Return-Path: Delivered-To: apmail-db-derby-dev-archive@www.apache.org Received: (qmail 84757 invoked from network); 22 May 2008 00:10:17 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 22 May 2008 00:10:17 -0000 Received: (qmail 70698 invoked by uid 500); 22 May 2008 00:10:18 -0000 Delivered-To: apmail-db-derby-dev-archive@db.apache.org Received: (qmail 70656 invoked by uid 500); 22 May 2008 00:10:18 -0000 Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: Delivered-To: mailing list derby-dev@db.apache.org Received: (qmail 70572 invoked by uid 99); 22 May 2008 00:10:18 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 21 May 2008 17:10:18 -0700 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 22 May 2008 00:09:39 +0000 Received: from brutus (localhost [127.0.0.1]) by brutus.apache.org (Postfix) with ESMTP id ACC19234C11E for ; Wed, 21 May 2008 17:09:55 -0700 (PDT) Message-ID: <1540473489.1211414995706.JavaMail.jira@brutus> Date: Wed, 21 May 2008 17:09:55 -0700 (PDT) From: "Dag H. Wanvik (JIRA)" To: derby-dev@db.apache.org Subject: [jira] Commented: (DERBY-3673) Add checks that a new role isn't already a user authorization id In-Reply-To: <1476086195.1210689775679.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/DERBY-3673?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12598869#action_12598869 ] Dag H. Wanvik commented on DERBY-3673: -------------------------------------- derby-3673-3 committed as svn 658943. > Add checks that a new role isn't already a user authorization id > ---------------------------------------------------------------- > > Key: DERBY-3673 > URL: https://issues.apache.org/jira/browse/DERBY-3673 > Project: Derby > Issue Type: Sub-task > Reporter: Dag H. Wanvik > Assignee: Dag H. Wanvik > Fix For: 10.5.0.0 > > Attachments: derby-3673-1.diff, derby-3673-1.diff, derby-3673-1.stat, derby-3673-2.diff, derby-3673-2.stat, derby-3673-3.diff, derby-3673-3a-javadoc_fixes.diff > > > Derby current does not have dictionary information about legal users. > Authentication is configurable as being derby internal, LDAP based, or > user supplied. > SQL specifies that user ids and role names go in the same namespace > (authorization ids). Therefore, at role creation time, a new role > name should be checked against legal users for this database, and be > defined if there is already a user id by that name. > Unfortunately, since there is currently no reliable dictionary > information about legal users, the best we can do presently is perform > heuristic checks that a proposed role id is not already a user id. > Since the check can not not reliable, we should also add a check to > prohibit conncting with a user id that is a known role id. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.