[ 
https://issues.apache.org/jira/browse/DERBY-6434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Rick Hillegas updated DERBY-6434:
---------------------------------

    Attachment: derby-6434-01-aa-correctInsertPrivs.diff

Attaching derby-6434-01-aa-correctInsertPrivs.diff. This patch corrects 
privilege checking for INSERT statements. I will run the full tests to shake 
out additional problems.

The patch introduces a new VisitableFilter, which essentially short-circuits 
the addition of more permissions checks. The filter is applied after the 
INSERT's query source has been bound but before constraints, triggers, and 
generation expressions are attached.



Touches the following files:

-----------------

A       java/engine/org/apache/derby/iapi/sql/compile/IgnoreFilter.java

The new, short-circuiting filter.

-----------------

M       java/engine/org/apache/derby/impl/sql/compile/InsertNode.java

Use the short-circuiting filter after binding the query expression.

-----------------

M       
java/testing/org/apache/derbyTesting/functionTests/tests/lang/GrantRevokeDDLTest.java

New tests.


> Incorrect privileges may be required for INSERT and DELETE statements.
> ----------------------------------------------------------------------
>
>                 Key: DERBY-6434
>                 URL: https://issues.apache.org/jira/browse/DERBY-6434
>             Project: Derby
>          Issue Type: Bug
>          Components: SQL
>    Affects Versions: 10.11.0.0
>            Reporter: Rick Hillegas
>         Attachments: derby-6434-01-aa-correctInsertPrivs.diff
>
>
> This issue is a place to address problems with INSERT and DELETE statements 
> similar to the problems affecting UPDATE statements recorded on DERBY-6429. 
> In particular, DERBY-6432 and DERBY-6433 list some of the problems with 
> INSERT statements.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Reply via email to