Roberta Marton created TRAFODION-3204:
-----------------------------------------

             Summary: Create table target like source works on shared schemas 
where user has no priv
                 Key: TRAFODION-3204
                 URL: https://issues.apache.org/jira/browse/TRAFODION-3204
             Project: Apache Trafodion
          Issue Type: Bug
          Components: sql-security
            Reporter: Roberta Marton
            Assignee: Roberta Marton


A user can create a table in a shared schema where they don't have any 
privileges on the target table.  They cannot copy the data but they can see the 
columns that make up the table.

connect as sql_user1;

create schema user1;

set schema user1;

create table t1 (...);

insert some rows

Connect as sql_user2

set schema to seabase

create table seabase.t1 like user1.t1; -> succeeds where it shouldn't



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to