db-derby-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From chaa...@apache.org
Subject svn commit: r1339604 - in /db/derby/docs/trunk/src: devguide/cdevcsecure24458.dita devguide/cdevcsecurenativeauth.dita ref/rrefnativecreateuserproc.dita ref/rrefnativedropuserproc.dita ref/rrefnativeresetpasswordproc.dita
Date Thu, 17 May 2012 13:53:52 GMT
Author: chaase3
Date: Thu May 17 13:53:51 2012
New Revision: 1339604

URL: http://svn.apache.org/viewvc?rev=1339604&view=rev
Log:
DERBY-5763  Reference Guide should note the new casing rules for the USERNAME arguments to
the NATIVE procedures

Modified 3 Reference Manual and 2 Developer's Guide topics.

Patch: DERBY-5763-2.diff

Modified:
    db/derby/docs/trunk/src/devguide/cdevcsecure24458.dita
    db/derby/docs/trunk/src/devguide/cdevcsecurenativeauth.dita
    db/derby/docs/trunk/src/ref/rrefnativecreateuserproc.dita
    db/derby/docs/trunk/src/ref/rrefnativedropuserproc.dita
    db/derby/docs/trunk/src/ref/rrefnativeresetpasswordproc.dita

Modified: db/derby/docs/trunk/src/devguide/cdevcsecure24458.dita
URL: http://svn.apache.org/viewvc/db/derby/docs/trunk/src/devguide/cdevcsecure24458.dita?rev=1339604&r1=1339603&r2=1339604&view=diff
==============================================================================
--- db/derby/docs/trunk/src/devguide/cdevcsecure24458.dita (original)
+++ db/derby/docs/trunk/src/devguide/cdevcsecure24458.dita Thu May 17 13:53:51 2012
@@ -39,12 +39,6 @@ type his name that way.   <codeblock>Con
 <li>Within the <ph conref="../conrefs.dita#prod/productshortname"></ph>
user
 authorization system, Fred becomes a case-insensitive authorization identifier.
 Fred is known as <i>FRED</i>.</li>
-<li>When you use the <codeph>SYSCS_UTIL.SYSCS_CREATE_USER</codeph> system
-procedure to create the NATIVE authentication user Fred, you specify his name
-in uppercase to match the way it is stored in the database:
-<codeblock><b>CALL SYSCS_UTIL.SYSCS_CREATE_USER('FRED', 'flintstone');
-</b></codeblock>
-</li>
 </ul>
 <p>Let's take a second example, where Fred has a slightly different name within
 the user authentication system.</p>
@@ -58,12 +52,6 @@ the double quotes when passing the name 
 <li>Within the <ph conref="../conrefs.dita#prod/productshortname"></ph>
user
 authorization system, <i>Fred</i> becomes a case-sensitive authorization identifier.
 Fred is known as <i>Fred!</i>.</li>
-<li>When you use the <codeph>SYSCS_UTIL.SYSCS_CREATE_USER</codeph> system
-procedure to create the NATIVE authentication user Fred!, you specify his name
-exactly as it is stored in the database:
-<codeblock><b>CALL SYSCS_UTIL.SYSCS_CREATE_USER('Fred!', 'flintstone');
-</b></codeblock>
-</li>
 </ul>
 <p>As shown in the first example, your external authentication system may
 be case-sensitive, whereas the authorization identifier within <ph conref="../conrefs.dita#prod/productshortname"></ph>
may

Modified: db/derby/docs/trunk/src/devguide/cdevcsecurenativeauth.dita
URL: http://svn.apache.org/viewvc/db/derby/docs/trunk/src/devguide/cdevcsecurenativeauth.dita?rev=1339604&r1=1339603&r2=1339604&view=diff
==============================================================================
--- db/derby/docs/trunk/src/devguide/cdevcsecurenativeauth.dita (original)
+++ db/derby/docs/trunk/src/devguide/cdevcsecurenativeauth.dita Thu May 17 13:53:51 2012
@@ -43,9 +43,9 @@ value must be set by using system-wide J
 by using the <codeph>derby.properties</codeph> file; it cannot be set in the
 database by using the <codeph>SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY</codeph>
 procedure. When this system-wide value is set, <i>credentialsDB</i> is used to
-authenticate all operations. Individual databases can override this directive by
-specifying their own value for
-<codeph>derby.authentication.provider</codeph>.</p>
+authenticate all operations. If an individual database holds credentials for the
+database owner, the global credentials database is used only to authenticate
+system-wide operations such as engine shutdown.</p>
 <p>The value of <i>credentialsDB</i> must be a valid name for a database.</p>
 </li>
 <li>NATIVE:<i>credentialsDB</i>:LOCAL
@@ -157,11 +157,10 @@ without it, the procedure is slightly di
 NATIVE:<i>credentialsDB</i> or NATIVE:<i>credentialsDB</i>:LOCAL:</p>
 <ul>
 <li>If you specify NATIVE:<i>credentialsDB</i>, add users of the existing
-database to the <i>credentialsDB</i>. Typically, you would specify uppercase
-user names and case-sensitive passwords. For instance, if the old database was
+database to the <i>credentialsDB</i>. For instance, if the old database was
 created without any authentication, then its default user name is APP, and you
-would do the following:
-<codeblock><b>CALL SYSCS_UTIL.SYSCS_CREATE_USER('APP', 'app');</b></codeblock></li>
+could do the following:
+<codeblock><b>CALL SYSCS_UTIL.SYSCS_CREATE_USER('app', 'app');</b></codeblock></li>
 <li>If you plan to specify NATIVE:<i>credentialsDB</i>:LOCAL, first connect
to
 the existing database as its database owner using its old authentication scheme.
 Call <codeph>SYSCS_UTIL.SYSCS_CREATE_USER</codeph> to add credentials for the

Modified: db/derby/docs/trunk/src/ref/rrefnativecreateuserproc.dita
URL: http://svn.apache.org/viewvc/db/derby/docs/trunk/src/ref/rrefnativecreateuserproc.dita?rev=1339604&r1=1339603&r2=1339604&view=diff
==============================================================================
--- db/derby/docs/trunk/src/ref/rrefnativecreateuserproc.dita (original)
+++ db/derby/docs/trunk/src/ref/rrefnativecreateuserproc.dita Thu May 17 13:53:51 2012
@@ -53,7 +53,8 @@ IN PASSWORD VARCHAR(32672))</codeblock> 
 <p>No result set is returned by this procedure.</p>
 <dl><dlentry>
 <dt>USERNAME</dt>
-<dd>A case-sensitive user name. This user name is an authorization identifier.
+<dd>A user name that is case-sensitive if you place the name string in double
+quotes. This user name is an authorization identifier.
 See "Authorization identifiers, user authentication, and user authorization" in
 the <ph conref="../conrefs.dita#pub/citdevelop"></ph> for more information about
 how these names are treated.</dd>
@@ -71,16 +72,27 @@ authentication," "Enabling user authenti
 authorization mode" in the <ph conref="../conrefs.dita#pub/citdevelop"></ph>
for
 more information. The database owner can grant access to other users.</p>
 </section>
-<section><title>JDBC example</title> 
+<section><title>JDBC example</title>
+<p>Create a user named FRED:</p>
 <codeblock>CallableStatement cs = conn.prepareCall
 ("CALL SYSCS_UTIL.SYSCS_CREATE_USER(?, ?)");
-cs.setString(1, "FRED");
+cs.setString(1, "fred");
+cs.setString(2, "fredpassword");
+cs.execute();
+cs.close();</codeblock>
+<p>Create a user named FreD:</p>
+<codeblock>CallableStatement cs = conn.prepareCall
+("CALL SYSCS_UTIL.SYSCS_CREATE_USER(?, ?)");
+cs.setString(1, "\"FreD\"");
 cs.setString(2, "fredpassword");
 cs.execute();
 cs.close();</codeblock>
 </section>
 <section><title>SQL example</title>
-<codeblock>CALL SYSCS_UTIL.SYSCS_CREATE_USER('FRED', 'fredpassword')</codeblock>
+<p>Create a user named FRED:</p>
+<codeblock>CALL SYSCS_UTIL.SYSCS_CREATE_USER('fred', 'fredpassword')</codeblock>
+<p>Create a user named FreD:</p>
+<codeblock>CALL SYSCS_UTIL.SYSCS_CREATE_USER('"FreD"', 'fredpassword')</codeblock>
 </section>
 </refbody>
 </reference>

