From derby-dev-return-61522-apmail-db-derby-dev-archive=db.apache.org@db.apache.org Wed Jul 09 09:26:30 2008 Return-Path: Delivered-To: apmail-db-derby-dev-archive@www.apache.org Received: (qmail 26828 invoked from network); 9 Jul 2008 09:26:30 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 9 Jul 2008 09:26:30 -0000 Received: (qmail 36071 invoked by uid 500); 9 Jul 2008 09:26:23 -0000 Delivered-To: apmail-db-derby-dev-archive@db.apache.org Received: (qmail 36034 invoked by uid 500); 9 Jul 2008 09:26:23 -0000 Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: Delivered-To: mailing list derby-dev@db.apache.org Received: (qmail 36004 invoked by uid 99); 9 Jul 2008 09:26:22 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 09 Jul 2008 02:26:22 -0700 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 09 Jul 2008 09:25:39 +0000 Received: from brutus (localhost [127.0.0.1]) by brutus.apache.org (Postfix) with ESMTP id A6E27234C15C for ; Wed, 9 Jul 2008 02:25:31 -0700 (PDT) Message-ID: <2138044653.1215595531682.JavaMail.jira@brutus> Date: Wed, 9 Jul 2008 02:25:31 -0700 (PDT) From: "Dag H. Wanvik (JIRA)" To: derby-dev@db.apache.org Subject: [jira] Commented: (DERBY-3736) Revoking a column level privilege from a user, a prepared statement relying on that privilege can still be executed In-Reply-To: <1779304038.1214428485040.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/DERBY-3736?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12611953#action_12611953 ] Dag H. Wanvik commented on DERBY-3736: -------------------------------------- The errors I saw on the 10.4 branch running regressions were due to running with classes, not the DERBY jar files in CLASSPATH. > Revoking a column level privilege from a user, a prepared statement relying on that privilege can still be executed > -------------------------------------------------------------------------------------------------------------------- > > Key: DERBY-3736 > URL: https://issues.apache.org/jira/browse/DERBY-3736 > Project: Derby > Issue Type: Bug > Components: Security, SQL > Affects Versions: 10.3.1.4, 10.3.2.1, 10.3.3.0, 10.4.1.3 > Reporter: Dag H. Wanvik > Assignee: Dag H. Wanvik > Fix For: 10.3.3.1, 10.4.1.4, 10.5.0.0 > > Attachments: column-level.sql, derby-3736.diff, derby-3736.stat, derby-3736b.diff, derby-3736b.stat, GrantRevokeDDLTest.diff, table-level.sql > > > When a table level SELECT privilege is revoked, a dependent prepared statement is > invalidated and can no longer be executed, but in the case of a column level privilege > SELECT privilege, the dependent prepared statement can still be executed. > This works as expected in 10.2, but does not work in all 10.3 and 10.4 releases. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.