Problem Note 50373: The META LIBNAME engine enforces permissions incorrectly when you add a new row to a table
 |  |  |  |  |
The META LIBNAME engine incorrectly enforces the CREATE permission that is set for the library object when it should use the permission that is set for the table object. The CREATE permission controls whether you can insert a new row into a table. But the permission that is set at the table level should take precedence.
This problem can manifest in two ways:
- You have CREATE permission for the table, but you are denied CREATE permission for the library. When you try to insert a new row in a table, you receive the following error:
ERROR: The Create permission is required to add data to table/view lib.table.DATA.
- You are denied CREATE permission for the table, but you have CREATE permission for the library. In this case, you can add records to the table successfully when you should not be allowed to add them.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | Base SAS | Windows 7 Home Premium 32 bit | 9.3_M2 | 9.3 TS1M2 | ||
| Windows 7 Enterprise x64 | 9.3_M2 | 9.4 | 9.3 TS1M2 | 9.4 TS1M0 | ||
| Windows 7 Enterprise 32 bit | 9.3_M2 | 9.3 TS1M2 | ||||
| Microsoft Windows XP Professional | 9.3_M2 | 9.3 TS1M2 | ||||
| Microsoft Windows Server 2008 for x64 | 9.3_M2 | 9.4 | 9.3 TS1M2 | 9.4 TS1M0 | ||
| Microsoft Windows Server 2008 R2 for x64 | 9.3_M2 | 9.4 | 9.3 TS1M2 | 9.4 TS1M0 | ||
| Microsoft Windows Server 2008 | 9.3_M2 | 9.3 TS1M2 | ||||
| Microsoft Windows Server 2003 for x64 | 9.3_M2 | 9.3 TS1M2 | ||||
| Microsoft Windows Server 2003 Standard Edition | 9.3_M2 | 9.3 TS1M2 | ||||
| Microsoft Windows Server 2003 Enterprise Edition | 9.3_M2 | 9.3 TS1M2 | ||||
| Microsoft Windows Server 2003 Datacenter Edition | 9.3_M2 | 9.3 TS1M2 | ||||
| Microsoft® Windows® for x64 | 9.3_M2 | 9.4 | 9.3 TS1M2 | 9.4 TS1M0 | ||
| Z64 | 9.3_M2 | 9.4 | 9.3 TS1M2 | 9.4 TS1M0 | ||
| z/OS | 9.3_M2 | 9.4 | 9.3 TS1M2 | 9.4 TS1M0 | ||
| Windows 7 Home Premium x64 | 9.3_M2 | 9.3 TS1M2 | ||||
| Windows 7 Professional 32 bit | 9.3_M2 | 9.3 TS1M2 | ||||
| Windows 7 Professional x64 | 9.3_M2 | 9.4 | 9.3 TS1M2 | 9.4 TS1M0 | ||
| Windows 7 Ultimate 32 bit | 9.3_M2 | 9.3 TS1M2 | ||||
| Windows 7 Ultimate x64 | 9.3_M2 | 9.3 TS1M2 | ||||
| Windows Vista | 9.3_M2 | 9.3 TS1M2 | ||||
| Windows Vista for x64 | 9.3_M2 | 9.3 TS1M2 | ||||
| 64-bit Enabled AIX | 9.3_M2 | 9.4 | 9.3 TS1M2 | 9.4 TS1M0 | ||
| 64-bit Enabled HP-UX | 9.3_M2 | 9.4 | 9.3 TS1M2 | 9.4 TS1M0 | ||
| 64-bit Enabled Solaris | 9.3_M2 | 9.4 | 9.3 TS1M2 | 9.4 TS1M0 | ||
| HP-UX IPF | 9.3_M2 | 9.4 | 9.3 TS1M2 | 9.4 TS1M0 | ||
| Linux | 9.3_M2 | 9.4 | 9.3 TS1M2 | 9.4 TS1M0 | ||
| Linux for x64 | 9.3_M2 | 9.4 | 9.3 TS1M2 | 9.4 TS1M0 | ||
| Solaris for x64 | 9.3_M2 | 9.4 | 9.3 TS1M2 | 9.4 TS1M0 | ||
A fix for this issue for Base SAS 9.3_M2 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/I22.html#50373A fix for this issue for Base SAS 9.3_M1 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/F98.html#50373
This security issue either enables you to insert new rows in a table when it should not be allowed or it prevents you from inserting a new row when it should be allowed.
| Type: | Problem Note |
| Priority: | high |
| Topic: | Data Management ==> Data Sources ==> Metadata |
| Date Modified: | 2013-09-27 15:19:11 |
| Date Created: | 2013-07-11 10:08:34 |