Uploaded image for project: 'Teiid'
  1. Teiid
  2. TEIID-1595

User without required role is able to explicitly create a temporary table

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 7.4.1, 7.5
    • 7.4
    • Query Engine
    • None
    • Hide

      In teiid-jboss-beans.xml, set useDataRoles to true and allowCreateTemporaryTablesByDefault to false.
      Create a data role which has allow-create-temporary-tables set to false (unchecked) and ensure a user has this role.

      Execute this SQL: CREATE LOCAL TEMPORARY TABLE RolesTable (ID STRING, NAME STRING)

      It should fail since the user is not entitled to perform this action.

      Show
      In teiid-jboss-beans.xml, set useDataRoles to true and allowCreateTemporaryTablesByDefault to false. Create a data role which has allow-create-temporary-tables set to false (unchecked) and ensure a user has this role. Execute this SQL: CREATE LOCAL TEMPORARY TABLE RolesTable (ID STRING, NAME STRING) It should fail since the user is not entitled to perform this action.

      In testing roles, I created a VDB with roles, some of which permit the creation of temporary tables. It turns out Teiid allows creation of temporary tables whether or not you're allowed to.

            rhn-engineering-shawkins Steven Hawkins
            pnittel_jira Paul Nittel (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved: