Skip to main content
Question

Pseudosuperuser privileges not enough to set schema authorisation

  • December 15, 2023
  • 1 reply
  • 5 views

Sergey_Cherepan_1
Forum|alt.badge.img+2

Hi,

On v 12.0.4-18, I am creating schema from account with pseudosuperuser:

create schema myschema authorization myschema_owner default include privileges;

myschema_owner account already exist.

Getting error Unsufficient privileges.

I has to break this into two statements:

create schema myschema default include privileges;
alter schema myschema owner to myschema_owner;

That works fine under account with pseudosuperuser.

Apparently, combined statement runs properly only from dbadmin:

create schema myschema authorization myschema_owner default include privileges;

I am not sure if this is intended behaviour - why pseudosuperuser cannot set schema authorization?

Please ask security team.

Thank you
Sergey

1 reply

SruthiA
Forum|alt.badge.img+1
  • Participating Frequently
  • December 15, 2023

it is expected behavior. authorization can be set only by super users when running create schema.

https://docs.vertica.com/23.4.x/en/sql-reference/statements/create-statements/create-schema/