[jira] [Created] (TRAFODION-2436) User with SELECT privilege on all columns can do SELECT * but cannot utility operations such as UPDATE STATISTICS

[Roberta Marton (JIRA)]

Roberta Marton created TRAFODION-2436:
-----------------------------------------

             Summary:  User with SELECT privilege on all columns can do SELECT 
* but cannot utility operations such as UPDATE STATISTICS
                 Key: TRAFODION-2436
                 URL: https://issues.apache.org/jira/browse/TRAFODION-2436
             Project: Apache Trafodion
          Issue Type: Improvement
          Components: sql-cmu, sql-security
            Reporter: Roberta Marton
            Assignee: Roberta Marton


Update Statistics is allowed if the user has select privilege at the object 
level.  However, it does not check column level privileges.  Since we allow DML 
to work based on column level privileges, we should also do so for utilities 
including Update Statistics, Load/Unload, and Purgedata.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)