Problem Note 47017: The META LIBNAME engine permits a user to add rows to a table even when the user has been denied CREATE permission on the table
As documented in the SAS® 9.2 Intelligence Platform: Security Administration Guide, the Create permission should be enforced when adding rows to a table that is accessed through the metadata LIBNAME engine. However, the engine is not enforcing the Create permission and users are able to add rows when they are not granted the Create permission.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| SAS System | Base SAS | z/OS | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Microsoft® Windows® for 64-Bit Itanium-based Systems | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Microsoft Windows Server 2003 Datacenter 64-bit Edition | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Microsoft Windows Server 2003 Enterprise 64-bit Edition | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Microsoft Windows XP 64-bit Edition | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Microsoft® Windows® for x64 | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Microsoft Windows Server 2003 Datacenter Edition | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Microsoft Windows Server 2003 Enterprise Edition | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Microsoft Windows Server 2003 Standard Edition | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Microsoft Windows Server 2003 for x64 | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Microsoft Windows Server 2008 | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Microsoft Windows Server 2008 for x64 | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Microsoft Windows XP Professional | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Windows 7 Enterprise 32 bit | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Windows 7 Enterprise x64 | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Windows 7 Home Premium 32 bit | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Windows 7 Home Premium x64 | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Windows 7 Professional 32 bit | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Windows 7 Professional x64 | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Windows 7 Ultimate 32 bit | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Windows 7 Ultimate x64 | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Windows Vista | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Windows Vista for x64 | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| 64-bit Enabled AIX | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| 64-bit Enabled HP-UX | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| 64-bit Enabled Solaris | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| HP-UX IPF | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Linux | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Linux for x64 | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| OpenVMS on HP Integrity | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
| Solaris for x64 | 9.21_M3 | 9.3 | 9.2 TS2M3 | 9.3 TS1M0 |
*
For software releases that are not yet generally available, the Fixed
Release is the software release in which the problem is planned to be
fixed.
You should not be allowed to add new rows to a table in a library assigned with the META LIBNAME engine unless you have the CREATE permission on the table. However, the engine does not enforce this permission.
| Type: | Problem Note |
| Priority: | high |
| Topic: | Data Management ==> Data Sources ==> Metadata
System Administration ==> Security ==> Permissions
|
| Date Modified: | 2012-07-26 13:01:15 |
| Date Created: | 2012-07-17 13:28:36 |
