[ 
https://issues.apache.org/jira/browse/DERBY-2207?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12563682#action_12563682
 ] 

Daniel John Debrunner commented on DERBY-2207:
----------------------------------------------

> I think the changing of the current role should invalidate the (activation 
> of) the prepared statement here, forcing a re-check at the second execute. 

Is this some new mechanism, because today prepared statements are invalidated, 
not activations?

I think invalidating the prepared statements is a bad plan. A SET ROLE will 
become a common operation, especially for routines. Having a routine execution 
invalidate any prepared statements will cause tremendous performance problems 
as all users executing the routine will be constantly invalidating each other's 
plans.

I agree dropping a role should perform the invalidations, but not resetting a 
role.

> Improve usability of Derby's client/server security by implementing ANSI Roles
> ------------------------------------------------------------------------------
>
>                 Key: DERBY-2207
>                 URL: https://issues.apache.org/jira/browse/DERBY-2207
>             Project: Derby
>          Issue Type: New Feature
>          Components: Security, SQL
>            Reporter: Rick Hillegas
>            Assignee: Dag H. Wanvik
>         Attachments: spec.html, spec.html, spec.html, spec.html, spec.html, 
> spec.html
>
>
> Implementing ANSI Roles will make it easier to manage security for multi-user 
> applications with high user turnover.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to