Revoke privilege from role returns dependent object error

Bug #1465356 reported by Paul Low
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Trafodion
In Progress
High
Roberta Marton

Bug Description

Dependent object error is returned while performing a revoke privilege on a view from role.
"*** ERROR[1025] Request failed. Dependent object TRAFODION.SCHEMA1.A09VIEW1 exists." is returned when revoking a privilege from a role right after the privilege has been granted.
See previously fixed bug #1398546. Seems to be similar issue.
See log below.
Build: daily build 20150613

SQL>create role role1;

--- SQL operation complete.

SQL>create schema schema1;

--- SQL operation complete.

SQL>set schema schema1;

--- SQL operation complete.

SQL>create table a09tab1(col1 int,col2 int,col3 int)no partition;

--- SQL operation complete.

SQL>create table a09tab2(col1 int,col2 int)no partition;

--- SQL operation complete.

SQL>create view a09view1(a,b) as select a09tab1.col1,a09tab2.col2 from a09tab1,a09tab2 where a09tab1.col3=a09tab2.col2;

--- SQL operation complete.

SQL>grant select on a09view1 to role1;

--- SQL operation complete.

SQL>revoke select on a09view1 from role1;

*** ERROR[1025] Request failed. Dependent object TRAFODION.SCHEMA1.A09VIEW1 exists.

Tags: sql-security
Changed in trafodion:
assignee: Cliff Gray (cliff-gray) → Roberta Marton (roberta-marton)
Changed in trafodion:
status: New → In Progress
Revision history for this message
Roberta Marton (roberta-marton) wrote :

There is a check in mainline revoke code to determine if the object type is a view and if the SELECT privilege is no longer applicable. If so, then the dependent error is returned. However, this code is incorrect and actually the correct code exists in the gatherViewPrivileges method. The view check has been removed.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.