Alex Peshkoff wrote:

> Please look at this trivial sample.
>
> create table t (f int);
> grant select on t to public granted by abc;
> revoke all on all from abc;
>
> Currently privileges, granted by user ABC, remain as is after executing 
> mentioned revoke operator. This looks like a bug for me, but before fixing 
> (existing SQL operator behavior to be changed) I want to ask here - does 
> anybody see problems with removing rights, granted by user, in subj?

Why is this a bug? 'Revoke all on all from abc' means to take away all rights 
on any objects that were granted TO user ABC. IMO this should not imply that 
any privileges granted to other users/roles BY user ABC are also withdrawn.

Paul Vinkenoog

------------------------------------------------------------------------------
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to