Return-Path: Delivered-To: apmail-db-derby-dev-archive@www.apache.org Received: (qmail 40470 invoked from network); 5 Aug 2006 03:48:53 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 5 Aug 2006 03:48:53 -0000 Received: (qmail 2591 invoked by uid 500); 5 Aug 2006 03:48:52 -0000 Delivered-To: apmail-db-derby-dev-archive@db.apache.org Received: (qmail 2553 invoked by uid 500); 5 Aug 2006 03:48:52 -0000 Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: Delivered-To: mailing list derby-dev@db.apache.org Received: (qmail 2544 invoked by uid 99); 5 Aug 2006 03:48:52 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 04 Aug 2006 20:48:52 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received: from [209.237.227.198] (HELO brutus.apache.org) (209.237.227.198) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 04 Aug 2006 20:48:51 -0700 Received: from brutus (localhost [127.0.0.1]) by brutus.apache.org (Postfix) with ESMTP id CCC067142C7 for ; Sat, 5 Aug 2006 03:46:14 +0000 (GMT) Message-ID: <25762899.1154749574836.JavaMail.jira@brutus> Date: Fri, 4 Aug 2006 20:46:14 -0700 (PDT) From: "Daniel John Debrunner (JIRA)" To: derby-dev@db.apache.org Subject: [jira] Commented: (DERBY-1544) Address remaining upgrade task(s) to complete full upgrade mechanism for GRANT/REVOKE, specifically with changing database owner name from 'DBA' to authorizationId of user invoking upgrade. In-Reply-To: <29602869.1153358053826.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N [ http://issues.apache.org/jira/browse/DERBY-1544?page=comments#action_12425930 ] Daniel John Debrunner commented on DERBY-1544: ---------------------------------------------- one question before I commit the change, the initial comments indicates that granting the execute permission to these five routines was done for create but not for upgrade. This change is addressing upgrade but seems to be adding new code. Is the code to grant permission for these routines shared between create and upgrade, or are there two separate mechanisms.? for instance, I only see the method grantPublicAccessToSystemRoutines being called from doFullUpgrade. How are these permissions granted at create database time? > Address remaining upgrade task(s) to complete full upgrade mechanism for GRANT/REVOKE, specifically with changing database owner name from 'DBA' to authorizationId of user invoking upgrade. > --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- > > Key: DERBY-1544 > URL: http://issues.apache.org/jira/browse/DERBY-1544 > Project: Derby > Issue Type: Sub-task > Components: SQL > Affects Versions: 10.2.0.0 > Environment: generic > Reporter: Satheesh Bandaram > Assigned To: Deepa Remesh > Fix For: 10.2.0.0 > > Attachments: d1544-patch1-draft.diff, d1544-patch1-v1.diff, d1544-patch1-v1.status, d1544-patch2-v1.diff, d1544-patch2-v1.status, d1544-patch2-v2.diff > > > Upgrading a database from 10.1 to 10.2 should automatically change database owner, recorded as owner of system schemas in sysschemas, from pseudo user 'DBA' to authorizationID of the user attempting upgrade. > Another upgrade change I am thinking about is to grant execute privilege to 5 system routines that by default have execute privilege to public when a new database is created. Five system routines, two compress routines and three statistics related routines are given execute privilege to public when a new 10.2 database is created. This is not done when a 10.1 database is upgraded to 10.2 and probably good to include these privileges during database upgrade. > -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira