db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Oystein Grovlen - Sun Norway <Oystein.Grov...@Sun.COM>
Subject Re: [jira] Commented: (DERBY-2109) System privileges
Date Thu, 14 Dec 2006 13:49:21 GMT
Dag H. Wanvik (JIRA) wrote:
>     [ http://issues.apache.org/jira/browse/DERBY-2109?page=comments#action_12458129 ]

>             
> Dag H. Wanvik commented on DERBY-2109:
> --------------------------------------
> 
> Øystein:
>> I miss a rationale for how you ended up with three
>> database-specific features. What are particular to them compared
>> to other features like those listed in Appendix A?
> 
> I think the reason is that these can all be controlled via execute
> privileges on existing system procedures, whereas, the three new ones
> are done via getConnection and are not currently protectable. It would
> be nice to call this out earlier in the write-up - it is mentioned in the
> beginning of appendix A.
> 

That make sense, but there is at least one getConnection-operation that 
is not mentioned: Restore.  I would assume this should be a 
database-specific privelege.

-- 
Øystein

Mime
View raw message