Kbase P5678: SQL-92 GRANT SELECT on a partial view of a table bleeds to t
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
25/11/2003 |
|
Status: Verified
FACT(s) (Environment):
9.1C
SYMPTOM(s):
Granting the SQL-92 SELECT privilege to a user on a partial view of a table leaks that privilege to the whole underlying table.
The following scenario illustrates this issue:
DBA session:
create view userA.cust (name) as select name from pub.customer;
select * from userA.cust ; -- shows all names as expected..
grant select on pub.customer to userA;
grant select on userA.cust to userB;
commit work;
userB session:
select * from PUB.customer; -- fails as expected.
select * from userA.cust; -- succeeds as expected.
select * from PUB.customer; -- should fail but succeeds under 9.1C
CAUSE:
Bug number 20020813-008
FIX:
This bug has been fixed in 9.1D01 and higher. Upgrade to 9.1D01 or higher.