[DERBY-5395] By default, only the DBO should be allowed to run several of the diagnostic VTIs.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 10.9.1.0
• Fix Version/s: 10.5.3.2, 10.6.2.4, 10.7.1.4, 10.8.2.2, 10.9.1.0
• Component/s: SQL
• Urgency: Normal
• Issue & fix info: Release Note Needed
• Bug behavior facts: Security
• Assignee: Richard N. Hillegas
• Reporter: Richard N. Hillegas
• Created: 29/Aug/11 15:03
• Updated: 02/May/13 02:29
• Resolved: 02/Sep/11 14:37

Description

Only the DBO should be allowed to run the following VTIs:

syscs_diag.statement_cache
syscs_diag.transaction_table
syscs_diag.error_log_reader( )
syscs_diag.statement_duration()

Issue Links

• is depended upon by: DERBY-5404 Document DBO restriction for four diagnostic VTIs
• relates to: DERBY-5399 Reimplement the sensitive diagnostic VTIs as table functions so that the DBO can grant SELECT access to them in a straightforward way.