Roberta Marton commented on TRAFODION-1594:

This test case is no longer reproducible.  Closing it.

> Select from table returns data even though user has no privs
> ------------------------------------------------------------
>                 Key: TRAFODION-1594
>                 URL: https://issues.apache.org/jira/browse/TRAFODION-1594
>             Project: Apache Trafodion
>          Issue Type: Bug
>          Components: sql-security
>            Reporter: Roberta Marton
>            Assignee: Roberta Marton
> A user was able to select data from a table where the user had no privs.
> case:
> DB__ROOT created a schema on behalf of sql_user1.
> The following tables were created in this schema - games, teams, and players.
> sql_user1 granted select privilege to sql_user7 on table games.
> sql_user7 was able to select from both games and teams.  sql_user7 was not 
> able to select from players.
> Looking at the metadata indicated that sql_user7 indeed did not have 
> privileges an table teams. 
> When sql_user7 reconnected, they were not able to select from teams.
> The thought is that perhaps there was some stale cache in mxorsrv

This message was sent by Atlassian JIRA

Reply via email to