You are viewing a plain text version of this content. The canonical link for it is here.

Posted to derby-dev@db.apache.org by Rick Hillegas <Ri...@Sun.COM> on 2006/07/19 19:52:02 UTC

grant/revoke improvements

Hi Satheesh and Mamta,

Over the last month you have checked in a lot of great grant/revoke 
improvements. If there's anything in particular which you want users to 
test-drive, feel free to list these items on the wiki page that 
describes the 10.2.0.4 snapshot: 
http://wiki.apache.org/db-derby/TenTwoSnapshot#head-044f77b20b4cd15343e0b57416d4c6790d5bc3ae.

Thanks,
-Rick

Re: grant/revoke improvements

Posted by Rick Hillegas <Ri...@Sun.COM>.

Thanks Satheesh. I have added your concern to the wiki page describing 
the 10.2.0.4 snapshot.

Cheers,
-Rick

Satheesh Bandaram wrote:

>Hi Rick,
>
>It would be good to cover upgrade testing too. There is one known issue
>with upgrade and GRANT/REVOKE. I will file a JIRA entry for that. During
>database upgrade for a database from 10.1 to 10.2, the owner the
>database should change from peudo-user 'DBA' to actual authorizationID
>of the person performing the upgrade. This is not happening. There is
>mechanism in the upgrade already to perform this task, but seems to have
>a defect some where.
>
>I am working on two minor changes to Grant/Rekoke. They are:
>
>    * Raise a warning if sqlAuthorization is ON without have
>      authentication enabled.
>    * Drop permission descriptors when their object is dropped. Ex:
>      during drop table, drop all permission descriptors on that table.
>
>I will not be adding any more support to GRANT/REVOKE beyond this.
>
>Satheesh
>
>Rick Hillegas wrote:
>
>  
>
>>Thanks, Mamta. I have added your concern to the snapshot wiki page.
>>
>>Cheers,
>>-Rick
>>
>>Mamta Satoor wrote:
>>
>>    
>>
>>>Hi Rick,
>>> 
>>>Thanks for starting out this thread on grant/revoke improvement.
>>> 
>>>One plea I have for the community in general is more eyes on the
>>>patches I have been submitting for grant revoke recently (one can
>>>always go and review the patch that has been already committed and
>>>provide feedback).
>>> 
>>>As for testing, one particular area I am ansy about is statement
>>>caching and how statements in cache can invalidated if privilege
>>>changes after the statement has been cached. I have not done any work
>>>in that arena yet. Hopefully revoke privilege/drop table/drop
>>>view/drop routine work will take care of statement caching but I
>>>would like people to look out for this during their testing.
>>> 
>>>thanks,
>>>Mamta
>>> 
>>>ps I haven't done my share of looking into patches submmitted by
>>>others and hope to improve in that arena post 10.2 when there is more
>>>breathing time.
>>>
>>> 
>>>On 7/19/06, *Rick Hillegas* <Richard.Hillegas@sun.com
>>><ma...@sun.com>> wrote:
>>>
>>>    Hi Satheesh and Mamta,
>>>
>>>    Over the last month you have checked in a lot of great grant/revoke
>>>    improvements. If there's anything in particular which you want
>>>    users to
>>>    test-drive, feel free to list these items on the wiki page that
>>>    describes the 10.2.0.4 <http://10.2.0.4> snapshot:
>>>   
>>>http://wiki.apache.org/db-derby/TenTwoSnapshot#head-044f77b20b4cd15343e0b57416d4c6790d5bc3ae.
>>>
>>>
>>>    Thanks,
>>>    -Rick
>>>
>>>
>>>      
>>>
>>    
>>
>
>
>  
>

Re: grant/revoke improvements

Posted by Satheesh Bandaram <ba...@gmail.com>.

Hi Rick,

It would be good to cover upgrade testing too. There is one known issue
with upgrade and GRANT/REVOKE. I will file a JIRA entry for that. During
database upgrade for a database from 10.1 to 10.2, the owner the
database should change from peudo-user 'DBA' to actual authorizationID
of the person performing the upgrade. This is not happening. There is
mechanism in the upgrade already to perform this task, but seems to have
a defect some where.

I am working on two minor changes to Grant/Rekoke. They are:

    * Raise a warning if sqlAuthorization is ON without have
      authentication enabled.
    * Drop permission descriptors when their object is dropped. Ex:
      during drop table, drop all permission descriptors on that table.

I will not be adding any more support to GRANT/REVOKE beyond this.

