[ 
https://issues.apache.org/jira/browse/DERBY-2207?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12563677#action_12563677
 ] 

Daniel John Debrunner commented on DERBY-2207:
----------------------------------------------

Section 4.34.1.1 says the SQL-session role name is a property of the 
authorization stack and that is a property of the SQL-session context.

Section 10.4 says a routine invocation pushes a new  SQL-session context.

So I think the role still needs to be reverted when a routine is completed.

> Improve usability of Derby's client/server security by implementing ANSI Roles
> ------------------------------------------------------------------------------
>
>                 Key: DERBY-2207
>                 URL: https://issues.apache.org/jira/browse/DERBY-2207
>             Project: Derby
>          Issue Type: New Feature
>          Components: Security, SQL
>            Reporter: Rick Hillegas
>            Assignee: Dag H. Wanvik
>         Attachments: spec.html, spec.html, spec.html, spec.html, spec.html, 
> spec.html
>
>
> Implementing ANSI Roles will make it easier to manage security for multi-user 
> applications with high user turnover.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to