Modified: db/derby/docs/trunk/src/ref/rrefnativedropuserproc.dita
URL: http://svn.apache.org/viewvc/db/derby/docs/trunk/src/ref/rrefnativedropuserproc.dita?rev=1339604&r1=1339603&r2=1339604&view=diff
==============================================================================
--- db/derby/docs/trunk/src/ref/rrefnativedropuserproc.dita (original)
+++ db/derby/docs/trunk/src/ref/rrefnativedropuserproc.dita Thu May 17 13:53:51 2012
@@ -49,7 +49,8 @@ objects.</p>
 <p>No result set is returned by this procedure.</p>
 <dl><dlentry>
 <dt>USERNAME</dt>
-<dd>A case-sensitive user name. This user name is an authorization identifier.
+<dd>A user name that is case-sensitive if you place the name string in double
+quotes. This user name is an authorization identifier.
 See "Authorization identifiers, user authentication, and user authorization" in
 the <ph conref="../conrefs.dita#pub/citdevelop"></ph> for more information about
 how these names are treated. If the user name is that of the database owner,
@@ -66,13 +67,15 @@ authorization mode" in the <ph conref=".
 more information. The database owner can grant access to other users.</p>
 </section>
 <section><title>JDBC example</title> 
+<p>Drop a user named FRED:</p>
 <codeblock>CallableStatement cs = conn.prepareCall
-("CALL SYSCS_UTIL.SYSCS_DROP_USER('FRED')");
+("CALL SYSCS_UTIL.SYSCS_DROP_USER('fred')");
 cs.execute();
 cs.close();</codeblock>
 </section>
 <section><title>SQL example</title>
-<codeblock>CALL SYSCS_UTIL.SYSCS_DROP_USER('FRED')</codeblock>
+<p>Drop a user named FreD:</p>
+<codeblock>CALL SYSCS_UTIL.SYSCS_DROP_USER('"FreD"')</codeblock>
 </section>
 </refbody>
 </reference>

Modified: db/derby/docs/trunk/src/ref/rrefnativeresetpasswordproc.dita
URL: http://svn.apache.org/viewvc/db/derby/docs/trunk/src/ref/rrefnativeresetpasswordproc.dita?rev=1339604&r1=1339603&r2=1339604&view=diff
==============================================================================
--- db/derby/docs/trunk/src/ref/rrefnativeresetpasswordproc.dita (original)
+++ db/derby/docs/trunk/src/ref/rrefnativeresetpasswordproc.dita Thu May 17 13:53:51 2012
@@ -43,7 +43,8 @@ IN PASSWORD VARCHAR(32672))</codeblock> 
 <p>No result set is returned by this procedure.</p>
 <dl><dlentry>
 <dt>USERNAME</dt>
-<dd>A case-sensitive user name. This user name is an authorization identifier.
+<dd>A user name that is case-sensitive if you place the name string in double
+quotes. This user name is an authorization identifier.
 See "Authorization identifiers, user authentication, and user authorization" in
 the <ph conref="../conrefs.dita#pub/citdevelop"></ph> for more information about
 how these names are treated.</dd>
@@ -63,15 +64,26 @@ authorization mode" in the <ph conref=".
 more information. The database owner can grant access to other users.</p>
 </section>
 <section><title>JDBC example</title> 
+<p>Reset the password of a user named FRED:</p>
 <codeblock>CallableStatement cs = conn.prepareCall
 ("CALL SYSCS_UTIL.SYSCS_RESET_PASSWORD(?, ?)");
-cs.setString(1, "FRED");
+cs.setString(1, "fred");
+cs.setString(2, "temppassword");
+cs.execute();
+cs.close();</codeblock>
+<p>Reset the password of a user named FreD:</p>
+<codeblock>CallableStatement cs = conn.prepareCall
+("CALL SYSCS_UTIL.SYSCS_RESET_PASSWORD(?, ?)");
+cs.setString(1, "\"FreD\"");
 cs.setString(2, "temppassword");
 cs.execute();
 cs.close();</codeblock>
 </section>
 <section><title>SQL example</title>
-<codeblock>CALL SYSCS_UTIL.SYSCS_RESET_PASSWORD('FRED', 'temppassword')</codeblock>
+<p>Reset the password of a user named FRED:</p>
+<codeblock>CALL SYSCS_UTIL.SYSCS_RESET_PASSWORD('fred', 'temppassword')</codeblock>
+<p>Reset the password of a user named FreD:</p>
+<codeblock>CALL SYSCS_UTIL.SYSCS_RESET_PASSWORD('"FreD"', 'temppassword')</codeblock>
 </section>
 </refbody>
 </reference>



Mime
View raw message