From derby-dev-return-60845-apmail-db-derby-dev-archive=db.apache.org@db.apache.org Sat Jun 14 22:46:10 2008 Return-Path: Delivered-To: apmail-db-derby-dev-archive@www.apache.org Received: (qmail 96007 invoked from network); 14 Jun 2008 22:46:10 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 14 Jun 2008 22:46:10 -0000 Received: (qmail 98860 invoked by uid 500); 14 Jun 2008 22:46:11 -0000 Delivered-To: apmail-db-derby-dev-archive@db.apache.org Received: (qmail 98825 invoked by uid 500); 14 Jun 2008 22:46:11 -0000 Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: Delivered-To: mailing list derby-dev@db.apache.org Received: (qmail 98814 invoked by uid 99); 14 Jun 2008 22:46:11 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 14 Jun 2008 15:46:11 -0700 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 14 Jun 2008 22:45:29 +0000 Received: from brutus (localhost [127.0.0.1]) by brutus.apache.org (Postfix) with ESMTP id 12D7D234C143 for ; Sat, 14 Jun 2008 15:45:48 -0700 (PDT) Message-ID: <795572515.1213483548076.JavaMail.jira@brutus> Date: Sat, 14 Jun 2008 15:45:48 -0700 (PDT) From: "Dag H. Wanvik (JIRA)" To: derby-dev@db.apache.org Subject: [jira] Updated: (DERBY-3722) Add circularity check for the GRANT role statement In-Reply-To: <371903885.1213482827952.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/DERBY-3722?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Dag H. Wanvik updated DERBY-3722: --------------------------------- Attachment: derby-3722-1.stat derby-3722-1.diff This patch implements circularity checking for granting roles and adds new tests for this to RolesTest. It also contains some minor cleanups (renaming and javadoc). It does this by constructing an in-memory map of the roles grant relations and providing an iterator over this. The intention is that this be useful also when checking permissions conferred by roles in later patches. Running regressions. > Add circularity check for the GRANT role statement > -------------------------------------------------- > > Key: DERBY-3722 > URL: https://issues.apache.org/jira/browse/DERBY-3722 > Project: Derby > Issue Type: Sub-task > Components: Security, SQL > Reporter: Dag H. Wanvik > Fix For: 10.5.0.0 > > Attachments: derby-3722-1.diff, derby-3722-1.stat > > > When a role is granted to another role (with the GRANT statement), we need to check that the grant relation does not give rise to a circularity. This is described in Section 12.5, Syntax rule 1 of ISO/IEC 9075-2 2003. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.