Daniel John Debrunner wrote:
I'm still thinking about this 'secureMode' approach and the interaction with the existing authentication model. One issue I do have is the name of the attribute, 'secureMode'. I don't believe that the current grant/revoke syntax makes Derby completely secure, thus this attribute may mislead people. Note sure I have a better name though. :-( Dan.
I agree, a property/attribute called "secureMode" will most likely become quite misleading in the long run, as there are other dimensions to derby security than just GRANT/REVOKE.
I have not followed this discussion closely, but unless the property values have to be "true" / "false", I propose something like this:
Property/attribute name: "sqlAuth" (or "sqlAuthorization", just "authorization", or similar).
Legal values: "sqlStandard", "derbyLegacy" (or whatever you see fit). -- John
