Details
-
Bug
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
Description
In it's current state the following two commands result in ALL on SERVER server1:
GRANT SELECT ON SERVER server1 TO ROLE read_role;
GRANT INSERT ON SERVER server1 TO ROLE insert_role;
This can cause users to unknowingly grant full privileges to user groups. Fixing this behavior will also allow us to mimic the previous behavior exhibited with Policy Files:
read_role = server=server1->db=>table=>action=select
insert_role = server=server1->db=>table=>action=insert
Granting SELECT on SERVER would be far more pleasant than granting SELECT on each individual DATABASE