GRANT PRIVILEGES … TO ROLE command: Creating instances and privilege format (Pending)¶
This behavior change is in the 2024_01 bundle.
For the current status of the bundle, refer to Bundle History.
The behavior of the GRANT PRIVILEGES … TO ROLE command and the following classes has changed.
- Before the change:
If you grant a privilege to create an instance of one class to a role, the role is automatically granted the privileges to create instances of other classes.
The name of the privilege to create an instance of a class is as follows:
If you specify the
ALLkeyword to grant all privileges on a schema, such as
GRANT ALL PRIVILEGE ON SCHEMA db.sch TO ROLE r1, the role is granted privileges on each class and allowed to create instances of each class.
- After the change:
The command only grants privileges on the class that is specified in the command. If you specify the
ALLkeyword to grant privileges on a schema, class privileges are not granted to the specified role.
To allow a role to create an instance of a class, grant the corresponding privilege manually.
The format of the privilege to create an instance of a class is as follows: