Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm
Precedence: bulk
Reply-To: <derby-dev@db.apache.org>
Message-ID: <19995990.1155660375364.JavaMail.jira@brutus>
Date: Tue, 15 Aug 2006 09:46:15 -0700 (PDT)
From: "Mamta A. Satoor (JIRA)" <derby-dev@db.apache.org>
To: derby-dev@db.apache.org
Subject: [jira] Commented: (DERBY-1057) documentation to address
 Grant/Revoke (Derby-464)
In-Reply-To: <1959544776.1140994554681.JavaMail.jira@ajax.apache.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

    [ http://issues.apache.org/jira/browse/DERBY-1057?page=comments#action_12428164 ] 
            
Mamta A. Satoor commented on DERBY-1057:
----------------------------------------

Laura, I went through the 2 examples about PUBLIC and user-level privileges. One change is required to the 2nd example- make the privilege available at user-level after the object is created, And show that when the PUBLIC level privilege is revoked, Derby currently does not use available user-level privilege.  
In addition, in both the examples, at the end, when we say the object is dropped, we should say that how the privilege being revoked is available at a different level but is not used by Derby. Here is my suggestion for the 2 examples

Example 1 
User zhi creates table t1 and grants SELECT privileges to user harry on table t1. User zhi grants SELECT privileges to PUBLIC on table t1. User harry creates view v1 with the statement SELECT * from zhi.t1. The view depends on the user-level privilege that user harry has on t1. Subsequently, user zhi revokes SELECT privileges from user harry on table t1. As a result, the view harry.v1 is dropped even though user harry has SELECT privilege on table t1 at PUBLIC level,. 

Example 2 
User anita creates table t1 and grants SELECT privileges to PUBLIC. User harry creates view v1 with the statement SELECT * from anita.t1. The view depends on the PUBLIC level privilege that user harry has on t1 since user harry does not have user-level privileges on table t1. Later, user anita grants SELECT privilege to user harry on table t1. Subsequently, user anita revokes SELECT privileges from PUBLIC on table t1. As a result, the view harry.v1 is dropped even though user harry has SELECT privilege on table t1 at user-level. 


> documentation to address Grant/Revoke (Derby-464)
> -------------------------------------------------
>
>                 Key: DERBY-1057
>                 URL: http://issues.apache.org/jira/browse/DERBY-1057
>             Project: Derby
>          Issue Type: Sub-task
>          Components: Documentation
>    Affects Versions: 10.0.2.0
>            Reporter: Eric Radzinski
>         Assigned To: Laura Stewart
>             Fix For: 10.2.0.0
>
>         Attachments: derby1057_devguide.diff, derby1057_devguide3.diff, derby1057_devguide4.ddiff, derby1057_devguide_html.zip, derby1057_devguide_html3.zip, derby1057_devguide_html4.zip, derby1057_ref.diff, derby1057_ref3.diff, derby1057_ref4.diff, derby1057_ref_html.zip, derby1057_ref_html4.zip, derby1057_tuning3.diff, derby1057_tuning4.diff, derby1057_tuning_html.zip, derby1058_ref_html3.zip, devguide_html2.zip, ref_html2.zip, rtunpropersqlauth.html
>
>


-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira