 |
 |
Archives of the TeradataForum
Message Posted: Mon, 05 Dec 2005 @ 20:34:50 GMT
| Subj: | | Re: EXPLAIN rights |
| |
| From: | | Hough, David |
As much as it would make my SQL writing life easier, I can't support lifting the restrictions on EXPLAIN because of the security implications.
If a user without proper privileges can do an EXPLAIN, there may be constants in the text that should not be revealed (excluding executive SSNs
from payroll reports for example). There is also the issue of mining the EXPLAIN output for other object names if you are probing the system
looking for holes in the accessrights.
/dave hough
| |
