Caché Upgrade Checklists - InterSystems Documentation

Developers11.2.8.10 Changes To SQL GRANT And REVOKEThe SQL GRANT and REVOKE commands no longer support the following general administrative privileges:• %GRANT_ANY_PRIVILEGE• %CREATE_USER• %ALTER_USER• %DROP_USER• %CREATE_ROLE• %GRANT_ANY_ROLE• %DROP_ANY_ROLEIn previous versions, SQL permissions were separately maintained. In version 5.1, these privileges are managed by Caché.SQL code which attempts one of these operations will be interpreted as granting a role having this name.CREATE ROLE DetailsIn order to create a role definition through the SQL CREATE ROLE statement, the user must hold the%Admin_Security:Use privilege. If this privilege is not held by the user, an error -99 will be returned with an appropriatemessage.DROP ROLE DetailsIn order to drop a role definition through DROP ROLE, at least one of the following must be true:• The user has the %Admin_Security:Use privilege.• The user is the owner of the role.• The user was granted the role with the admin option.11.2.8.11 SQL %THRESHOLD RemovedThe SQL %THRESHOLD feature is no longer used in this version of Caché. Code that attempts to grant a threshold, forexample,GRANT %THRESHOLD ### TO SomeUserwill now receive an error at compile time. And code such asREVOKE %THRESHOLD FROM SomeUserwill no longer revoke the threshold. The interpretation has changed; Caché 5.1 will attempt to revoke a role called%THRESHOLD from the user.11.2.8.12 SQL Privileges On SAMPLES Granted To User _PUBLICAt installation time, all SQL privileges for all tables, views, and procedures in the SAMPLES namespace are granted tothe user named, _PUBLIC.11.2.8.13 SQL Catalog Info For System TablesThe SQLTables() query of the %Library.SQLCatalog class returns a list of tables and views defined in the current namespace.In earlier versions, this list included System tables. In version 5.1, the System table information will only be included ifthe query is executed while in the %SYS namespace.Caché Upgrade Checklists 261