Only expose supported component operationsThere is a set of component operations and many are about features that we donot support such as CREATE_TRIGGER. This checkin no longer returns theseprivileges through get privileges on component sql_operations showddl component sql_operationsThe is_system metadata column in the component_operations table now supportsthree values: Y - it is a system operation N - it is a user operation U - it is an unsupported (unused) operation (new)An "initialize authorization" or fresh installation is required to make thesechanges available. Installating this code version calls initialize authorization Running regrinit.sql also calls initialize authorizationSome performance enhancements were made to make "initialize authorization" runfaster.
Miscellaneous authorization changes:- Unregister user does not remove component privileges- Reuse unused entries from the authID ranges- Add "changeuser" command to update user credentials in place instead of requiring a new sqlci session to be started. Changed privs1/TEST132 to use this change and cut about 5 minutes off the test time.
Various JIRA fixes related to securityTRAFODION-2177: Revoke combined column privileges from role failedTRAFODION-2188: Insufficient privileges on sample tableTRAFODION-2197: column privilege -- mxosrvr crashed2177: Privilege list for object generated twice causing restrict check to fail2188: Updated to allow user without create privilege to create sample table2197: List index was incorrectly specifiedIn addition, relaxed rules on who can run update statistics to include anyonethat has SELECT privileges on the target table.
TRAFODION-1832: Add privilege regression test 132Activated privs1 regression test 132. This tests privileges on variousutilities.Fixed a problem in privilege manager cleanup code where histogram tableswere not be dropped.
TRAFODION-1087 & TRAFODION-1671 fixesTRAFODION-1087: Security Regressions take too longRemoved catman1 test suite and replaced with privs1 & privs2.Moved catman1/TEST131 to core, TEST131 tests query invalidation.Added back skipped privilege tests because catman1 took to long to run.Also, cleaned up runregr scripts a bit - still need some more work.TRAFODION-1671: Hive regression TEST009 failsChanged the cleanup procedure to remove damaged filesAdded an order by to select statement to make it more robust