[DERBY-3884] dblook scripts will fail to correctly recreate objects which depend on creator privileges

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 10.4.2.0
• Component/s: Tools
• Labels: derby_triage10_5_2
• Urgency: Normal
• Assignee: Unassigned
• Reporter: Richard N. Hillegas
• Created: 26/Sep/08 13:22
• Updated: 15/Feb/11 21:08

Description

The dblook utility produces a script which can be used to recreate the schema of a database. Permissions are added in one big block at the end of this script. However, the faithful recreation of some objects (like views) may depend on the creator being a specific user having specific privileges. Faithfully recreating the schema may require the ability to change user and sort, by dependency, the statements which dblook emits--so that permission grants may be interleaved with object declarations. For a discussion of this problem, please see the commentary by Dag, dated 25/Sep/08, on DERBY-3877.

This problem was introduced when we added GRANT/REVOKE to Derby. The addition of SQL Roles creates more problem cases.

Issue Links

• relates to: DERBY-3877 SQL roles: build support for dblook