Revoke problem
Posted in 1993
Topics: Connectivity: ESQL/C, 4GL & Embedded SQL, Server Administration, Security, Permissions & Auditing
Recently I had my first experience with the grant and revoke statements.
We have a 4GL program here that we use to grant and later revoke privileges
from our tables. Great. After a half an hour or more of flailing, I figured
out that you have to include the AS clause in a grant statement if you want
to do it as someone with DBA but not the owner of the table. Again, great.
We got error messages when we tried it without the AS and fixed it.
Unfortunately, Revoke doesn't seem to work at all if you are not the owner
of the table. While it says in the manuals that you can only revoke
permissions on a table that you have granted, it would seem that someone
with DBA privileges would be able to get around that limitation. If I
say
revoke all on HisTable from JoeUser
and run the SQL script, isql says, "Permission revoked". Unfortunately,the Table Info Privileges screen says otherwise, as well as the systabauth
table itself. So I tried
revoke all on HisTable from JoeUser as TableOwnerjust like with grant. Same message, same result. Unless you actually
ARE the owner of the table, it says it did it but doesn't. Is this an
error in the engine, poor error reporting, or me not doing the right thing.
Yes, I suppose we could update the systabauth table manually, but that is
not a very good solution. Any answers?
--
Karl Brummel -- brumski+@osu.edu
"Because a mind is a terrible thing."
"Speed isn't everything...it's the ONLY thing."