[teiid-issues] [JBoss JIRA] (TEIID-5648) Hide metadata over odata

[Steven Hawkins (Jira)]

    [ https://issues.jboss.org/browse/TEIID-5648?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13712418#comment-13712418 ] 

Steven Hawkins commented on TEIID-5648:
---------------------------------------

With jdbc/pg we are roughly trying to match https://docs.microsoft.com/en-us/sql/relational-databases/security/metadata-visibility-configuration?view=sql-server-2017 - however we do not check for any permission, just specific read or execute.  I'll update that as well.

> Hide metadata over odata
> ------------------------
>
>                 Key: TEIID-5648
>                 URL: https://issues.jboss.org/browse/TEIID-5648
>             Project: Teiid
>          Issue Type: Quality Risk
>          Components: OData
>            Reporter: Steven Hawkins
>            Assignee: Steven Hawkins
>            Priority: Major
>             Fix For: 12.2
>
>
> All schemas, not marked as hidden, will be visible over odata.  This includes all schema objects.  Via the other access mechanisms permission is now required for visibility - TEIID-5516 and TEIID-2476.
> Alternatively there could also be an option to still expose the metadata by default for non-odata access even if the user is not permissioned.



--
This message was sent by Atlassian Jira
(v7.12.1#712002)