Kbase P112344: Why can a user, without any SQL-92 RESOURCE or DBA privilege, delete a table in his schema
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
1/9/2006 |
|
Status: Unverified
GOAL:
Why can a user without any SQL-92 RESOURCE or DBA privilege delete a table in his schema
GOAL:
Why can a user execute a stored procedure owned by PUB which drop a table in PUB without any error
FIX:
In SQL-92, a user can delete any tables which are in his schema, even if he does not have any DBA or RESOURCE privileges.
When a stored procedure is executed, it is executed with the OWNER's right. Therefore, if there is a PUB's stored procedure which drops a PUB's table, ANY user, who has the permission to execute it, can delete this table without any error.