[TRAFODION-2279] revoke all doesn't revoke column privileges

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: sql-security
• Environment: centos6.7; cdh5.4.8
• Assignee: Roberta Marton
• Reporter: Gao, Rui-Xian
• Created: 12/Oct/16 15:01
• Updated: 17/Oct/16 18:20

Description

'revoke all' doesn't revoke column privileges.

>>create table tabl1(a int, b int);

— SQL operation complete.
>>grant select(a) on tabl1 to qauser1;

— SQL operation complete.
>>grant delete on tabl1 to qauser1;

— SQL operation complete.
>>showddl tabl1;

CREATE TABLE TRAFODION.RACHEL_SCH.TABL1
(
A INT DEFAULT NULL NOT SERIALIZED
, B INT DEFAULT NULL NOT SERIALIZED
)
ATTRIBUTES ALIGNED FORMAT
;

– GRANT SELECT, INSERT, DELETE, UPDATE, REFERENCES ON TRAFODION.RACHEL_SCH.TABL1 TO DB__ROOT WITH GRANT OPTION;
GRANT DELETE ON TRAFODION.RACHEL_SCH.TABL1 TO QAUSER1;
GRANT SELECT(A) ON
TRAFODION.RACHEL_SCH.TABL1 TO QAUSER1;

— SQL operation complete.
>>revoke all on tabl1 from qauser1;

— SQL operation complete.
>>showddl tabl1;

CREATE TABLE TRAFODION.RACHEL_SCH.TABL1
(
A INT DEFAULT NULL NOT SERIALIZED
, B INT DEFAULT NULL NOT SERIALIZED
)
ATTRIBUTES ALIGNED FORMAT
;

– GRANT SELECT, INSERT, DELETE, UPDATE, REFERENCES ON TRAFODION.RACHEL_SCH.TABL1 TO DB__ROOT WITH GRANT OPTION;
GRANT SELECT(A) ON TRAFODION.RACHEL_SCH.TABL1 TO QAUSER1;

— SQL operation complete.