Are Okera Permissions Retained after Dropping a Dataset?

Questions

When an Okera resource, including database, table, and view, is dropped, do any GRANTs get dropped too?

If one deletes a table and recreates it with a different AD group, will the original table’s AD Group still have access?

Answer

Dropping a database, table or view does not drop the permissions on the object. This means if the same object with the same name is created, it will retain the permissions from the dropped object. This pattern is sometimes used, for example in ETL, where the permissions and catalog object (re)creation are decoupled.

This behavior is not ideal in other cases. As of the Okera 0.7.0 release we extended the DROP [DATABASE|TABLE|VIEW] DDL commands to support optionally dropping the associated permissions as well. If not specified, this command is backwards compatible and keeps the previous semantics. For more in depth information on this topic please go to the Optionally Drop Permissions documentation page.