[SENTRY-827] Server Scope always grants ALL

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.6.0
• Assignee: Ryan P
• Reporter: Ryan P
• Created: 02/Aug/15 11:33
• Updated: 20/Aug/15 04:27
• Resolved: 05/Aug/15 07:53

Description

In it's current state the following two commands result in ALL on SERVER server1:

GRANT SELECT ON SERVER server1 TO ROLE read_role;
GRANT INSERT ON SERVER server1 TO ROLE insert_role;

This can cause users to unknowingly grant full privileges to user groups. Fixing this behavior will also allow us to mimic the previous behavior exhibited with Policy Files:

read_role = server=server1->db=>table=>action=select
insert_role = server=server1->db=>table=>action=insert

Granting SELECT on SERVER would be far more pleasant than granting SELECT on each individual DATABASE