Gao, Rui-Xian created TRAFODION-2279:
----------------------------------------

             Summary: revoke all doesn't revoke column privileges
                 Key: TRAFODION-2279
                 URL: https://issues.apache.org/jira/browse/TRAFODION-2279
             Project: Apache Trafodion
          Issue Type: Bug
          Components: sql-security
         Environment: centos6.7
cdh5.4.8
            Reporter: Gao, Rui-Xian
            Assignee: Roberta Marton


'revoke all' doesn't revoke column privileges.

>>create table tabl1(a int, b int);

--- SQL operation complete.
>>grant select(a) on tabl1 to qauser1;

--- SQL operation complete.
>>grant delete on tabl1 to qauser1;

--- SQL operation complete.
>>showddl tabl1;

CREATE TABLE TRAFODION.RACHEL_SCH.TABL1
  (
    A                                INT DEFAULT NULL NOT SERIALIZED
  , B                                INT DEFAULT NULL NOT SERIALIZED
  )
 ATTRIBUTES ALIGNED FORMAT
;

-- GRANT SELECT, INSERT, DELETE, UPDATE, REFERENCES ON 
TRAFODION.RACHEL_SCH.TABL1 TO DB__ROOT WITH GRANT OPTION;
  GRANT DELETE ON TRAFODION.RACHEL_SCH.TABL1 TO QAUSER1;
GRANT SELECT(A) ON
  TRAFODION.RACHEL_SCH.TABL1 TO QAUSER1;

--- SQL operation complete.
>>revoke all on tabl1 from qauser1;

--- SQL operation complete.
>>showddl tabl1;

CREATE TABLE TRAFODION.RACHEL_SCH.TABL1
  (
    A                                INT DEFAULT NULL NOT SERIALIZED
  , B                                INT DEFAULT NULL NOT SERIALIZED
  )
 ATTRIBUTES ALIGNED FORMAT
;

-- GRANT SELECT, INSERT, DELETE, UPDATE, REFERENCES ON 
TRAFODION.RACHEL_SCH.TABL1 TO DB__ROOT WITH GRANT OPTION;
  GRANT SELECT(A) ON TRAFODION.RACHEL_SCH.TABL1 TO QAUSER1;

--- SQL operation complete.




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to