backendgym backendgym · reps Sign in with GitHubSign in

06Judge least privilege

sql-viewing / reps/06/README.md

mfa_reader should see the four active title and artist pairs, and nothing else. An assistant wrote answer.sql to count what the role sees. Read it first, then run it and compare with the expected result below. Fix it so the role reads only what it should: the fix grants nothing new.

Expected once fixed: 4 rows. The shipped file counts 5.

After the rep
  1. 1 Which row did the base-table grant expose that the view hides? Look at the columns of collections: which one would a SELECT * have handed the role as well?