System Privileges for IMPORT/EXPORT

Description

Prior to EXASOL 6.1, the invocation of IMPORT and EXPORT statements ist not restricted by any privilege except by those granting access to the underlying objects (Connections; SELECT/INSERT on tables).

Specific privileges will be added that will be necessary to execute IMPORT or EXPORT statements even when no other local object is being used (eg. import to result set).

The new privileges are called IMPORT (needed for all IMPORT statements) and EXPORT (needed for all EXPORT statements). They affect all IMPORT and EXPORT statements, even those with additional object checks (e.g. connection) or LOCAL files or IMPORT FROM SCRIPT.

Downward Compatibility

For existing databases the privileges IMPORT and EXPORT are granted to PUBLIC once at the first start with EXASOL 6.1 so everything just works exactly like before for those systems. The privilege can be revoked from PUBLIC and granted to relevant users/roles for more fine-grained control.

Changed Behavior

In new databases created with EXASOL 6.1 and later by default only DBAs can start IMPORT and EXPORT jobs. If restrictions on IMPORT and EXPORT are not desired, simply grant IMPORT and EXPORT to PUBLIC to get the same behavior as in previous versions (i.e. access to IMPORT and EXPORT is restricted only by permissions on affected objects).

grant IMPORT, EXPORT to PUBLIC;

Changed behavior

grant IMPORT, EXPORT to PUBLIC;