Uploaded image for project: 'Apache Trafodion (Retired)'
  1. Apache Trafodion (Retired)
  2. TRAFODION-2176

a user grant component privilege to another user with by clause got error if the user in by clause is the grantor itself

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Minor
    • Resolution: Unresolved
    • None
    • None
    • sql-security
    • None

    Description

      a user grant component privilege to another user with by clause got error if the user in by clause is the grantor itself.
      But the grant will succeed without the by clause.

      Reproduce Steps –

      create role role1;
      create role role2;
      register component comp1;
      create component privilege created as 'cr' on comp1 ;
      create component privilege updated as 'up' on comp1 ;
      create component privilege deleted as 'de' on comp1 ;
      grant component privilege created ,updated on comp1 to qauser1 with grant option by db__root;

      connect as qauser1:
      SQL>grant component privilege updated on comp1 to qauser2 by qauser1;

          • ERROR[1017] You are not authorized to perform this operation. [2016-08-16 08:31:00]

      SQL>grant component privilege updated on comp1 to qauser2;

      — SQL operation complete.

      Attachments

        Activity

          People

            rmarton Roberta Marton
            rachelgao Gao, Rui-Xian
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: