The null ointer exception seems to come from reading the table or column
map. Can you put a breakpoint in SQLBuilder.java:497 and see whether the
table or the column cannot be found (and why it is not found)?
Thomas
> Ok so I was trying to make our site a little safer from sql injections,
> so I made a database connection that connects with a user that only has
> SELECT permissions. And edited Criteria like such
>
> public Criteria()
> {
> this(DEFAULT_CAPACITY);
> this.setDbName("readonlydatabase");
> }
>
> Now it seems to work for must things, but a couple queries fail with
>
> throws java.lang.Exception java.lang.NullPointerException
> at org.apache.torque.util.SQLBuilder.processOrderBy
(SQLBuilder.java:497)
> at
> org.apache.torque.util.SQLBuilder.buildQueryClause(SQLBuilder.java:302)
> at org.apache.torque.util.BasePeer.createQuery(BasePeer.java:730)
>
> This error disappears as soon as I let the criteria use a database
> connection with write privileges.
> I know the user that it connects with has select privileges on every
> public table in the database.
>
> Does criteria need update privileges to work or something?
>
> The query the criteria constructs work fine when I connect as the
> readonly user and run it manually.
>
> Any thoughts?
>
> Thanks
>
> --
> Sheldon Ross
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: torque-user-unsubscr...@db.apache.org
> For additional commands, e-mail: torque-user-h...@db.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: torque-user-unsubscr...@db.apache.org
For additional commands, e-mail: torque-user-h...@db.apache.org
