Derby
  1. Derby
  2. DERBY-1738

An user is able to grant select privilege on a view but the underlying object is not own by the user.

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Duplicate
    • Affects Version/s: 10.2.1.6
    • Fix Version/s: None
    • Component/s: SQL
    • Labels:
      None
    • Environment:
      Sun JDK 1.4.2

      Description

      An user is able to grant select privilege on a view but the underlying object is not own by the user. The grant statement should fail since the user does not have privilege to grant. i.e.:

      ij version 10.3
      ij> connect 'jdbc:derby:wombat;create=true' user 'user1' as user1;
      WARNING 01J01: Database 'wombat' not created, connection made to existing database instead.
      WARNING 01J14: SQL authorization is being used without first enabling authentication.
      ij> create table t1 (i int);
      ERROR X0Y32: Table/View 'T1' already exists in Schema 'USER1'.
      ij> insert into t1 values 1,2,3;
      3 rows inserted/updated/deleted
      ij> grant select on t1 to user2;
      0 rows inserted/updated/deleted
      ij> connect 'jdbc:derby:wombat' user 'user2' as user2;
      WARNING 01J14: SQL authorization is being used without first enabling authentication.
      ij(USER2)> – ok
      create view v1 as select * from user1.t1;
      ERROR X0Y32: Table/View 'V1' already exists in Schema 'USER2'.
      ij(USER2)> – attempt to grant this view to others, should fail since user2
      – does not have grant privilege on object user1.t1
      grant select on user1.t1 to user3;
      ERROR 2850C: User 'USER2' is not the owner of Table/View 'USER1'.'T1'.
      ij(USER2)> – expect error
      grant select on v1 to user3;
      0 rows inserted/updated/deleted
      ij(USER2)>

      ------------------ Java Information ------------------
      Java Version: 1.4.2_12
      Java Vendor: Sun Microsystems Inc.
      Java home: C:\Program Files\Java\j2re1.4.2_12
      Java classpath: classes;.
      OS name: Windows XP
      OS architecture: x86
      OS version: 5.1
      Java user name: Yip
      Java user home: C:\Documents and Settings\Yip
      Java user dir: C:\work3\derby\trunk
      java.specification.name: Java Platform API Specification
      java.specification.version: 1.4
      --------- Derby Information --------
      JRE - JDBC: J2SE 1.4.2 - JDBC 3.0
      [C:\work3\derby\trunk\classes] 10.3.0.0 alpha - (1)
      ------------------------------------------------------
      ----------------- Locale Information -----------------
      Current Locale : [English/United States [en_US]]
      Found support for locale: [de_DE]
      version: 10.3.0.0 alpha - (1)
      Found support for locale: [es]
      version: 10.3.0.0 alpha - (1)
      Found support for locale: [fr]
      version: 10.3.0.0 alpha - (1)
      Found support for locale: [it]
      version: 10.3.0.0 alpha - (1)
      Found support for locale: [ja_JP]
      version: 10.3.0.0 alpha - (1)
      Found support for locale: [ko_KR]
      version: 10.3.0.0 alpha - (1)
      Found support for locale: [pt_BR]
      version: 10.3.0.0 alpha - (1)
      Found support for locale: [zh_CN]
      version: 10.3.0.0 alpha - (1)
      Found support for locale: [zh_TW]
      version: 10.3.0.0 alpha - (1)
      ------------------------------------------------------

        Issue Links

          Activity

          No work has yet been logged on this issue.

            People

            • Assignee:
              Unassigned
              Reporter:
              Yip Ng
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development