[
https://issues.apache.org/jira/browse/DERBY-3090?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12538779
]
Dag H. Wanvik commented on DERBY-3090:
--------------------------------------
I guess the problem was that I tried to use a seemingly generic error
message "AUTH_NOT_DATABASE_OWNER", but the message text turned out to be
specific to CREATE SCHEMA.
> DROP SCHEMA by an unauthorized user under sqlAuthorization gives confusing
> error message
> ----------------------------------------------------------------------------------------
>
> Key: DERBY-3090
> URL: https://issues.apache.org/jira/browse/DERBY-3090
> Project: Derby
> Issue Type: Bug
> Components: Security, SQL
> Affects Versions: 10.2.1.6, 10.2.2.0, 10.3.1.4
> Reporter: Dag H. Wanvik
> Priority: Minor
>
> When attempting to drop a schema as a non-authorized user (i.e. not database
> owner), this happens:
> > drop role dd;
> ERROR 42508: User 'KNUT' can not create schema 'DD'. Only database owner
> could issue this statement.
> java.sql.SQLSyntaxErrorException: User 'KNUT' can not create schema 'DD'.
> Only database owner could issue this statement.
> The error text "create schema" is misleading, it should be "drop schema".
> The reason is that the 42508 (AUTH_NO_ACCESS_NOT_OWNER) is shared between
> create and drop schema actions in StatementSchemaPermission.
> Either the text should be more generic, or separate messages used.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
