[DERBY-5399] Reimplement the sensitive diagnostic VTIs as table functions so that the DBO can grant SELECT access to them in a straightforward way.

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 10.9.1.0
• Component/s: SQL
• Labels: derby_triage10_10
• Urgency: Normal
• Bug behavior facts: Security
• Assignee: Unassigned
• Reporter: Richard N. Hillegas
• Created: 02/Sep/11 14:41
• Updated: 28/Sep/12 04:16

Description

This is the more complicated solution (2) discussed on DERBY-5395. Re-implementing the diagnostic VTIs as table functions (with metadata tuples in the system catalogs) would make it more straightforward for the DBO to grant tech support roles access to this data.

Issue Links

• is related to: DERBY-5395 By default, only the DBO should be allowed to run several of the diagnostic VTIs.