db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Daniel John Debrunner <...@apache.org>
Subject Re: Question on Grant revoke functional spec
Date Thu, 27 Jul 2006 13:31:35 GMT
Satheesh Bandaram wrote:

> Hi Mamta,
> 
> While it is OK for 'mamta2' to create the view, in your example,
> attempts to GRANT access to other users on view 'v1' should raise an
> error. This is because user 'mamta2' has been granted SELECT privilege
> and this user is attempting to allow other users to SELECT from table
> created by 'mamta1'. User 'mamta1' only granted SELECT to 'mamta2' and
> without WITH GRANT OPTION, 'mamta2' can't allow other users access to
> the view. If the grant statement to allow SELECT privilege where to be
> issued WITH GRANT OPTION, then it would have been possible for 'mamta2'
> to GRANT access to view 'v1' here.
> 
> Derby currently doesn't support WITH GRANT OPTION. So, while it is OK
> for 'mamta2' here to create the view, an error *should be* raised if
> this user attempts to grant access to columns derived from user 'mamta1'
> table.

What's the reference (section number) for this from the SQL 2003 spec,
especially for the definition of "columns derived"?

Thanks,
Dan.



Mime
View raw message