Permissions semantics through multiple views is not what we want

[billhowe]

Imagine Alice, Bob, and Charlie are SQLShare users

• So this scenario works, and follows the "ownership chain" semantics [1]:
  • Alice uploads dataset A
  • Alice derives view AA
  • Alice shares AA with Bob

Now Bob can run queries on AA with no problem, and can derive his own views.

• This scenario does not work:
  • Alice uploads dataset A
  • Alice shares A with Bob.
  • Bob derives view BA.
  • Bob shares BA with Charlie.

Now Charlie cannot access view BA, because the ownership chain is broken (Bob, then Alice).

We want the second scenario to work, and it requires automatically assigning permissions to Charlie all the way down the chain.

[1] http://sqlmag.com/sql-server/security-through-ownership-chains