You are viewing a plain text version of this content. The canonical link for it is here.
Posted to derby-dev@db.apache.org by "Satheesh Bandaram (JIRA)" <de...@db.apache.org> on 2006/07/24 08:59:15 UTC

[jira] Updated: (DERBY-1543) Address two remaining issues with GRANT/REVOKE functionality: 1) Add warning when sqlAuthorization is on with authentication off 2) Drop permission descriptors when objects they cover are dropped.

     [ http://issues.apache.org/jira/browse/DERBY-1543?page=all ]

Satheesh Bandaram updated DERBY-1543:
-------------------------------------

    Attachment: DERBY-1543.out

This (temp) patch addresses both these remaining issues. Some work is needed to complete this patch... including 1) Extending droping of descriptors to cover routine perms. Covers Table and Column permission descriptors for now 2) Adding test cases 3) Improve warning mechanism.

Any thoughts on when the Warning should be raised if authorization is ON without authentication? Should it be on every new connection creation or only at the boot time? Is there a concern that raising this warning might actually alert users about lack of authentication?

I will submit complete patch in a day or two.
   

> Address two remaining issues with GRANT/REVOKE functionality: 1) Add warning when sqlAuthorization is on with authentication off 2) Drop permission descriptors when objects they cover are dropped.
> ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: DERBY-1543
>                 URL: http://issues.apache.org/jira/browse/DERBY-1543
>             Project: Derby
>          Issue Type: Sub-task
>          Components: SQL
>    Affects Versions: 10.2.0.0
>            Reporter: Satheesh Bandaram
>             Fix For: 10.2.0.0
>
>         Attachments: DERBY-1543.out
>
>
> Address two remaining sub-tasks:
> Add warning when sqlAuthorization is on with authentication off: This is a precautionary warning, since sqlAuthorization doesn't mean much without authentication being ON.
> Drop permission descriptors when objects they cover are dropped: This applies to tables, routines. When these objects are dropped, automatically drop their permisson descriptors.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira