amazon-aurora / babelfish_extensions / 10470744767

74%

main: 77%

Build Type

push

github

Committed by web-flow

Commit Message

Restrict DROP USER/ROLE from non-dbo user (#2859)

Earlier, any user was able to drop user/role, irrespective of whether that user has required privileges or not.

With this commit, Only dbo and members of db_owner will have the permission to drop user/role.  Additionally, this
restricts dropping internal database principal such as dbo and db_owner, it restricts dropping non-Babelfish roles from TDS endpoint.

Task: BABEL-5173

Authored-by: ANJU BHARTI <abanju@amazon.com>
Co-authored-by: Harsh Lunagariya <lunharsh@amazon.com>
Signed-off-by: Harsh Lunagariya <lunharsh@amazon.com>

Coverage Stats

15 of 15 new or added lines in 1 file covered. (100.0%)

389 existing lines in 10 files now uncovered.

44447 of 60012 relevant lines covered (74.06%)

125981.12 hits per line