Skip to main content

Show all rows in query_events to non-superuser?

  • February 12, 2016
  • 3 replies
  • 21 views

esword

I am trying to use a non-superuser to gather information from the query_events system view.  Unfortunately, the user can only see events for itself.  I have seen suggestions that, for some system tables, one can create a view over the table using a super user, and then the non-superuser will be able to see all the rows in the new view that the superuser could see in the original data.  This doesn't appear to work for the query_events view - the non-superuser still sees only events that apply to it in the newly created view.  I have also tried granting direct permission to the v_internal tables that comprise the query_events view (dc_optimizer_events and dc_execution_engine_events) to the non-superuser, but I get an error returned from the grant statement (ROLLBACK 5266:  Unsupported access to virtual table).

 

Anyone have any other ideas for working around this problem?

3 replies

SruthiA
Forum|alt.badge.img+1
  • Participating Frequently
  • February 12, 2016

HI,

 

      What is the version of vertica you are using. 

 

can you share me the output of select version()

 

Sruthi


esword
  • Author
  • New Participant
  • February 15, 2016

7.1.x.  Sorry - not in a place where I can issue query directly right now.  A coworker just forwarded me this note from the 7.2 release notes:

 

VER-34978

Security

The requirement for a specific user to view records in a query results table without granting the user the pseudosuperuser role has been resolved with the new System Monitor Role.

 

So maybe we need to wait until we upgrade?


SruthiA
Forum|alt.badge.img+1
  • Participating Frequently
  • February 15, 2016

Hi,

 

 

        Yes. You need to upgrade. It is fixed in Excavator (7.2.x)

 

 

Sruthi