[TRAFODION-2561] UDRs for non-trusted users

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.0-incubating
• Component/s: sql-general
• Assignee: Unassigned
• