Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

User can execute revoke for priviliges which they never had (without error) #50962

Open
den-crane opened this issue Jun 13, 2023 · 0 comments
Open
Labels
comp-rbac Access control related usability

Comments

@den-crane
Copy link
Contributor

den-crane commented Jun 13, 2023

create user u identified by '123';
create role r1;

clickhouse-client -u u --password=123

revoke select on x from r1;
Ok.                                                           -<<<<<<--- I would expect an error here
0 rows in set. Elapsed: 0.000 sec.

there is no object x.

@den-crane den-crane changed the title User can execute revoke for priviliges which it never had without error User can execute revoke for priviliges which they never had (without error) Jun 13, 2023
@den-crane den-crane added the comp-rbac Access control related label Jun 13, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
comp-rbac Access control related usability
Projects
None yet
Development

No branches or pull requests

1 participant