[Firebird-devel] [ firebird-Bugs-555868 ] Grant Update became useless

[<no...@so...>]

Bugs item #555868, was opened at 2002-05-14 15:38
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=109028&aid=555868&group_id=9028

Category: Security Issues
Group: Initial Bug
Status: Open
Resolution: None
Priority: 5
Submitted By: Alexander V. Nevsky (ded)
Assigned to: Nobody/Anonymous (nobody)
Summary: Grant Update became useless

Initial Comment:
Grant Update allows to update only whole table and 
don't allow to update particular records.

Connect as SYSDBA

CREATE TABLE TEST(
  ID INTEGER,
  NAME VARCHAR(50));

Insert Into Test (ID) Values (1);

Grant Update on Test To TestUser;

Connect as TestUser;

Update Test Set Name='TEST' Where ID=1;

Builds 796, 794, 681: SQLCODE 551 no permission for 
read/select access
to TABLE TEST.

Build 338 - OK.

Update without Where clause works on all builds.

Alexander V.Nevsky

----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=109028&aid=555868&group_id=9028