[teiid-issues] [JBoss JIRA] (TEIID-5798) Mixed PERMISSION GRANTS
[
https://issues.jboss.org/browse/TEIID-5798?page=com.atlassian.jira.plugin...
]
Steven Hawkins commented on TEIID-5798:
---------------------------------------
Is there a difference between above vs previous multiple statements?
Current behavior with multiple statements:
{code}
GRANT SELECT,INSERT ... CONDITION 'cond 1'; -- add the condition to all
operations
{code}
{code}
GRANT DELETE ... CONDITION 'cond 2'; -- throws an exception complaining about the
already existing condition
{code}
{code}
REVOKE X ... -- but nothing specified about the condition, so it remains
{code}
{code}
REVOKE SELECT ... CONDITION -- removes the condition from all operations regardless of
what is specified in the revoke
{code}
Mixed PERMISSION GRANTS
-----------------------
Key: TEIID-5798
URL: https://issues.jboss.org/browse/TEIID-5798
Project: Teiid
Issue Type: Enhancement
Components: Query Engine
Reporter: Christoph John
Assignee: Steven Hawkins
Priority: Major
Fix For: 13.0
Original Estimate: 6 hours
Remaining Estimate: 6 hours
Hello,
I am currently trying to set a set of permissions on a table/view. Hence a condition on
INSERT,UPDATE,DELETE and an unconditioned SELECT.
However, it seems that conditioned and unconditioned GRANT statements do not work
together.
{code}
GRANT INSERT,UPDATE,DELETE ON TABLE "my_nutri_diary.UserDefinedProducts_SRC"
CONDITION 'UserDefinedProducts_SRC.fkProfile in (SELECT Account.idProfile FROM
Account WHERE Account.uuidUser = LEFT(user(), 36) )' TO odata;
GRANT SELECT ON TABLE "my_nutri_diary.UserDefinedProducts_SRC" TO odata;
REVOKE ALTER,EXECUTE ON TABLE "my_nutri_diary.UserDefinedProducts_SRC" FROM
odata;
{code}
--
This message was sent by Atlassian Jira
(v7.13.8#713008)