[
https://issues.apache.org/jira/browse/DERBY-3223?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dag H. Wanvik updated DERBY-3223:
---------------------------------
Attachment: derby-3223-revocation-logic-1.stat
derby-3223-revocation-logic-1.diff
Uploading the next patch, derby-3223-revocation-logic-1, which
invalidates view, constraints, triggers and prepared statements when
revoked. Prepared statements are also (still) recompiled when the
current role changes; I plan to move to invalidating just the
activations in a follow-up patch.
It is as yet unpolished, but I am going on vacation and post it now in
the hope that someone will find time to have a look at it. The patch
still contains some tracing code which can be seen when running
RolesConferredPrivilegesTest and is definitely not for commit. Some
refactoring is also called for, especially in DDLConstantAction.
> SQL roles: make use of privileges granted to roles in actual privilege
> checking
> -------------------------------------------------------------------------------
>
> Key: DERBY-3223
> URL: https://issues.apache.org/jira/browse/DERBY-3223
> Project: Derby
> Issue Type: Task
> Components: Security, SQL
> Reporter: Dag H. Wanvik
> Assignee: Dag H. Wanvik
> Fix For: 10.5.0.0
>
> Attachments: derby-3223-1a.diff, derby-3223-1a.stat,
> derby-3223-1b.diff, derby-3223-1b.stat, derby-3223-1c.diff,
> derby-3223-1c.stat, derby-3223-1d.diff, derby-3223-1d.stat,
> derby-3223-activate-roles-1.diff, derby-3223-activate-roles-1.stat,
> derby-3223-activate-roles-2.diff, derby-3223-activate-roles-2.stat,
> derby-3223-activate-roles-2b.diff, derby-3223-activate-roles-2b.stat,
> derby-3223-revise-iterator-api-b.diff, derby-3223-revise-iterator-api-b.stat,
> derby-3223-revise-iterator-api.diff, derby-3223-revise-iterator-api.stat,
> derby-3223-revocation-logic-1.diff, derby-3223-revocation-logic-1.stat,
> roles.sql, roles2.sql, roles3.sql
>
>
> Pushing out to 10.5
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
