Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm
Precedence: bulk
Reply-To: <derby-dev@db.apache.org>
Message-ID: <989832394.1214429085058.JavaMail.jira@brutus>
Date: Wed, 25 Jun 2008 14:24:45 -0700 (PDT)
From: "Dag H. Wanvik (JIRA)" <jira@apache.org>
To: derby-dev@db.apache.org
Subject: [jira] Updated: (DERBY-3736) Revoking a column level privilege from
 a user, a prepared statement relying on that privilege can still be
 executed
In-Reply-To: <1779304038.1214428485040.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/DERBY-3736?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Dag H. Wanvik updated DERBY-3736:
---------------------------------

    Attachment: GrantRevokeDDLTest.diff
                column-level.sql
                table-level.sql

Attaching a repro, column-level.sql which shows the issue.
For contrast I attach table-level.sql which fails as expected.

I also attach a diff I made to GrantRevokeDDLTest with a test case
which can be used to reproduce.

I ran the scripts with this incantation
java -Dderby.user.dag=wanvik -Dderby.user.donald=duck -Dderby.connection.requireAuthentication=true -Dderby.database.sqlAuthorization=true -jar derbyrun.jar ij < script


> Revoking a column level privilege from a user, a prepared statement relying on that privilege can still be executed 
> --------------------------------------------------------------------------------------------------------------------
>
>                 Key: DERBY-3736
>                 URL: https://issues.apache.org/jira/browse/DERBY-3736
>             Project: Derby
>          Issue Type: Bug
>          Components: Security, SQL
>    Affects Versions: 10.3.1.4, 10.3.2.1, 10.3.3.0, 10.4.1.3
>            Reporter: Dag H. Wanvik
>         Attachments: column-level.sql, GrantRevokeDDLTest.diff, table-level.sql
>
>
> When a table level SELECT privilege is revoked, a dependent prepared statement is 
> invalidated and can no longer be executed, but in the case of a column level privilege
> SELECT privilege, the dependent prepared statement can still be executed.
> This works as expected in 10.2, but does not work in all 10.3 and 10.4 releases.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.