[ http://issues.apache.org/jira/browse/DERBY-1543?page=all ]

Satheesh Bandaram updated DERBY-1543:
-------------------------------------

    Attachment: Derby1543.diff

This patch should address these two left over items in GRANT/REVOKE 
implementation. Some implementation notes:

1) Now Derby raises an SQLWarning when SQL authorization is ON without 
authentication at connect time. This is done by checking if 
AuthenticationService being used is an instance of 
NoneAuthenticationServiceImpl. Since this is the default authentication service 
with Derby, it should always be present.

2) Added code to drop permission descriptors from SYSTABLEPERMS, SYSCOLPERMS 
and SYSROUTINEPERMS when the object they provide permission for is dropped. 
This includes tables, views and routines and these descriptors needs to be 
removed from permissionCache as well.

I have tested the cases when PermissionsDescriptors are in cache also.

Passed GrantRevoke tests. Will run derbyAll tonight and submit changes over the 
weekend.


> Address two remaining issues with GRANT/REVOKE functionality: 1) Add warning 
> when sqlAuthorization is on with authentication off 2) Drop permission 
> descriptors when objects they cover are dropped.
> ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: DERBY-1543
>                 URL: http://issues.apache.org/jira/browse/DERBY-1543
>             Project: Derby
>          Issue Type: Sub-task
>          Components: SQL
>    Affects Versions: 10.2.0.0
>            Reporter: Satheesh Bandaram
>         Assigned To: Satheesh Bandaram
>             Fix For: 10.2.0.0
>
>         Attachments: DERBY-1543.out, Derby1543.diff
>
>
> Address two remaining sub-tasks:
> Add warning when sqlAuthorization is on with authentication off: This is a 
> precautionary warning, since sqlAuthorization doesn't mean much without 
> authentication being ON.
> Drop permission descriptors when objects they cover are dropped: This applies 
> to tables, routines. When these objects are dropped, automatically drop their 
> permisson descriptors.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to