Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[EPIC] Verify DB System tables and tables where user do not have privileges are not accessible to the user at Airbyte UI #8045

Closed
Tracked by #11287
alexandertsukanov opened this issue Nov 17, 2021 · 0 comments
Assignees
Labels
area/connectors Connector related issues area/reliability connectors/source/amazon-ads connectors/source/amazon-seller-partner connectors/source/amazon-sqs connectors/source/amplitude connectors/source/apify-dataset connectors/source/appstore-singer connectors/source/asana connectors/source/aws-cloudtrail connectors/source/bigcommerce connectors/source/bigquery connectors/source/bing-ads connectors/source/braintree connectors/source/cart connectors/source/clickhouse connectors/source/close-com connectors/source/cockroachdb connectors/source/db2 connectors/source/dixa connectors/source/drift connectors/source/facebook-marketing connectors/source/facebook-pages connectors/source/google-ads connectors/source/google-analytics-v4 connectors/source/google-directory connectors/source/google-search-console connectors/source/google-sheets connectors/source/google-workspace-admin-reports connectors/source/greenhouse connectors/source/hubspot connectors/source/instagram connectors/source/intercom connectors/source/iterable connectors/source/jira connectors/source/klaviyo connectors/source/lever-hiring connectors/source/linkedin-ads connectors/source/linnworks connectors/source/looker connectors/source/mailchimp connectors/source/marketo connectors/source/microsoft-teams connectors/source/mixpanel connectors/source/mongodb connectors/source/mssql connectors/source/mysql connectors/source/notion connectors/source/okta connectors/source/onesignal connectors/source/oracle connectors/source/paypal-transaction connectors/source/paystack connectors/source/pinterest connectors/source/pipedrive connectors/source/plaid connectors/source/pokeapi connectors/source/postgres connectors/source/posthog connectors/source/prestashop connectors/source/quickbooks-singer connectors/source/recharge connectors/source/recurly connectors/source/redshift connectors/source/s3 connectors/source/salesforce connectors/source/salesloft connectors/source/sendgrid connectors/source/sentry connectors/source/shopify connectors/source/shortio connectors/source/slack connectors/source/smartsheets connectors/source/snowflake connectors/source/square connectors/source/strava connectors/source/stripe connectors/source/surveymonkey connectors/source/tempo connectors/source/tiktok-marketing connectors/source/trello connectors/source/twilio connectors/source/us-census connectors/source/youtube-analytics connectors/source/zendesk-chat connectors/source/zendesk-sunshine connectors/source/zendesk-support connectors/source/zendesk-talk connectors/source/zuora connectors/sources-api connectors/sources-database connectors/sources-files Epic lang/java team/db-dw-sources Backlog for Database and Data Warehouse Sources team

Comments

@alexandertsukanov
Copy link
Contributor

alexandertsukanov commented Nov 17, 2021

Tell us about the problem you're trying to solve

The issue #5172 was found by the customer. Sometimes users have access to SYSTEM tables and tables where users do not have SELECT privileges at Airbyte UI (Connection setup step). As a result, we get a "Permission denied" runtime error, and the sync job crushes.

This issue is created to check if we don't have such issue in other source connectors.

Please, keep in mind, connector with blank Ticket OR Resolution column should be checked later.

Related issues:

Was able to reproduce the issue? Source Connector Ticket Resolution
✔️ Postgres #5172 PR created
✔️ DB2 #8171
✔️ MongoDB #8752
BigQuery OOTB if user has read permissions for dataset, he automatically has permanent access to all tables #8844
Amazon ADS
Amazon Seller Partner
Amazon SQS
Amazon Seller Partner
Amplitude
Apify Dataset
Appstore
Asana
AWS CloudTrail
BambooHR
Braintree
BigCommerce
Bing Ads
Cart
Chargebee
ClickHouse
Close.com
✔️ CockroachDB #8868 #9004
Dixa
Drift
Drupal
Exchange Rates API
Facebook Marketing
Facebook Pages
Files
Freshdesk
GitHub
GitLab
Google Ads
Google Adwords
Google Analytics v4
Google Directory
Google Search Console
Google Sheets
Google Workspace Admin Reports
Greenhouse
HubSpot
Instagram
Intercom
Iterable
Jira
Klaviyo
Klaviyo
Lemlist
LinkedIn Ads
Linnworks
Kustomer
Lever Hiring
Looker
Magento
Mailchimp
Marketo
MSSQL Users don’t have access. Out of the box MSSQL doesn't provide access to the tables without SELECT grant.
Microsoft Dynamics AX
Microsoft Dynamics Customer Engagement
Microsoft Dynamics GP
Microsoft Dynamics NAV
Microsoft Teams
Mixpanel
MySQL Users don’t have access. Out of the box MySQL doesn't provide access to the tables without SELECT grant.
Notion
Okta
OneSignal
Oracle Oracle DB - the schema is the user, you cannot REVOKE a privilege on a table from its owner. So fixing is not required.
Oracle PeopleSoft
Oracle Siebel CRM
PayPal Transaction
Paystack
Pinterest
Pipedrive
Plaid
PokéAPI
PostHog
PrestaShop
Quickbooks
Recharge
Recurly
Redshift
S3
Salesforce
Salesloft
SAP Business One
Sendgrid
Sentry
Shopify
Short.io
Slack
Spree Commerce
Smartsheets
Snowflake snowflake handles case with permissions ootb, so user can see only tables where he has proper permissions
Square
Strava
Stripe
Sugar CRM
SurveyMonkey
Tempo
TikTok Marketing
Trello
Twilio
US Census
WooCommerce
Wordpress
YouTube Analytics
Zencart
Zendesk Chat
Zendesk Sunshine
Zendesk Support
Zendesk Talk
Zoom
Zuora
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/connectors Connector related issues area/reliability connectors/source/amazon-ads connectors/source/amazon-seller-partner connectors/source/amazon-sqs connectors/source/amplitude connectors/source/apify-dataset connectors/source/appstore-singer connectors/source/asana connectors/source/aws-cloudtrail connectors/source/bigcommerce connectors/source/bigquery connectors/source/bing-ads connectors/source/braintree connectors/source/cart connectors/source/clickhouse connectors/source/close-com connectors/source/cockroachdb connectors/source/db2 connectors/source/dixa connectors/source/drift connectors/source/facebook-marketing connectors/source/facebook-pages connectors/source/google-ads connectors/source/google-analytics-v4 connectors/source/google-directory connectors/source/google-search-console connectors/source/google-sheets connectors/source/google-workspace-admin-reports connectors/source/greenhouse connectors/source/hubspot connectors/source/instagram connectors/source/intercom connectors/source/iterable connectors/source/jira connectors/source/klaviyo connectors/source/lever-hiring connectors/source/linkedin-ads connectors/source/linnworks connectors/source/looker connectors/source/mailchimp connectors/source/marketo connectors/source/microsoft-teams connectors/source/mixpanel connectors/source/mongodb connectors/source/mssql connectors/source/mysql connectors/source/notion connectors/source/okta connectors/source/onesignal connectors/source/oracle connectors/source/paypal-transaction connectors/source/paystack connectors/source/pinterest connectors/source/pipedrive connectors/source/plaid connectors/source/pokeapi connectors/source/postgres connectors/source/posthog connectors/source/prestashop connectors/source/quickbooks-singer connectors/source/recharge connectors/source/recurly connectors/source/redshift connectors/source/s3 connectors/source/salesforce connectors/source/salesloft connectors/source/sendgrid connectors/source/sentry connectors/source/shopify connectors/source/shortio connectors/source/slack connectors/source/smartsheets connectors/source/snowflake connectors/source/square connectors/source/strava connectors/source/stripe connectors/source/surveymonkey connectors/source/tempo connectors/source/tiktok-marketing connectors/source/trello connectors/source/twilio connectors/source/us-census connectors/source/youtube-analytics connectors/source/zendesk-chat connectors/source/zendesk-sunshine connectors/source/zendesk-support connectors/source/zendesk-talk connectors/source/zuora connectors/sources-api connectors/sources-database connectors/sources-files Epic lang/java team/db-dw-sources Backlog for Database and Data Warehouse Sources team
Projects
No open projects
Status: Backlog (scoped)
Development

No branches or pull requests

7 participants