[DERBY-2207] Improve usability of Derby's client/server security by implementing ANSI Roles

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 10.5.1.1
• Component/s: SQL
• Bug behavior facts: Security
• Assignee: Dag H. Wanvik
• Reporter: Richard N. Hillegas
• Created: 03/Jan/07 17:09
• Updated: 13/Jul/10 19:24
• Resolved: 22/Nov/08 02:06

Description

Implementing ANSI Roles will make it easier to manage security for multi-user applications with high user turnover.

Issue Links

• incorporates: DERBY-3073 SQL roles: add parser support
• incorporates: DERBY-3191 SQL roles: add upgrade support
• incorporates: DERBY-3327 SQL roles: Implement authorization stack (and SQL session context to hold it)
• incorporates: DERBY-3137 SQL roles: add catalog support
• incorporates: DERBY-3193 SQL roles: Add documentation
• incorporates: DERBY-3223 SQL roles: make use of privileges granted to roles in actual privilege checking
• incorporates: DERBY-3667 SQL roles: Make CURRENT_ROLE check that the role is still valid
• incorporates: DERBY-3901 SQL roles: Move upgrade logic from 10.4 to 10.5
• relates to: DERBY-3333 User name corresponding to authentication identifier PUBLIC must be rejected
• relates to: DERBY-3928 SQL roles: Enable the use of StatementRolePermission
• relates to: DERBY-3929 SQL roles: tighten up check for existing user name collision when creating a role
• relates to: DERBY-3906 SQL roles: add caching of the role grant graph for performance
• relates to: DERBY-3460 SQL roles: patch to mask off roles on 10.4 release branch

Sub-Tasks

• Reset the current role when EmbedPooledConnection creates a new logical connection: Closed
• SQL roles: build support for dblook: Closed
• SQL roles: Add VTI for CONTAINED_ROLES: Closed