In this release, we introduce some security enhancements. We’ve added the ability to grant and revoke privileges on system tables, using the same syntax as you would for granting and revoking on tables. However, there are some limitations about the types of privileges you can use with system tables:
• GRANT (Tables)
• REVOKE (Tables)
The dbadmin can now grant or revoke privileges on specific system tables and virtual views, as they would with regular tables.
This ability expands the functionality of the global catalog to include default grants on system tables. Grants on virtual tables and virtual views are now visible. However, grants on system schemas are not allowed.
We’ve also added two new functions that allow users to open and restrict access to system tables for a given session:
• RELEASE_SYSTEM_TABLE_ACCESS() : opens access to non-superuser-only tables that are not accessible during lockdown.
• RESTRICT_SYSTEM_TABLE_ACCESS(): restricts access to non-superuser-only tables that are not accessible during lockdown.
These new metafunctions replace the RestrictSystemTables configuration parameter.
For more information, see Security and Authentication in the Vertica documentation.
About the Author
Soniya Shah
Information Developer
Currently, a first year law student with a background in science and technology. Experienced technical writer, with specializations in software documentation, big data, blog development, and website development. I build user-centered content to communicate complex and technical information more easily.
I used to work for Vertica full time for about 3 years. I still work at Vertica part time while going to law school.
Update: Soniya is now doing her law internship, and no longer working at Vertica. Good luck, Soniya!
