why the PC, PD, PE rights aren’t being generated on my machine TD 14.10.7.10

Database
Highlighted
Teradata Employee

Re: why the PC, PD, PE rights aren’t being generated on my machine TD 14.10.7.10

You're right, Dave. I read the EXPLAIN wrong; looking closer, it's generating somewhat generic logic to remove any rows that should be overridden by the new GRANT.

 

Step 5 looks for superseded Column-Level access rights (which actually isn't relevant for rights granted on procedures), and for the "same" rights having been granted before but "WITH GRANT OPTION" (which actually isn't relevant for rights granted to roles).

Step 6 looks for the "same" rights having been granted previously "TO ALL" (which isn't relevant for granting to roles, either).

 

Does this query return 4 rows as expected?

 

select DISTINCT AccessRight from dbc.AccessRights
where  UserID= '00000000'XB and DatabaseID= '00000000'XB
and TVMId = '000000000000'XB
AND AccessRight in ('PC','PD','PE','AP')