Hi Yip,
Thanks for the analysis. Only one of these issues (1686) turns up on our
lists of Blocker and Urgent features which gate 10.2. I suspect that's
an oversight. In your opinion, which of these issues must be fixed
before we release 10.2?
Thanks,
-Rick
Yip Ng wrote:
Here is a summary of the remaining open or in-progress JIRA issues for
DERBY-464 (Grant and Revoke). It would be good to start cleaning them
up if some of these issues have already been resolved to see where
DERBY-464 currently is at.
New Feature:
DERBY-1539 A trigger should be dropped when a privilege required by
the trigger is revoked.
DERBY-1611 A view should be dropped when a privilege required by the
view is revoked.
DERBY-1612 A constraint should be dropped when a privilege required
by the constraint is revoked.
DERBY-1643 A "revoke execute ... restrict" should fail if there are
dependent objects on the execute privilege
DERBY-1646 Documentation to address Grant/Revoke Authorization for
views/triggers/constraints/routines(DERBY-1330)
Bug:
DERBY-1538 Unexpected behavior on self privilege revocation
DERBY-1582 REVOKE statement does not generate a warning when no
privileges are revoked.
DERBY-1583 With grant revoke enabled, defining a trigger whose
actions updates a table (from different schema) results in NPE
DERBY-1589 CREATE TABLE throws NullPointerException in Derby SQL
Standard Authorization after DROPs and REVOKES
DERBY-1686 Grant/Revoke: Attempt to GRANT access to another user on a
VIEW, created by the current user with only SELECT
privilege on the base table does not fail
DERBY-1708 Unprivileged user can perform lock table statement on a
table which he/she does not have any access rights
DERBY-1716 Revoking select privilege from a user times out when that
user still have a cursor open.
DERBY-1724 Executing grant statement within a transaction leads to a
NPE later when the db owner attempts to update a table
DERBY-1729 Invoking Java stored procedure that contains GRANT or
REVOKE statement with CONTAINS SQL from a trigger should
fail.
Sub-task:
DERBY-1330 Provide runtime privilege checking for grant/revoke
functionality
Task:
DERBY-1522 Switch(if supported) from Derby Authorization to Derby SQL
Standard Authorization needs to be tested
Improvement:
DERBY-1521 Upgrade test needs to be enhanced to test grant revoke
