 'get tables', for example, those histogram tables, not showing them.
I have created JIRA: https://issues.apache.org/jira/browse/TRAFODION-3113
What do all others think about this? Shall we need to do this? Or you have better ideas?
I noticed there are various GET commands, and maybe we can show all object when it is DB__ROOT, but for normal user, just show normal objects. Or we should add some new command like 'get all tables' , 'get user tables' , 'get system tables' , for example?
thanks,
Ming
RE: [DISCUSS] Filter out SYSTEM object for various GET utilities
Posted by Roberta Marton <ro...@esgyn.com>.
We do only show objects that the current user has privileges on. So db__root would see everything while sql_user1 sees only tables that they have at least one privilege. Would this be sufficient?
Of course authentication has to be enabled and the user cannot be granted the SHOW privilege.
Roberta
-----Original Message-----
From: Selva Govindarajan [mailto:selva.govindarajan@esgyn.com]
Sent: Tuesday, June 19, 2018 7:58 AM
To: dev@trafodion.apache.org
Subject: RE: [DISCUSS] Filter out SYSTEM object for various GET utilities
I believe " get all tables", " get user tables", "get system tables" commands are already available. But it seems to return the same information. I would think you might consider fixing these commands if possible.
Selva
-----Original Message----
From: Ming <ov...@sina.com>
Sent: Tuesday, June 19, 2018 1:54 AM
To: dev@trafodion.apache.org
Subject: [DISCUSS] Filter out SYSTEM object for various GET utilities
Hi, all,
I have got some requirements from the support engineers of Trafodion, that wish to filter out those system objects when doing 'get tables', for example, those histogram tables, not showing them.
I have created JIRA: https://issues.apache.org/jira/browse/TRAFODION-3113
What do all others think about this? Shall we need to do this? Or you have better ideas?
I noticed there are various GET commands, and maybe we can show all object when it is DB__ROOT, but for normal user, just show normal objects. Or we should add some new command like 'get all tables' , 'get user tables' , 'get system tables' , for example?
thanks,
Ming
RE: [DISCUSS] Filter out SYSTEM object for various GET utilities
Posted by Selva Govindarajan <se...@esgyn.com>.
I believe " get all tables", " get user tables", "get system tables" commands are already available. But it seems to return the same information. I would think you might consider fixing these commands if possible.
Selva
-----Original Message----
From: Ming <ov...@sina.com>
Sent: Tuesday, June 19, 2018 1:54 AM
To: dev@trafodion.apache.org
Subject: [DISCUSS] Filter out SYSTEM object for various GET utilities
Hi, all,
I have got some requirements from the support engineers of Trafodion, that wish to filter out those system objects when doing 'get tables', for example, those histogram tables, not showing them.
I have created JIRA: https://issues.apache.org/jira/browse/TRAFODION-3113
What do all others think about this? Shall we need to do this? Or you have better ideas?
I noticed there are various GET commands, and maybe we can show all object when it is DB__ROOT, but for normal user, just show normal objects. Or we should add some new command like 'get all tables' , 'get user tables' , 'get system tables' , for example?
thanks,
Ming