[
https://issues.apache.org/jira/browse/TRAFODION-1594?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Roberta Marton closed TRAFODION-1594.
-------------------------------------
Resolution: Cannot Reproduce
> Select from table returns data even though user has no privs
> ------------------------------------------------------------
>
> Key: TRAFODION-1594
> URL: https://issues.apache.org/jira/browse/TRAFODION-1594
> Project: Apache Trafodion
> Issue Type: Bug
> Components: sql-security
> Reporter: Roberta Marton
> Assignee: Roberta Marton
>
> A user was able to select data from a table where the user had no privs.
> case:
> DB__ROOT created a schema on behalf of sql_user1.
> The following tables were created in this schema - games, teams, and players.
> sql_user1 granted select privilege to sql_user7 on table games.
> sql_user7 was able to select from both games and teams. sql_user7 was not
> able to select from players.
> Looking at the metadata indicated that sql_user7 indeed did not have
> privileges an table teams.
> When sql_user7 reconnected, they were not able to select from teams.
> The thought is that perhaps there was some stale cache in mxorsrv
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
