db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mamta A. Satoor (JIRA)" <derby-...@db.apache.org>
Subject [jira] Commented: (DERBY-1057) documentation to address Grant/Revoke (Derby-464)
Date Tue, 15 Aug 2006 16:46:15 GMT
    [ http://issues.apache.org/jira/browse/DERBY-1057?page=comments#action_12428164 ] 
            
Mamta A. Satoor commented on DERBY-1057:
----------------------------------------

Laura, I went through the 2 examples about PUBLIC and user-level privileges. One change is
required to the 2nd example- make the privilege available at user-level after the object is
created, And show that when the PUBLIC level privilege is revoked, Derby currently does not
use available user-level privilege.  
In addition, in both the examples, at the end, when we say the object is dropped, we should
say that how the privilege being revoked is available at a different level but is not used
by Derby. Here is my suggestion for the 2 examples

Example 1 
User zhi creates table t1 and grants SELECT privileges to user harry on table t1. User zhi
grants SELECT privileges to PUBLIC on table t1. User harry creates view v1 with the statement
SELECT * from zhi.t1. The view depends on the user-level privilege that user harry has on
t1. Subsequently, user zhi revokes SELECT privileges from user harry on table t1. As a result,
the view harry.v1 is dropped even though user harry has SELECT privilege on table t1 at PUBLIC
level,. 

Example 2 
User anita creates table t1 and grants SELECT privileges to PUBLIC. User harry creates view
v1 with the statement SELECT * from anita.t1. The view depends on the PUBLIC level privilege
that user harry has on t1 since user harry does not have user-level privileges on table t1.
Later, user anita grants SELECT privilege to user harry on table t1. Subsequently, user anita
revokes SELECT privileges from PUBLIC on table t1. As a result, the view harry.v1 is dropped
even though user harry has SELECT privilege on table t1 at user-level. 


> documentation to address Grant/Revoke (Derby-464)
> -------------------------------------------------
>
>                 Key: DERBY-1057
>                 URL: http://issues.apache.org/jira/browse/DERBY-1057
>             Project: Derby
>          Issue Type: Sub-task
>          Components: Documentation
>    Affects Versions: 10.0.2.0
>            Reporter: Eric Radzinski
>         Assigned To: Laura Stewart
>             Fix For: 10.2.0.0
>
>         Attachments: derby1057_devguide.diff, derby1057_devguide3.diff, derby1057_devguide4.ddiff,
derby1057_devguide_html.zip, derby1057_devguide_html3.zip, derby1057_devguide_html4.zip, derby1057_ref.diff,
derby1057_ref3.diff, derby1057_ref4.diff, derby1057_ref_html.zip, derby1057_ref_html4.zip,
derby1057_tuning3.diff, derby1057_tuning4.diff, derby1057_tuning_html.zip, derby1058_ref_html3.zip,
devguide_html2.zip, ref_html2.zip, rtunpropersqlauth.html
>
>


-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message