Skip to main content
Question

Can some one explain me this Non privileged users are able to create projections when hints used?

  • June 8, 2020
  • 2 replies
  • 12 views

sahil_kumar
Forum|alt.badge.img

Non privileged users are able to create projections with "CREATE PROJECTION" statements when called with "basename" and "createtype" hints.(Create or Owner permission on schema not their only usage on schema
and select on anchor table present)
eg.

The following statement fails with denied permissions statement
CREATE PROJECTION schema.table_NONsuperNoBasename
(......);

The following statement succeeds
CREATE PROJECTION schema.table_NONsuperBasename /+basename(test1),createtype(L)/
(......);
This also works for create type P and create type D. An unprivileged user should not be able to create any of these correct?. Am I missing something?

CREATE PROJECTION provisioning2.test1_NONsuperBasename_createtypeP /+createtype(P)/
(
col1
)
AS
SELECT test1.col1
FROM provisioning2.test1
ORDER BY test1.col1
SEGMENTED BY hash(test1.col1) ALL NODES OFFSET 0;

CREATE PROJECTION provisioning2.test1_NONsuperBasename_createtypeD /+createtype(D)/
(
col1
)
AS
SELECT test1.col1
FROM provisioning2.test1
ORDER BY test1.col1
SEGMENTED BY hash(test1.col1) ALL NODES OFFSET 0;

2 replies

Jim_Knicely
Forum|alt.badge.img+2
  • Participating Frequently
  • June 8, 2020

Fyi, I have a client hitting this issue. I opened Jira VER-72952.


sahil_kumar
Forum|alt.badge.img
  • Author
  • Participating Frequently
  • June 8, 2020

Thanks Jim!