Granting DELETE or ALL privilege on Dynamic Server 7.3
Posted in 1998
Topics: Server Administration, Security, Permissions & Auditing
I met a strange feature in Dynamic Server, when trying to grant DELETE
privilege to a user. Description is basically as follows:
Case I:
- I create the database in non-ANSI mode.
- I create all the tables in the database
- All users which get the connect permission, can reach the tables as
public (and have insert permission to some tables too)
BUT
if I try to GRANT { DELETE | ALL }ON table TO user
the system informs -> privileges granted !
and in informix.systabauth there is for that user (e.g.)
su-idxr- !
meaning that (I suppose) the user has DELETE rights,
However, when he tries to delete from that table, he gets an message
-> NO DELETE permission !
In every case the user can be granted and revoked all the other rights
(select, insert, update) correctly
Case II:
- I create the database in ANSI mode
- A separate user is created, who will be owner of all the tables.
- I create the tables after taking the personality of that owner
(SET SESSION AUTHORIZATION TO 'owner')
THEN
if I try (using my own personality having DBA rights ) to grant
privileges to a user I get:
GRANT ALL ON owner.table TO user
-- Number of items in select/open list is not the same as the number ofhost variables
-- Privileges granted
but no (new) privileges are seen for that user in informix.systabauth
or e.g.
GRANT UPDATE ON owner.table TO user
-- [Informix][Dynamic Server][shelldb] SQL Error (-302) : No GRANToption or illegal option on multi-table view.
BUT if I take the personality of the owner
everything seems to work! Of course the database owner is not needed in
GRANT statement.
Any similar experienses, any suggestions? Am I doing something wrong (or
otherwise stupidly). I quote 'Informix Guide toSQL : Syntax', SQL
Statements 2-347 (GRANT)
Privilege DBA
Functions ... Grant any table-level privilege to another user
Especially case 1 is interesting, because that cannot be solved (except
by creating ANSI mode databas).
Juho Joensuu
Softsys Oy
Finland