GitHub user robertamarton opened a pull request:

    https://github.com/apache/trafodion/pull/1536

    [TRAFODION-2542] Grantor is not correct when granting privileges for …

    …a role
    
    When granting privileges and the authorization ID is not the current user 
but
    one of roles granted to the current user, then the "granted by" clause is
    required.  In addition, the grantor of the privileges becomes the role 
specified
    in the grant statement instead of the current user.
    
    Added a CQD ALLOW_WGO_FOR_ROLES that will return an error if the user tries 
to
    grant a privilege as a role.
    
    Added error message (1194) when a component operation is not defined.
    
    Added a check to not allow the WITH GRANT OPTION when granting privileges
    to public

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/robertamarton/incubator-trafodion jira-2542

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/trafodion/pull/1536.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #1536
    
----
commit 03a96998cf1cd872596808c0628a367d66427e5e
Author: Roberta Marton <roberta.marton@...>
Date:   2018-04-24T00:20:54Z

    [TRAFODION-2542] Grantor is not correct when granting privileges for a role
    
    When granting privileges and the authorization ID is not the current user 
but
    one of roles granted to the current user, then the "granted by" clause is
    required.  In addition, the grantor of the privileges becomes the role 
specified
    in the grant statement instead of the current user.
    
    Added a CQD ALLOW_WGO_FOR_ROLES that will return an error if the user tries 
to
    grant a privilege as a role.
    
    Added error message (1194) when a component operation is not defined.
    
    Added a check to not allow the WITH GRANT OPTION when granting privileges
    to public

----


---

Reply via email to