[TRAFODION-3204] Create table target like source works on shared schemas where user has no priv

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: sql-security
• Assignee: Roberta Marton
• Reporter: Roberta Marton
• Created: 11/Sep/18 18:11
• Updated: 11/Sep/18 18:11

Description

A user can create a table in a shared schema where they don't have any privileges on the target table.  They cannot copy the data but they can see the columns that make up the table.

connect as sql_user1;

create schema user1;

set schema user1;

create table t1 (...);

insert some rows

Connect as sql_user2

set schema to seabase

create table seabase.t1 like user1.t1; -> succeeds where it shouldn't