Skip to main content

Problem with REVOKE USAGE on resource pool

  • August 14, 2017
  • 1 reply
  • 7 views

GilBedolla

We have a problem trying to revoke USAGE on resource pool. Let me try to explain.

We have a user with PSEUDOSUPERUSER role. This user give USAGE permission to another user.

If I try to REVOKE this permission as DBAMIN. I can't and have the next error:
Cannot revoke "USAGE" privilege(s) for resource pool "rp_externos" that you did not grant to "UserNum1"

GRANTS TABLE:
-[ RECORD 1 ]----------+-------------
grantor | UserAdm
privileges_description | USAGE
object_name | rp_externos
object_type | RESOURCEPOOL
grantee | UserNum1

User UserAdm has PSEUDOSUPERUSER role

My question is, why I can´t REVOKE this permission as DBADMIN, what can I do?

Thank you very much for you Help!!!


1 reply

Jim_Knicely
Forum|alt.badge.img+2
  • Participating Frequently
  • August 14, 2017

Hi,

You should be able to...

Example:

[dbadmin@s18384357 ~]$ vsql -U dbadmin
Welcome to vsql, the Vertica Analytic Database interactive terminal.

Type:  \h or \? for help with vsql commands
       \g or terminate with semicolon to execute query
       \q to quit

dbadmin=> select version();
              version
------------------------------------
 Vertica Analytic Database v8.1.1-1
(1 row)

dbadmin=> create user UserAdm;
CREATE USER

dbadmin=> grant PSEUDOSUPERUSER to UserAdm;
GRANT ROLE

dbadmin=> alter user UserAdm default role PSEUDOSUPERUSER;
ALTER USER

dbadmin=> create resource pool rp_externos;
CREATE RESOURCE POOL

dbadmin=> create user UserNum1;
CREATE USER

dbadmin=> \q

[dbadmin@s18384357 ~]$ vsql -U UserAdm
Welcome to vsql, the Vertica Analytic Database interactive terminal.

Type:  \h or \? for help with vsql commands
       \g or terminate with semicolon to execute query
       \q to quit

UserAdm=> grant usage on resource pool rp_externos to UserNum1;
GRANT PRIVILEGE

UserAdm=> select grantor, privileges_description, grantee from grants where object_name = 'rp_externos';
 grantor | privileges_description | grantee
---------+------------------------+----------
 dbadmin | USAGE*                 | dbadmin
 dbadmin | USAGE                  | UserNum1
(2 rows)

UserAdm=> \q

[dbadmin@s18384357 ~]$ vsql -U dbadmin
Welcome to vsql, the Vertica Analytic Database interactive terminal.

Type:  \h or \? for help with vsql commands
       \g or terminate with semicolon to execute query
       \q to quit

dbadmin=> revoke usage on resource pool rp_externos from UserNum1;
REVOKE PRIVILEGE