db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rick Hillegas (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (DERBY-6434) Incorrect privileges may be required for INSERT and DELETE statements.
Date Thu, 02 Jan 2014 19:39:50 GMT

     [ https://issues.apache.org/jira/browse/DERBY-6434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

Rick Hillegas updated DERBY-6434:

    Attachment: derby-6434-01-aa-correctInsertPrivs.diff

Attaching derby-6434-01-aa-correctInsertPrivs.diff. This patch corrects privilege checking
for INSERT statements. I will run the full tests to shake out additional problems.

The patch introduces a new VisitableFilter, which essentially short-circuits the addition
of more permissions checks. The filter is applied after the INSERT's query source has been
bound but before constraints, triggers, and generation expressions are attached.

Touches the following files:


A       java/engine/org/apache/derby/iapi/sql/compile/IgnoreFilter.java

The new, short-circuiting filter.


M       java/engine/org/apache/derby/impl/sql/compile/InsertNode.java

Use the short-circuiting filter after binding the query expression.


M       java/testing/org/apache/derbyTesting/functionTests/tests/lang/GrantRevokeDDLTest.java

New tests.

> Incorrect privileges may be required for INSERT and DELETE statements.
> ----------------------------------------------------------------------
>                 Key: DERBY-6434
>                 URL: https://issues.apache.org/jira/browse/DERBY-6434
>             Project: Derby
>          Issue Type: Bug
>          Components: SQL
>    Affects Versions:
>            Reporter: Rick Hillegas
>         Attachments: derby-6434-01-aa-correctInsertPrivs.diff
> This issue is a place to address problems with INSERT and DELETE statements similar to
the problems affecting UPDATE statements recorded on DERBY-6429. In particular, DERBY-6432
and DERBY-6433 list some of the problems with INSERT statements.

This message was sent by Atlassian JIRA

View raw message