[DERBY-3160] SYSCS_GET_USER_ACCESS incorrectly treats the passed in user name as a SQL identifier and thus can reports the wrong user information

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 10.3.1.4, 10.4.1.3
• Fix Version/s: 10.4.1.3
• Component/s: SQL
• Bug behavior facts: Security
• Assignee: Daniel John Debrunner
• Reporter: Daniel John Debrunner
• Created: 30/Oct/07 00:12
• Updated: 21/Jan/11 17:51
• Resolved: 31/Oct/07 15:58

Description

VALUES SYSCS_GET_USER_ACCESS(CURRENT_USER) will report the wrong user information if the user name needs to be a delimited identifier when used in a SQL statement such as GRANT. E.g. user [e-mail], 123 etc.

Passing the user name as a VARCHAR also returns the wrong user for such user names.