db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dag H. Wanvik (JIRA)" <j...@apache.org>
Subject [jira] Updated: (DERBY-3722) Add circularity check for the GRANT role statement
Date Sat, 14 Jun 2008 22:45:48 GMT

     [ https://issues.apache.org/jira/browse/DERBY-3722?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Dag H. Wanvik updated DERBY-3722:
---------------------------------

    Attachment: derby-3722-1.stat
                derby-3722-1.diff

This patch implements circularity checking for granting roles and adds new tests
for this to RolesTest. It also contains some minor cleanups (renaming and javadoc).

It does this by constructing an in-memory map of the roles grant relations  and
providing an iterator over this. The intention is that this be useful also when
checking permissions conferred by roles in later patches.

Running regressions.

> Add circularity check for the GRANT role statement
> --------------------------------------------------
>
>                 Key: DERBY-3722
>                 URL: https://issues.apache.org/jira/browse/DERBY-3722
>             Project: Derby
>          Issue Type: Sub-task
>          Components: Security, SQL
>            Reporter: Dag H. Wanvik
>             Fix For: 10.5.0.0
>
>         Attachments: derby-3722-1.diff, derby-3722-1.stat
>
>
> When a role is granted to another role (with the GRANT <role> statement), we need
to check that the grant relation does not give rise to a circularity. This is described in
Section 12.5, Syntax rule 1 of ISO/IEC 9075-2 2003.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message