[TRAFODION-12] Grant revoke enhancements

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Component/s: sql-security
• Labels: security
• External issue URL: http://docs.trafodion.org/privilege_manager_enhancements.pdf
• Assignee: Roberta Marton
• Reporter: Roberta Marton
• Created: 25/Jun/15 16:07
• Updated: 16/May/17 16:40
• Resolved: 16/May/17 16:40

Description

This JIRA covers improvements related to Trafodion grant and revoke commands. At the time Trafodion became part of Apache, part of this work was completed. The remaining work is covered by this JIRA.

See http://docs.trafodion.org/privilege_manager_enhancements.pdf for a complete description of these improvements.

Grant/Revoke enhancements include:

Column-level privileges for tables and views - mostly completed, work remaining includes:

• REVOKE ROLE RESTRICT does not consider column privileges.
• REVOKE RESTRICT for columns is only partially tested, catman1/TEST129 has been added but is incomplete

Support for WITH GRANT OPTION and GRANT OPTION FOR clauses for object-level and column-level GRANT and REVOKE statements - this work is complete and tests exists in catman1/TEST140.

Support for GRANTED BY clause for object-level and column-level GRANT and REVOKE statements - - this work is complete and tests exists in catman1/TEST140.

CASCADE support for all REVOKE commands - work has not been started.

Support a grantee list for object-level and column-level GRANT and REVOKE statements - work has not been started.

New component-level privileges - work is in progress

New Privilege Manager metadata tables and support for upgrade to the new and changed metadata - work has been committed but is part of the overall upgrade operation

Addition and modification of showddl and get commands to provide information on Privilege Manager metadata - work has not been started