Cleanup grants of internal objects & tables#954
Merged
Conversation
Removed grants: - execute on ut_annotations - execute on ut_annotation - execute on ut_annotated_object - execute on ut_annotated_objects - select on ut_annotation_cache - select on ut_annotation_cache_info - execute ut_annotation_cache_manager - execute ut_annotation_parser Reorganized code to accommodate for grants removal. Wrapped `sys.dbms_assert.qualified_sql_name` to support NULL values. Replaced calls to `dbms_crypto.hash` with `ut_utils.get_hash` - default `SHA1`
- `ut_coverage` - `ut_coverage_options` - `ut_coverage_helper`
- ut_output_reporter_base - ut_coverage_reporter_base - ut_console_reporter_base - ut_output_data_row - ut_output_data_rows - ut_output_table_buffer - ut_output_clob_table_buffer
jgebal
changed the title
…LIC and private access to the framework. Resolves: #957
…shed and transaction is committed.
lwasylow
approved these changes
Jun 26, 2019
- grant select, insert, update, delete on ut_compound_data_tmp - grant select, insert, update, delete on ut_compound_data_diff_tmp
- changed `dbmspcc_...` tables to be global temporary - added cleanup of session level global temp tables after run
jgebal
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Removed following grants.
select, insert, update, delete on:
Select on:
Execute on:
Below tables were changed to be session global temp tables.
With this, there is no risk of data leaks between sessions.
Reorganized code to accommodate for grants removal.
Wrapped
sys.dbms_assert.qualified_sql_nameto support NULL values.Replaced calls to
dbms_crypto.hashwithut_utils.get_hash- defaultSHA1Resolves: #922