Satheesh

Rick Hillegas wrote:

> Thanks, Mamta. I have added your concern to the snapshot wiki page.
>
> Cheers,
> -Rick
>
> Mamta Satoor wrote:
>
>> Hi Rick,
>>  
>> Thanks for starting out this thread on grant/revoke improvement.
>>  
>> One plea I have for the community in general is more eyes on the
>> patches I have been submitting for grant revoke recently (one can
>> always go and review the patch that has been already committed and
>> provide feedback).
>>  
>> As for testing, one particular area I am ansy about is statement
>> caching and how statements in cache can invalidated if privilege
>> changes after the statement has been cached. I have not done any work
>> in that arena yet. Hopefully revoke privilege/drop table/drop
>> view/drop routine work will take care of statement caching but I
>> would like people to look out for this during their testing.
>>  
>> thanks,
>> Mamta
>>  
>> ps I haven't done my share of looking into patches submmitted by
>> others and hope to improve in that arena post 10.2 when there is more
>> breathing time.
>>
>>  
>> On 7/19/06, *Rick Hillegas* <Richard.Hillegas@sun.com
>> <ma...@sun.com>> wrote:
>>
>>     Hi Satheesh and Mamta,
>>
>>     Over the last month you have checked in a lot of great grant/revoke
>>     improvements. If there's anything in particular which you want
>>     users to
>>     test-drive, feel free to list these items on the wiki page that
>>     describes the 10.2.0.4 <http://10.2.0.4> snapshot:
>>    
>> http://wiki.apache.org/db-derby/TenTwoSnapshot#head-044f77b20b4cd15343e0b57416d4c6790d5bc3ae.
>>
>>
>>     Thanks,
>>     -Rick
>>
>>
>
>

Re: grant/revoke improvements

Posted by Rick Hillegas <Ri...@Sun.COM>.

Thanks, Mamta. I have added your concern to the snapshot wiki page.

Cheers,
-Rick

Mamta Satoor wrote:

> Hi Rick,
>  
> Thanks for starting out this thread on grant/revoke improvement.
>  
> One plea I have for the community in general is more eyes on the 
> patches I have been submitting for grant revoke recently (one can 
> always go and review the patch that has been already committed and 
> provide feedback).
>  
> As for testing, one particular area I am ansy about is statement 
> caching and how statements in cache can invalidated if privilege 
> changes after the statement has been cached. I have not done any work 
> in that arena yet. Hopefully revoke privilege/drop table/drop 
> view/drop routine work will take care of statement caching but I would 
> like people to look out for this during their testing.
>  
> thanks,
> Mamta
>  
> ps I haven't done my share of looking into patches submmitted by 
> others and hope to improve in that arena post 10.2 when there is more 
> breathing time.
>
>  
> On 7/19/06, *Rick Hillegas* <Richard.Hillegas@sun.com 
> <ma...@sun.com>> wrote:
>
>     Hi Satheesh and Mamta,
>
>     Over the last month you have checked in a lot of great grant/revoke
>     improvements. If there's anything in particular which you want
>     users to
>     test-drive, feel free to list these items on the wiki page that
>     describes the 10.2.0.4 <http://10.2.0.4> snapshot:
>     http://wiki.apache.org/db-derby/TenTwoSnapshot#head-044f77b20b4cd15343e0b57416d4c6790d5bc3ae.
>
>     Thanks,
>     -Rick
>
>

Re: grant/revoke improvements

Posted by Mamta Satoor <ms...@gmail.com>.

Hi Rick,

Thanks for starting out this thread on grant/revoke improvement.

One plea I have for the community in general is more eyes on the patches I
have been submitting for grant revoke recently (one can always go and review
the patch that has been already committed and provide feedback).

As for testing, one particular area I am ansy about is statement caching and
how statements in cache can invalidated if privilege changes after the
statement has been cached. I have not done any work in that arena yet.
Hopefully revoke privilege/drop table/drop view/drop routine work will take
care of statement caching but I would like people to look out for this
during their testing.

thanks,
Mamta

ps I haven't done my share of looking into patches submmitted by others and
hope to improve in that arena post 10.2 when there is more breathing time.

On 7/19/06, Rick Hillegas <Ri...@sun.com> wrote:
>
> Hi Satheesh and Mamta,
>
> Over the last month you have checked in a lot of great grant/revoke
> improvements. If there's anything in particular which you want users to
> test-drive, feel free to list these items on the wiki page that
> describes the 10.2.0.4 snapshot:
>
> http://wiki.apache.org/db-derby/TenTwoSnapshot#head-044f77b20b4cd15343e0b57416d4c6790d5bc3ae
> .
>
> Thanks,
> -Rick
>