Return-Path: Delivered-To: apmail-db-derby-dev-archive@www.apache.org Received: (qmail 94107 invoked from network); 2 Jul 2009 19:07:36 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 2 Jul 2009 19:07:36 -0000 Received: (qmail 97759 invoked by uid 500); 2 Jul 2009 19:07:46 -0000 Delivered-To: apmail-db-derby-dev-archive@db.apache.org Received: (qmail 97714 invoked by uid 500); 2 Jul 2009 19:07:46 -0000 Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: Delivered-To: mailing list derby-dev@db.apache.org Received: (qmail 97695 invoked by uid 99); 2 Jul 2009 19:07:44 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 02 Jul 2009 19:07:44 +0000 X-ASF-Spam-Status: No, hits=2.2 required=10.0 tests=HTML_MESSAGE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: local policy) Received: from [76.13.9.103] (HELO web65711.mail.ac4.yahoo.com) (76.13.9.103) by apache.org (qpsmtpd/0.29) with SMTP; Thu, 02 Jul 2009 19:07:33 +0000 Received: (qmail 36898 invoked by uid 60001); 2 Jul 2009 19:07:12 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1246561632; bh=rBS0PRfCsQEGinMUuNpuHPCQNv36cjmxhmWHQzy2f4A=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=au+GtrFsUX7tsJhk5+ElKGHKkg2Yj9E1WFnOLiB7Id8jLXc4F5HHM+6UFpTXdRQeZuzNksxK+w6nWqj6O7lBL2SOFsckLT6UFL9pv9Zdqv3i0KVOw7Ga+nd8VcNH5Fn++5hzyHfoAvtCUVXQ/3aEGxU0qYt682reeoF5VeCJGYE= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=3khLlUBRPQUUmF7ZfDGhM8ScLiB5ICV46uOh08n2pdpXyfkuNMmWwy0XWtAcDRItUXjJkP0/EA/F2X5bRujqwz+I6sV3DpmsDmgt+3hp/sCTzTGtQkjACVY5Ojt+liOSd39DK8eIFSQdEc/gvx6UsFF70UhDNuv2pkECxmFFe0o=; Message-ID: <20755.26129.qm@web65711.mail.ac4.yahoo.com> X-YMail-OSG: GsGmVa0VM1mwA23v0QEXdETIP4kfNPJVh.YN.WLy5Vh1KHMudH5OJK9Qc562q2TVJ70vbRvf8w_22rTJlYdEjn0AvkOBbtvFWU2O0FMqRFnfdx8Cn4D5hcqheO8a5bM3hN9u0WA.fgJfwxGQ8p0rn35XdTf7fqeR38uyfYE0rQH6w5Ff5eOwj0nlGCSCKCJbLpuWzn4buDXb7GEGmn.tRC9NT99pk15hTZKqVZ7f7adg5QWNqg3Vc93ACgFN.3YywPiOMDmW72DbZYayPQks.AFmzRlze4d1PuBTWFSWnLNQ8oiM6yqJx3yPESHeSXGUGZO4Q2wn Received: from [24.4.13.182] by web65711.mail.ac4.yahoo.com via HTTP; Thu, 02 Jul 2009 12:07:11 PDT X-Mailer: YahooMailRC/1357.22 YahooMailWebService/0.7.289.15 References: <289769366.1246560587438.JavaMail.jira@brutus> Date: Thu, 2 Jul 2009 12:07:11 -0700 (PDT) From: Lily Wei Subject: Re: [jira] Created: (DERBY-4296) Derby should require EXECUTE privilege on SYSCS_UTIL.SYSCS_INPLACE_COMPRESS_TABLE before allowing users to execute it To: derby-dev@db.apache.org In-Reply-To: <289769366.1246560587438.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-1841093598-1246561631=:26129" X-Virus-Checked: Checked by ClamAV on apache.org --0-1841093598-1246561631=:26129 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Hi Mamta:=0A=A0=A0=A0=A0 Thank you so much for looking at these. I am a lit= tle confuse. If we don't check EXECUTE privilege on SYSCS_UTIL.SYSCS_INPLAC= E_COMPRESS_TABLE, shouldn't use allow to execute this procedure? For my exa= mple, user 'BACKUP' do have the execute privilege on SYSCS_UTIL.SYSCS_INPLA= CE_COMPRESS_TABLE. If derby does not check EXECUTE privilege for SYSCS_UTIL= .SYSCS_INPLACE_COMPRESS_TABLE, why we are throwing 38000 Error.=A0 I can un= derstand if we just don't want to allow such operation. =0A=A0=0AThanks,Lil= y =0A=0A=0A=0A=0A________________________________=0AFrom: Mamta A. Satoor (= JIRA) =0ATo: derby-dev@db.apache.org=0ASent: Thursday, Jul= y 2, 2009 11:49:47 AM=0ASubject: [jira] Created: (DERBY-4296) Derby should = require EXECUTE privilege on SYSCS_UTIL.SYSCS_INPLACE_COMPRESS_TABLE before= allowing users to execute it=0A=0ADerby should require EXECUTE privilege o= n SYSCS_UTIL.SYSCS_INPLACE_COMPRESS_TABLE before allowing users to execute = it=0A----------------------------------------------------------------------= -----------------------------------------------=0A=0A=A0 =A0 =A0 =A0 =A0 = =A0 =A0 =A0 Key: DERBY-4296=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 URL: https://= issues.apache.org/jira/browse/DERBY-4296=0A=A0 =A0 =A0 =A0 =A0 =A0 Project:= Derby=0A=A0 =A0 =A0 =A0 =A0 Issue Type: Bug=0A=A0 =A0 =A0 =A0 =A0 Componen= ts: SQL=0A=A0 =A0 =A0 =A0 =A0 =A0 Reporter: Mamta A. Satoor=0A=0A=0AWhile r= esearching on DERBY-4295, I found that Derby is not requiring a user to hav= e execute privileges on SYSCS_UTIL.SYSCS_INPLACE_COMPRESS_TABLE which I thi= nk should be required before a user can use it to try compressing a table. = At least, that is what we require for SYSCS_UTIL.SYSCS_EXPORT_TABLE. May be= there are other procedures too for which we do not do this check. That res= earch can be done when we decide to fix this jira entry.=0A=0A-- =0AThis me= ssage is automatically generated by JIRA.=0A-=0AYou can reply to this email= to add a comment to the issue online.=0A=0A=0A --0-1841093598-1246561631=:26129 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable

Hi Mamt= a:

=0A

     Thank you so much for looking at these. I= am a little confuse. If we don't check EXECUTE privilege on SYSCS_UTIL.SYS= CS_INPLACE_COMPRESS_TABLE, shouldn't use allow to execute this procedure? F= or my example, user 'BACKUP' do have the execute privilege on SYSCS_UTIL.SY= SCS_INPLACE_COMPRESS_TABLE. If derby does not check EXECUTE privilege for S= YSCS_UTIL.SYSCS_INPLACE_COMPRESS_TABLE, why we are throwing 38000 Error.&nb= sp; I can understand if we just don't want to allow such operation.

=0A

 = ;

=0A

Lily=0A

 
=0A
=0A
=0A
=0AFrom: Mamta A. Satoor (JIRA) <jira@apa= che.org>
To: derby-de= v@db.apache.org
Sent: Th= ursday, July 2, 2009 11:49:47 AM
Su= bject: [jira] Created: (DERBY-4296) Derby should require EXECUTE= privilege on SYSCS_UTIL.SYSCS_INPLACE_COMPRESS_TABLE before allowing users= to execute it

Derby should require EXECUTE privilege on SYSC= S_UTIL.SYSCS_INPLACE_COMPRESS_TABLE before allowing users to execute it
= ---------------------------------------------------------------------------= ------------------------------------------

      &nbs= p;         Key: DERBY-4296
      &nbs= p;         URL: https://issues.apache.org/jira/browse/DERBY-4296
&n= bsp;           Project: Derby
    &nb= sp;     Issue Type: Bug
          Com= ponents: SQL
            Reporter: Mamta A= . Satoor


While researching on DERBY-4295, I found that Derby is = not requiring a user to have execute privileges on SYSCS_UTIL.SYSCS_INPLACE= _COMPRESS_TABLE which I think should be required before a user can use it t= o try compressing a table. At least, that is what we require for SYSCS_UTIL= .SYSCS_EXPORT_TABLE. May be there are other procedures too for which we do = not do this check. That research can be done when we decide to fix this jir= a entry.

--
This message is automatically generated by JIRA.
= -
You can reply to this email to add a comment to the issue online.
<= BR>

=0A=0A --0-1841093598-1246561631=:26129--