Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-23459

User must be able to run EXPLAIN on a statement, without privileges to run the statement

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Unresolved
    • Major
    • None
    • 5.0.0
    • query
    • None

    Description

      Scenario: Imagine Don is a query troubleshooter. His job is to optimize N1QL queries by creating appropriate indexes. He is added into the query-index-manage role, and query-system-catalog role. 

      These two roles give Don the ability to look at prepared statements, query runtime monitoring stats, and CRUD on indexes. After creating an index idx1, Don wants to make sure his query is using that index in the plan, and so he runs Explain on the <stmt>. 

      Currently this errors out saying do not have sufficient roles. This means Don needs query-select privileges to explain a select statement. But that's too much permissions because now Don can also select data because of this. 

      Ideally, Don should be able to do explain on the select statement, without having privileges to run the select statement.

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            keshav Keshav Murthy
            ianmccloy Ian McCloy (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty