AWS AmazonRDS documentation change
Summary
Updated permission documentation by removing caveats about CASCADE and GRANT/REVOKE limitations in schema permissions
Security assessment
The changes clarify documentation around schema permissions but don't introduce new security features or address specific vulnerabilities. Removal of caveats might indicate resolved limitations, but no explicit security context is provided.
Diff
diff --git a/AmazonRDS/latest/AuroraUserGuide/babelfish-permissions.md b/AmazonRDS/latest/AuroraUserGuide/babelfish-permissions.md index 7cb39113f..afec363e8 100644 --- a//AmazonRDS/latest/AuroraUserGuide/babelfish-permissions.md +++ b//AmazonRDS/latest/AuroraUserGuide/babelfish-permissions.md @@ -19,2 +19,2 @@ Allow login to do SELECTs/DMLs/DDLs in a database | Make login the owner of th -Allow database user to do SELECTs/DMLs on a schema | Grant permission to database user on schema | GRANT SELECT/EXECUTE/INSERT/UPDATE/DELETE ON SCHEMA::`schema` TO `user` | CASCADE isn't supported with Grant/Revoke on Schema. GRANT/REVOKE OPTION FOR .. on SCHEMA isn't supported in Babelfish. GRANT/REVOKE inside CREATE SCHEMA isn't supported in Babelfish. | Version 3.6 and higher, 4.2 and higher -Allow database user to do SELECTs/DMLs on a schema | Make database user owner of schema at schema creation time | CREATE SCHEMA `schema` AUTHORIZATION `user`. | Changing schema ownership after creation isn't currently supported. | Version 1.2 and higher +Allow database user to do SELECTs/DMLs on a schema | Grant permission to database user on schema | GRANT SELECT/EXECUTE/INSERT/UPDATE/DELETE ON SCHEMA::`schema` TO `user` | None | Version 3.6 and higher, 4.2 and higher +Allow database user to do SELECTs/DMLs on a schema | Make database user owner of schema at schema creation time | CREATE SCHEMA `schema` AUTHORIZATION `user` | Changing schema ownership after creation isn't currently supported. | Version 1.2 and higher @@ -59 +59 @@ Getting information from the Babelfish system catalog -Differences between Babelfish for Aurora PostgreSQL and SQL Server +Object ownership differences