#13973: Sybase ASE -> Permissions -> Execution of statements on temporary table check

ivangron reported 2015-12-11T20:23:25Z · last modified 2017-01-26T16:12:27Z

Sybase ASE -> Permissions -> Execution of statements on temporary table check

Dev	ivangron
QA	NielsGron

Priority	Low
Complexity	Unknown

Component	Q Analyzer - Permissions
Version	15.0

When permissions are restricted through the Server Connection Permissions settings, the user is still allowed to work with temporary databases. Originally we only supported the system temp database. Later we added support for the session bound temp database. Now we want support for all temporary databases. We will do this by extracting all user defined temporary databases from the sysdatabases table where status3 & 256 == 256 and making the check against the full temp database list.

2 attachments

Scenario-02.png

2016-03-03T10:18:05Z

645 KB
Scenario-01.png

2016-03-03T10:18:05Z

356 KB

All Comments (2) Change History

ivangron 2015-12-11T20:42:56Z

Needed code changes made and checked in. Temp database list is now extracted and checked against when executing statements that fall into this category for sybase ase 12.5 and above.

nileshhmali 2016-03-03T10:38:09Z · (edited)

Open ADS-15.0-16-3

Scenario-01:

Right click on Registered Sybase ASE database and select Edit server properties option

Edit server properties window opens

Switch to permission tab

Unchecked All permissions and click on save button.

Right click on Server and select Query analyzer option.

QA window opens

Execute below script.

//Create database device:

disk init name = 'tempdb2dev_2'

, physname = 'C:\SAP\data\tempdb2dev_2.dat'

, vdevno = 14

, size = 11776

, dsync = false

, vstart = 13

GO

//Create temporary database

create temporary database tempdb2 on tempdb2dev_2 = '122424K'

Go

Observation:

1)Database device created successfully.

2)Displayed message "Local Permission: CREATE not allowed. [Change in Server Registration->Permissions] " for Temporary database.

Scenario-02:

Right click on Registered Sybase ASE database and select Edit server properties option

Edit server properties window opens

Switch to permission tab

All permissions are checked by default.

click on save button

Right click on Server and select Query analyzer option.

QA window opens

Execute below script.

//Create database device:

disk init name = 'tempdb2dev_2'

, physname = 'C:\SAP\data\tempdb2dev_2.dat'

, vdevno = 14

, size = 11776

, dsync = false

, vstart = 13

GO

//Create temporary database

create temporary database tempdb2 on tempdb2dev_2 = '122424K'

Go

You can see that,Database device and temp database created successfully.

Again,Right click on Sybase ASE server and select Edit server properties option

Edit server properties window opens

Switch to permission tab

Unchecked All permissions and click on save button.

Right click on created Temp database(tempdb2) and select Query analyzer option.

QA window open with Temp database

Execute below script.

create table #authors

(au_id char (11))

Observation:

Create temp table script executed successfully.

Note:Same behavior we have observed in ADS-15.0-10-5.

What needs to be checked in ADS-15.0-16-3 for this issue ?

Screenshot:

Scenario-01.png
Scenario-02.png

Please refer below link:

http://infocenter.sybase.com/help/index.jsp?topic=/com.sybase.infocenter.dc36272.1600/doc/html/san1393050910896.html

Open ADS-15.0-16-3

Scenario-01:

Right click on Registered Sybase ASE database and select Edit server properties option

Edit server properties window opens

Switch to permission tab

Unchecked All permissions and click on save button.

Right click on Server and select Query analyzer option.

QA window opens

Execute below script.

//Create database device:

disk init name = 'tempdb2dev_2'

, physname = 'C:\SAP\data\tempdb2dev_2.dat'

, vdevno = 14

, size = 11776

, dsync = false

, vstart = 13

GO

//Create temporary database

create temporary database tempdb2 on tempdb2dev_2 = '122424K'

Go

Observation:

1)Database device created successfully.

2)Displayed message "Local Permission: CREATE not allowed. [Change in Server Registration->Permissions] " for Temporary database.

Scenario-02:

Right click on Registered Sybase ASE database and select Edit server properties option

Edit server properties window opens

Switch to permission tab

All permissions are checked by default.

click on save button

Right click on Server and select Query analyzer option.

QA window opens

Execute below script.

//Create database device:

disk init name = 'tempdb2dev_2'

, physname = 'C:\SAP\data\tempdb2dev_2.dat'

, vdevno = 14

, size = 11776

, dsync = false

, vstart = 13

GO

//Create temporary database

create temporary database tempdb2 on tempdb2dev_2 = '122424K'

Go

You can see that,Database device and temp database created successfully.

Again,Right click on Sybase ASE server and select Edit server properties option

Edit server properties window opens

Switch to permission tab

Unchecked All permissions and click on save button.

Right click on created Temp database(tempdb2) and select Query analyzer option.

QA window open with Temp database

Execute below script.

create table #authors

(au_id char (11))

Observation:

Create temp table script executed successfully.

Note:Same behavior we have observed in ADS-15.0-10-5.

What needs to be checked in ADS-15.0-16-3 for this issue ?

Screenshot:

Scenario-01.png
Scenario-02.png

Please refer below link:

http://infocenter.sybase.com/help/index.jsp?topic=/com.sybase.infocenter.dc36272.1600/doc/html/san1393050910896.html

Search Tips

Aqua Data Studio / nhilam

Sybase ASE -> Permissions -> Execution of statements on temporary table check

2 attachments

Issue #13973

Completion

Search Tips

Aqua Data Studio / nhilam

Title

Sybase ASE -> Permissions -> Execution of statements on temporary table check

2 attachments

Issue #13973

Completion