Revoke priv from role fails when view is present

Bug #1398546 reported by Paul Low
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Trafodion
Fix Released
High
Roberta Marton

Bug Description

The user should not be required to drop the view in order to revoke the privilege from the roles.

SQL>create role role11;

--- SQL operation complete.

SQL>create table tab11(a int, b int);

--- SQL operation complete.

SQL>create view view11 as select * from tab11;

--- SQL operation complete.

SQL>grant all on tab11 to role11;

--- SQL operation complete.

SQL>revoke all on tab11 from role11;

*** ERROR[1025] Request failed. Dependent object TRAFODION.SEABASE.VIEW11 exists.

SQL>revoke all on tab11 from role11 cascade;

*** ERROR[1025] Request failed. Dependent object TRAFODION.SEABASE.VIEW11 exists.

SQL>

Tags: sql-security
Paul Low (paul-low-x)
Changed in trafodion:
assignee: nobody → Cliff Gray (cliff-gray)
Paul Low (paul-low-x)
Changed in trafodion:
milestone: none → r1.1
Changed in trafodion:
assignee: Cliff Gray (cliff-gray) → Roberta Marton (roberta-marton)
status: New → In Progress
Revision history for this message
Roberta Marton (roberta-marton) wrote :

Check for retaining the SELECT privilege on a revoke was moved to after all privilege descriptors were analyzed.

Changed in trafodion:
status: In Progress → Fix Committed
Paul Low (paul-low-x)
Changed in trafodion:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.