[DERBY-3736] Revoking a column level privilege from a user, a prepared statement relying on that privilege can still be executed

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 10.3.1.4, 10.3.2.1, 10.3.3.0, 10.4.1.3
• Fix Version/s: 10.4.2.0, 10.5.1.1
• Component/s: SQL
• Bug behavior facts: Regression, Security
• Assignee: Dag H. Wanvik
• Reporter: Dag H. Wanvik
• Created: 25/Jun/08 21:14
• Updated: 01/Jul/09 16:35
• Resolved: 09/Jul/08 09:02

Description

When a table level SELECT privilege is revoked, a dependent prepared statement is
invalidated and can no longer be executed, but in the case of a column level privilege
SELECT privilege, the dependent prepared statement can still be executed.

This works as expected in 10.2, but does not work in all 10.3 and 10.4 releases.

Issue Links

• is related to: DERBY-2594 Revoking a privilege from an SQL Object should invalidate statements dependent on that object