[TRAFODION-2177] Revoke combined column privileges from role failed

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Component/s: sql-security
• Assignee: Roberta Marton
• Reporter: Gao, Rui-Xian
• Created: 23/Aug/16 15:48
• Updated: 13/Sep/16 23:55
• Resolved: 13/Sep/16 23:55

Description

Revoke combined column privileges from role failed, but revoke the privileges seperately would succeed.

Reproduce Steps –

create role role1;
create schema grantsch;
set schema grantsch;
create table a03tab1(col1 int, col2 int, col3 varchar(10))no partition;

grant insert(col1,col2), select on a03tab1 to role1;

SQL>revoke insert(col1,col2), select on a03tab1 from role1;

• • • ERROR[1037] Revoke failed because of a dependent grant between authorization ID SYSTEM and authorization ID DB_ROOT [2016-08-17 10:00:20]

>>revoke select on a03tab1 from role1;

— SQL operation complete.
>>revoke insert(col1,col2) on a03tab1 from role1;

— SQL operation complete.

Issue Links

• links to: GitHub Pull Request #685