DB__ROOT is unable to grant privilege on object in private schema

Bug #1402009 reported by Paul Low
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Trafodion
Fix Released
Medium
Roberta Marton

Bug Description

DB__ROOT user was able to create the object, but is not able to grant privileges on the object on behalf of the owner.

SQL>connect DB_ROOT_USERNAME1/DB_ROOT_PASSWORD1
Connected to Trafodion

SQL>create schema schema1 authorization USERNAME1;

--- SQL operation complete.

SQL>set schema schema1;

--- SQL operation complete.

SQL>create table tab1(a int, b int);

--- SQL operation complete.

SQL>grant select on tab1 to USERNAME2;

*** ERROR[1012] No privileges were granted. You lack grant option on the specified privileges.

Tags: sql-security
Revision history for this message
Cliff Gray (cliff-gray) wrote :

In Trafodion DB__ROOT cannot grant (or revoke) object-level privileges on behalf of the user; the GRANTED BY option is part of the syntax but has not yet been implemented. When GRANTED BY is implemented, likely grants (and revokes) by DB__ROOT will be treated as a GRANTED BY on behalf of the object owner even if the GRANTED BY clause is not supplied.

Cliff Gray (cliff-gray)
Changed in trafodion:
status: New → In Progress
Paul Low (paul-low-x)
Changed in trafodion:
milestone: none → r1.1
Changed in trafodion:
assignee: Cliff Gray (cliff-gray) → Roberta Marton (roberta-marton)
Revision history for this message
Roberta Marton (roberta-marton) wrote :

When DB__ROOT executes a grant or revoke on objects it does not own, need to
  change the grantor from DB__ROOT to the object owner. This matches the same
  behavior for other DDL operations such as CREATE.

  As part of this fix, the GRANTED BY clause is now allowed for GRANT
  statements but it won't be complete until LP bug 1414225 is done.

Changed in trafodion:
status: In Progress → Fix Committed
Revision history for this message
Paul Low (paul-low-x) wrote :

verified on 0403 build

Changed in trafodion:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.