DB2 - Problembeschreibung
Problem IC71375 | Status: Geschlossen |
SECURITY: User continues to have privilege to execute a non-DDL statement after role membership has been revoked from its group | |
Produkt: | |
DB2 FOR LUW / DB2FORLUW / 970 - DB2 | |
Problembeschreibung: | |
If a user successfully execute a non-DDL statement, and the needed privileges are inherited through role membership (with the role granted to the user's group), then after the role was revoked from the group, the user can still execute the same statement where the statement has already completed the authorization checking. The user will continue to be able to re-execute this same statement until they disconnect from the database or attempt to execute another statement. | |
Problem-Zusammenfassung: | |
**************************************************************** * USERS AFFECTED: * * All Users * **************************************************************** * PROBLEM DESCRIPTION: * * See Error Description. * **************************************************************** * RECOMMENDATION: * * Upgrade to DB2 version 9.7 Fix Pack 4 * **************************************************************** | |
Local-Fix: | |
verfügbare FixPacks: | |
DB2 Version 9.7 Fix Pack 4 for Linux, UNIX, and Windows | |
Lösung | |
Problem was first fixed in DB2 version 9.7 Fix Pack 4 | |
Workaround | |
keiner bekannt / siehe Local-Fix | |
Weitere Daten | |
Datum - Problem gemeldet : Datum - Problem geschlossen : Datum - der letzten Änderung: | 21.09.2010 09.05.2011 09.05.2011 |
Problem behoben ab folgender Versionen (IBM BugInfos) | |
9.7.FP4 | |
Problem behoben lt. FixList in der Version | |
9.7.0.4 |