[ 
https://issues.apache.org/jira/browse/DERBY-5591?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13273407#comment-13273407
 ] 

Dag H. Wanvik commented on DERBY-5591:
--------------------------------------

Thanks, Kim. I found permissions revocation doesn't only affect the roles 
actions mention, but also plain revoke, cf. the repro attched ("repro.sh"):
Running it gives this result:



$ bash repro.sh
ij version 10.9
ij> connect 'jdbc:derby:wombat;create=true;user=dag;password=wanvik' as c1;
ij> call syscs_util.syscs_create_user('DAG', 'wanvik');
0 rows inserted/updated/deleted
ij> call syscs_util.syscs_create_user('DONALD', 'duck');
0 rows inserted/updated/deleted
ij> call 
syscs_util.syscs_set_database_property('derby.database.sqlAuthorization', 
'true');
0 rows inserted/updated/deleted
ij> disconnect c1;
ij> connect 'jdbc:derby:wombat;shutdown=true';
ERROR 08006: Database 'wombat' shutdown.
ij> connect 'jdbc:derby:wombat;user=dag;password=wanvik' as c1;
ij> create table t ( i int);
0 rows inserted/updated/deleted
ij> insert into t values 1,2,3;
3 rows inserted/updated/deleted
ij> grant select on t to donald;
0 rows inserted/updated/deleted
ij> connect 'jdbc:derby:wombat;user=donald;password=duck' as c2;
ij(C2)> create table dummy ( i int);
0 rows inserted/updated/deleted
ij(C2)> create view myview as select i from dag.t;
0 rows inserted/updated/deleted
ij(C2)> select * from myview;
I          
-----------
1          
2          
3          

3 rows selected
ij(C2)> set connection c1;
ij(C1)> revoke select on t from donald;
0 rows inserted/updated/deleted
WARNING 01501: The view MYVIEW has been dropped.
ij(C1)> set connection c2;
ij(C2)> select * from myview;
ERROR 42X05: Table/View 'MYVIEW' does not exist.
ij(C2)> exit;
                
> Imprecise wording in documentation in ref man on DROP VIEW
> ----------------------------------------------------------
>
>                 Key: DERBY-5591
>                 URL: https://issues.apache.org/jira/browse/DERBY-5591
>             Project: Derby
>          Issue Type: Bug
>          Components: Documentation
>    Affects Versions: 10.8.2.2
>            Reporter: Dag H. Wanvik
>            Assignee: Kim Haase
>            Priority: Minor
>         Attachments: repro.sh
>
>
> This sentence is misleading: "Any statements referencing the view are 
> invalidated on a DROP VIEW statement. DROP VIEW is disallowed if there are 
> any views or open cursors dependent on the view. The view must be dropped 
> before any objects that it is dependent on can be dropped." 
> This isn't quite true. If a column is dropped with the CASCADE option, any 
> dependent view(s) will be dropped. Are there other cases?

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to