GitHub user robertamarton opened a pull request:
https://github.com/apache/incubator-trafodion/pull/69
[TRAFODION-353][TRAFODION-1200][TRAFODION-1214][TRAFODION-12]
Privilege manager fixes and feature updates including LDAP
configuration changes, column level privilege updates, and
DB__ROOTROLE updates.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/robertamarton/incubator-trafodion master
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/incubator-trafodion/pull/69.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #69
----
commit 23e24b4a0b7657b2dd53ff2c3dff70f071d32ce4
Author: Roberta Marton <[email protected]>
Date: 2015-08-28T15:09:08Z
Changes for JIRA TRAFODION-353, 1200, 1214, and 12
1. JIRA Trafodion-353 (Launchpad 1324716):
.traf_authentication_config syntax errors on blank
corrected
2. JIRA Trafodion-1200 (Launchpad 1447336):
DB__ROOTROLE now equivalent to DB__ROOT (completed
in this delivery).
3. JIRA Trafodion-1214 (Launchpad 1450122):
LDAPSSL (level 1) now uses TLS_CACERTFILE.
4. JIRA Trafodion-12 - grant revoke enhancements including:
Six new component-level privileges: DML_DELETE, DML_INSERT,
DML_REFERENCES, DML_SELECT, DML_UPDATE, and DML_USAGE.
Authorization IDs granted a DML privilege at the system
(SQL_OPERATIONS component-level) have the privilege
on all objects in the Trafodion database.
Users who have the MANAGE_PRIVILEGE component-level privilege
can also grant "WITH GRANT OPTION" any privilege they have.
In addition, they implicitly grant on behalf of the owner when
the GRANTED BY clause is omitted. (Mimics DB__ROOT behavior.)
Tracing had been added (but not yet enabled) to better debug
grant and revoke problems
Column level privilege enforcement has been added and column
level privileges support is enabled.
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
