Home Page for the TeradataForum
 

Archives of the TeradataForum

Message Posted: Mon, 05 Dec 2005 @ 20:34:50 GMT


     
  <Prev Next>   <<First <Prev Next> Last>>  


Subj:   Re: EXPLAIN rights
 
From:   Hough, David

As much as it would make my SQL writing life easier, I can't support lifting the restrictions on EXPLAIN because of the security implications. If a user without proper privileges can do an EXPLAIN, there may be constants in the text that should not be revealed (excluding executive SSNs from payroll reports for example). There is also the issue of mining the EXPLAIN output for other object names if you are probing the system looking for holes in the accessrights.


/dave hough



     
  <Prev Next>   <<First <Prev Next> Last>>  
 
 
 
 
 
 
 
 
  
  Top Home Privacy Feedback  
 
 
Copyright for the TeradataForum (TDATA-L), Manta BlueSky    
Copyright 2016 - All Rights Reserved    
Last Modified: 15 Jun 2023