[ http://issues.apache.org/jira/browse/DERBY-1582?page=comments#action_12427272 ] Deepa Remesh commented on DERBY-1582: -------------------------------------
Thanks Satheesh for clarifying that we cannot revoke privileges from the database owner. I was reworking the patch and adding some more tests for this to lang/grantRevokeDDL.sql. I am adding cases where we specify more than one grantees/actions in the revoke statement. I would like to confirm my understanding of when to raise warnings when there are multiple grantees/actions ? This is the relevant part from the SQL spec: " 17) If the <revoke statement> is a <revoke privileges statement>, then: a) For every combination of <grantee> and <action> on O specified in <privileges>, if there is no corresponding privilege descriptor in the set of identified privilege descriptors, then a completion condition is raised: warning — privilege not revoked. b) If ALL PRIVILEGES was specified, then for each <grantee>, if no privilege descriptors were identified, then a completion condition is raised: warning — privilege not revoked. " Does this mean: 1) raise a warning if we find that at least one of the grantee/action combination or at least one grantee if it is "revoke ALL PRIVILEGES" did not have a matching privilege descriptor. 2) raise a warning if we have not found any privilege descriptors that are revoked after looking at all combinations 3) something else ? I think it is 1) and creating the new patch based on this. Is this understanding correct? > REVOKE statement does not generate a warning when no privileges are revoked. > ---------------------------------------------------------------------------- > > Key: DERBY-1582 > URL: http://issues.apache.org/jira/browse/DERBY-1582 > Project: Derby > Issue Type: Bug > Components: SQL > Affects Versions: 10.2.0.0 > Reporter: Daniel John Debrunner > Assigned To: Deepa Remesh > Attachments: d1582_v1.diff, d1582_v1.status > > > SQL 2003 standard, section 12.7 <revoke statement>, item 17 under general > rules indicates the statement completes with the condition 'warning ? > privilege not revoked.' when no matching privilege is revoked. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira
