Can some one explain me this Non privileged users are able to create projections when hints used?

sahil_kumar

Non privileged users are able to create projections with "CREATE PROJECTION" statements when called with "basename" and "createtype" hints.(Create or Owner permission on schema not their only usage on schema
and select on anchor table present)
eg.

The following statement fails with denied permissions statement
CREATE PROJECTION schema.table_NONsuperNoBasename
(......);

The following statement succeeds
CREATE PROJECTION schema.table_NONsuperBasename /+basename(test1),createtype(L)/
(......);
This also works for create type P and create type D. An unprivileged user should not be able to create any of these correct?. Am I missing something?

CREATE PROJECTION provisioning2.test1_NONsuperBasename_createtypeP /+createtype(P)/
(
col1
)
AS
SELECT test1.col1
FROM provisioning2.test1
ORDER BY test1.col1
SEGMENTED BY hash(test1.col1) ALL NODES OFFSET 0;

CREATE PROJECTION provisioning2.test1_NONsuperBasename_createtypeD /+createtype(D)/
(
col1
)
AS
SELECT test1.col1
FROM provisioning2.test1
ORDER BY test1.col1
SEGMENTED BY hash(test1.col1) ALL NODES OFFSET 0;

Jim_Knicely

Fyi, I have a client hitting this issue. I opened Jira VER-72952.

sahil_kumar

Thanks Jim!