Broken Ownership Chains

  • Suppose there is a table created by John. Peter doesn't have permission to access a column in this table. Sue creates a view based on this table using this column that Peter is denied access to.

    From what i understand if Sue tries grant Peter access to this view, he will be denied. Is he denied access to the whole view or just to that  column?

    Suppose now that Sue doesn't explicitly provide that column in her view. Supposed the column is derived partially from John's column and partially from another column in another table whereby the contents of John's column is not deducible. Will he be able to access the contents of this derived column?

    Thanks!

  • Peter could still use the view assuming his SELECT statment specified only those columns he has permission to access.

    /*****************

    If most people are not willing to see the difficulty, this is mainly because, consciously or unconsciously, they assume that it will be they who will settle these questions for the others, and because they are convinced of their own capacity to do this. -Friedrich August von Hayek

    *****************/

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply