Security Attribute `RoleExplicit` description
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
an hour ago
Hello,
I came across something misleading in the OOB Security Attribute `RoleExplicit`. The description of it is
> User has the specified role explicitly, that is, it is present in the sys_user_has_role table.
This seems to be completely wrong. The attribute seems to consider the sys_user_has_role.inherited instead.
In this case my user gets the role through a group membership -> "it is present in the sys_user_has_role table.". But the access is denied because the role is inherited=true
Grant the role directly, and the user gains access as you would expect:
This security attribute was discussed also in this community post, but it doesn't address the description. Hope someone finds this helpful or doesn't trust the description of the security attribute thanks to this!
- Labels:
-
Platform and Cloud Security