Uploaded image for project: 'Derby'
  1. Derby
  2. DERBY-3743

Revoking EXECUTE privilege on a function if used in a CHECK constraint: implementation problem

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 10.5.1.1
    • Fix Version/s: 10.5.1.1
    • Component/s: SQL
    • Labels:
      None
    • Bug behavior facts:
      Security

      Description

      The docs say that REVOKE EXECUTE ... RESTRICT should
      fail if there is a dependent constraint:

      "The RESTRICT clause specifies that the EXECUTE privilege cannot be
      revoked if the specified routine is used in a view, trigger, or
      constraint, and the privilege is being revoked from the owner of the
      view, trigger, or constraint."

      Revoking the privilege will be correctly restricted, but possibly for the wrong reason.

        Attachments

        1. derby-3743.diff
          4 kB
          Dag H. Wanvik
        2. derby-3743.stat
          0.3 kB
          Dag H. Wanvik
        3. derby-3743b-1.diff
          10 kB
          Dag H. Wanvik
        4. derby-3743b-1.stat
          0.3 kB
          Dag H. Wanvik
        5. derby-3743b-2.diff
          11 kB
          Dag H. Wanvik
        6. derby-3743b-2.stat
          0.3 kB
          Dag H. Wanvik
        7. derby-3743-show-constraint-invalidate-actions.diff
          4 kB
          Dag H. Wanvik
        8. derby-3743-show-constraint-invalidate-actions.stat
          0.2 kB
          Dag H. Wanvik

          Activity

            People

            • Assignee:
              dagw Dag H. Wanvik
              Reporter:
              dagw Dag H. Wanvik
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: