db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dag H. Wanvik (JIRA)" <j...@apache.org>
Subject [jira] Issue Comment Edited: (DERBY-3223) SQL roles: make use of privileges granted to roles in actual privilege checking
Date Wed, 27 Aug 2008 22:41:44 GMT

    [ https://issues.apache.org/jira/browse/DERBY-3223?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12626347#action_12626347
] 

dagw edited comment on DERBY-3223 at 8/27/08 3:40 PM:
---------------------------------------------------------------

Uploading #2 of this patch which replaces #1 (derby-3223-invalidate-activations-2.diff).

This changes the Dependent and Depandable implementations in GenericActivationHolder with
comments that they are dummies, and sanity check we won't get there.

Removed the invalidation with action INTERNAL_RECOMPILE_REQUEST from DropRoleConstantAction/RevoekRoleConstantAction
and verified that they are ot needed.

I also added a new testcase (testOpenRs) for verifying that an already open result set can
still be read even if the required privileges of the statements are no longer in place (lost
while we access the rs).

Re-running regressions.

      was (Author: dagw):
    Uploading #2 of this patch which replaces #1 (/root/derby-3223-invalidate-activations-2.diff).

This changes the Dependent and Depandable implementations in
GenericActivationHolder with comments that they are dummies,
and sanity check we won't get there.

Removed the invalidation with action INTERNAL_RECOMPILE_REQUEST
from DropRoleConstantAction/RevoekRoleConstantAction and verified that they
are not needed.

I also added a new testcase (testOpenRs) for verifying that an already open open result set
can still be read even if the required privileges of the statements
are no longer in place (lost while we access the rs).

Re-running regressions.
  
> SQL roles: make use of privileges granted to roles in actual privilege checking
> -------------------------------------------------------------------------------
>
>                 Key: DERBY-3223
>                 URL: https://issues.apache.org/jira/browse/DERBY-3223
>             Project: Derby
>          Issue Type: Task
>          Components: Security, SQL
>            Reporter: Dag H. Wanvik
>            Assignee: Dag H. Wanvik
>             Fix For: 10.5.0.0
>
>         Attachments: derby-3223-1a.diff, derby-3223-1a.stat, derby-3223-1b.diff, derby-3223-1b.stat,
derby-3223-1c.diff, derby-3223-1c.stat, derby-3223-1d.diff, derby-3223-1d.stat, derby-3223-activate-roles-1.diff,
derby-3223-activate-roles-1.stat, derby-3223-activate-roles-2.diff, derby-3223-activate-roles-2.stat,
derby-3223-activate-roles-2b.diff, derby-3223-activate-roles-2b.stat, derby-3223-invalidate-activations-1.diff,
derby-3223-invalidate-activations-1.stat, derby-3223-invalidate-activations-2.diff, derby-3223-invalidate-activations-2.stat,
derby-3223-revise-iterator-api-b.diff, derby-3223-revise-iterator-api-b.stat, derby-3223-revise-iterator-api.diff,
derby-3223-revise-iterator-api.stat, derby-3223-revocation-logic-1.diff, derby-3223-revocation-logic-1.stat,
derby-3223-revocation-logic-2.diff, derby-3223-revocation-logic-2.stat, derby-3223-revocation-logic-2.txt,
derby-3223-revocation-logic-3.diff, derby-3223-revocation-logic-3.stat, derby-3223-revocation-logic-4.diff,
derby-3223-revocation-logic-4.stat, derby-3223-revocation-logic-5.diff, derby-3223-revocation-logic-5.stat,
roles.sql, roles2.sql, roles3.sql
>
>
> Pushing out to 10.5

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message