You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafodion.apache.org by "Gao, Rui-Xian (JIRA)" <ji...@apache.org> on 2016/03/08 11:06:40 UTC

[jira] [Created] (TRAFODION-1882) Column Privilege: a user can grant column privilege to others when the user doesn't have privilege on the column

Gao, Rui-Xian created TRAFODION-1882:
----------------------------------------

             Summary: Column Privilege: a user can grant column privilege to others when the user doesn't have privilege on the column
                 Key: TRAFODION-1882
                 URL: https://issues.apache.org/jira/browse/TRAFODION-1882
             Project: Apache Trafodion
          Issue Type: Bug
          Components: sql-security
            Reporter: Gao, Rui-Xian


dbroot:
      SQL> grant select(a), delete,insert(a), update(a) on t1 to user2 with grant option;
--- SQL operation complete.
 
User2:
qi_mxci2> set schema my_sec_test;
--- SQL operation complete.
 
qi_mxci2> grant select(a), delete on t1 to user5;
--- SQL operation complete.
 
qi_mxci2> grant select(b) on t1 to user5; 
--- SQL operation complete.

 user2 doesn’t have select privilege on column b but can grant the privilege to other user. It should get ERROR[4481] here.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)