You are viewing a plain text version of this content. The canonical link for it is here.
Posted to derby-dev@db.apache.org by "Dag H. Wanvik (JIRA)" <ji...@apache.org> on 2007/09/27 05:17:51 UTC
[jira] Created: (DERBY-3090) DROP SCHEMA by an unauthorized user
under sqlAuthorization gives confusing error message
DROP SCHEMA by an unauthorized user under sqlAuthorization gives confusing error message
----------------------------------------------------------------------------------------
Key: DERBY-3090
URL: https://issues.apache.org/jira/browse/DERBY-3090
Project: Derby
Issue Type: Bug
Components: Security, SQL
Affects Versions: 10.3.1.4, 10.2.2.0, 10.2.1.6
Reporter: Dag H. Wanvik
Priority: Minor
When attempting to drop a schema as a non-authorized user (i.e. not database owner), this happens:
> drop role dd;
ERROR 42508: User 'KNUT' can not create schema 'DD'. Only database owner could issue this statement.
java.sql.SQLSyntaxErrorException: User 'KNUT' can not create schema 'DD'. Only database owner could issue this statement.
The error text "create schema" is misleading, it should be "drop schema". The reason is that the 42508 (AUTH_NO_ACCESS_NOT_OWNER) is shared between create and drop schema actions in StatementSchemaPermission.
Either the text should be more generic, or separate messages used.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (DERBY-3090) DROP SCHEMA by an unauthorized user
under sqlAuthorization gives confusing error message
Posted by "Dag H. Wanvik (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-3090?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dag H. Wanvik closed DERBY-3090.
--------------------------------
Resolution: Invalid
Not sure what happened here, must have been a late night session. The example
shows a "drop role" from my sandbox, not "drop schema". Closing as invalid.
> DROP SCHEMA by an unauthorized user under sqlAuthorization gives confusing error message
> ----------------------------------------------------------------------------------------
>
> Key: DERBY-3090
> URL: https://issues.apache.org/jira/browse/DERBY-3090
> Project: Derby
> Issue Type: Bug
> Components: Security, SQL
> Affects Versions: 10.2.1.6, 10.2.2.0, 10.3.1.4
> Reporter: Dag H. Wanvik
> Priority: Minor
>
> When attempting to drop a schema as a non-authorized user (i.e. not database owner), this happens:
> > drop role dd;
> ERROR 42508: User 'KNUT' can not create schema 'DD'. Only database owner could issue this statement.
> java.sql.SQLSyntaxErrorException: User 'KNUT' can not create schema 'DD'. Only database owner could issue this statement.
> The error text "create schema" is misleading, it should be "drop schema". The reason is that the 42508 (AUTH_NO_ACCESS_NOT_OWNER) is shared between create and drop schema actions in StatementSchemaPermission.
> Either the text should be more generic, or separate messages used.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DERBY-3090) DROP SCHEMA by an unauthorized user
under sqlAuthorization gives confusing error message
Posted by "Dag H. Wanvik (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-3090?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12538779 ]
Dag H. Wanvik commented on DERBY-3090:
--------------------------------------
I guess the problem was that I tried to use a seemingly generic error
message "AUTH_NOT_DATABASE_OWNER", but the message text turned out to be
specific to CREATE SCHEMA.
> DROP SCHEMA by an unauthorized user under sqlAuthorization gives confusing error message
> ----------------------------------------------------------------------------------------
>
> Key: DERBY-3090
> URL: https://issues.apache.org/jira/browse/DERBY-3090
> Project: Derby
> Issue Type: Bug
> Components: Security, SQL
> Affects Versions: 10.2.1.6, 10.2.2.0, 10.3.1.4
> Reporter: Dag H. Wanvik
> Priority: Minor
>
> When attempting to drop a schema as a non-authorized user (i.e. not database owner), this happens:
> > drop role dd;
> ERROR 42508: User 'KNUT' can not create schema 'DD'. Only database owner could issue this statement.
> java.sql.SQLSyntaxErrorException: User 'KNUT' can not create schema 'DD'. Only database owner could issue this statement.
> The error text "create schema" is misleading, it should be "drop schema". The reason is that the 42508 (AUTH_NO_ACCESS_NOT_OWNER) is shared between create and drop schema actions in StatementSchemaPermission.
> Either the text should be more generic, or separate messages used.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.