Details
-
Improvement
-
Resolution: Unresolved
-
Major
-
None
-
5.0.0
-
None
Description
Scenario: Imagine Don is a query troubleshooter. His job is to optimize N1QL queries by creating appropriate indexes. He is added into the query-index-manage role, and query-system-catalog role.
These two roles give Don the ability to look at prepared statements, query runtime monitoring stats, and CRUD on indexes. After creating an index idx1, Don wants to make sure his query is using that index in the plan, and so he runs Explain on the <stmt>.
Currently this errors out saying do not have sufficient roles. This means Don needs query-select privileges to explain a select statement. But that's too much permissions because now Don can also select data because of this.
Ideally, Don should be able to do explain on the select statement, without having privileges to run the select statement.