datalytyx / snowflake-webhooks

A work around implementation to allow webhooks to be called from inside Snowflake. This allows powerful bidirectional integration between Snowflake and other external systems.
Apache License 2.0
15 stars 0 forks source link

Change requirement from ACCOUNTADMIN to SECURITYADMIN #5

Closed dmarts closed 5 years ago

dmarts commented 5 years ago

Don't need ACCOUNTADMIN here, just SECURITYADMIN. Unlikely to have any impact in real usage as the script now requires both SECURITY and SYS roles, which are both owned by ACCOUNT. But a) it makes it easier to split into a 2-user split script where ACCOUNTADMIN isn't an option and b) ACCOUNT > (SECURITY + SYS) i.e. even if the user running the query has both SECURITY and SYS roles, they still have a smaller permission set than ACCOUNTADMIN. This will resolve #4.

guy-adams commented 5 years ago

@dmarts - can you confirm this has been tested pls? thanks!

dmarts commented 5 years ago

Yes, all working fine 👍