Uploaded image for project: 'Derby'
  1. Derby
  2. DERBY-3743

Revoking EXECUTE privilege on a function if used in a CHECK constraint: implementation problem

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 10.5.1.1
    • 10.5.1.1
    • SQL
    • None
    • Security

    Description

      The docs say that REVOKE EXECUTE ... RESTRICT should
      fail if there is a dependent constraint:

      "The RESTRICT clause specifies that the EXECUTE privilege cannot be
      revoked if the specified routine is used in a view, trigger, or
      constraint, and the privilege is being revoked from the owner of the
      view, trigger, or constraint."

      Revoking the privilege will be correctly restricted, but possibly for the wrong reason.

      Attachments

        1. derby-3743b-2.stat
          0.3 kB
          Dag H. Wanvik
        2. derby-3743b-2.diff
          11 kB
          Dag H. Wanvik
        3. derby-3743b-1.stat
          0.3 kB
          Dag H. Wanvik
        4. derby-3743b-1.diff
          10 kB
          Dag H. Wanvik
        5. derby-3743.stat
          0.3 kB
          Dag H. Wanvik
        6. derby-3743.diff
          4 kB
          Dag H. Wanvik
        7. derby-3743-show-constraint-invalidate-actions.stat
          0.2 kB
          Dag H. Wanvik
        8. derby-3743-show-constraint-invalidate-actions.diff
          4 kB
          Dag H. Wanvik

        Activity

          People

            dagw Dag H. Wanvik
            dagw Dag H. Wanvik
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: