db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dag.Wan...@Sun.COM (Dag H. Wanvik)
Subject Re: Roles for Derby - draft spec uploaded
Date Tue, 18 Sep 2007 01:56:49 GMT
Daniel John Debrunner <djd@apache.org> writes:

> On 9/17/07, Dag H. Wanvik <Dag.Wanvik@sun.com> wrote:
>>> As for having a default role on connect, that could be added later.
>>> This is implementation defined behavior, according to SQL std. 
>
> Where does the standard say that? I see in section 4.37.2 the sentence:
>
>   "An SQL-session initially has no SQL-session role name."

Ah, yes I knew I had seen that somewhere. I was referring to Annex B
"Implementation-defined elements", clause 69 b:

69) Subclause 17.1, <connect statement>:
  :
  b) The initial value of the current role name is the null value.

>> I can just hear myself cursing every time I have to type in "SET ROLE
>> admin" before I can get any work done through my admin UI.
>
> There's  nothing to stop a tool determining if a user has a single
> role and then executing a SET ROLE before it opens its admin UI.

+1

Dag

Mime
View raw message