New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Grant Update became useless [CORE136] #462
Comments
Modified by: @dyemanovComponent: Engine [ 10000 ] assignee: Dmitry Yemanov [ dimitr ] SF_ID: 555868 => |
Modified by: @pcisarassignee: Dmitry Yemanov [ dimitr ] => |
Modified by: @dyemanovFix Version: 3.0 [ 10048 ] assignee: Dmitry Yemanov [ dimitr ] SF_ID: 555868 => |
Modified by: @pcisarWorkflow: jira [ 10160 ] => Firebird [ 14371 ] |
Modified by: @dyemanovassignee: Dmitry Yemanov [ dimitr ] => Alexander Peshkov [ alexpeshkoff ] Fix Version: 3.0 Beta 2 [ 10586 ] Fix Version: 3.0 Beta 1 [ 10332 ] => |
Commented by: @dyemanov It was treated as a bug for many years. And the SQL specification says nothing about the SELECT permission being required for searched UPDATE/DELETE statements. However, the same issue exists (and documented) at least in MySQL, PGSQL and MSSQL. I really don't know what we should do with this ticket. |
Modified by: @dyemanovFix Version: 3.0 Beta 2 [ 10586 ] => |
Commented by: @dyemanov Found in the SQL spec that any column referenced inside the WHERE clause or inside the source side of the SET clause requires a SELECT privilege for the appropriate column. |
Modified by: @pcisarstatus: Resolved [ 5 ] => Closed [ 6 ] |
Submitted by: ded (ded)
Is duplicated by CORE3224
SFID: 555868#
Submitted By: ded
Grant Update allows to update only whole table and
don't allow to update particular records.
Connect as SYSDBA
CREATE TABLE TEST(
ID INTEGER,
NAME VARCHAR(50));
Insert Into Test (ID) Values (1);
Grant Update on Test To TestUser;
Connect as TestUser;
Update Test Set Name='TEST' Where ID=1;
Builds 796, 794, 681: SQLCODE 551 no permission for
read/select access
to TABLE TEST.
Build 338 - OK.
Update without Where clause works on all builds.
Alexander V.Nevsky
The text was updated successfully, but these errors were encountered: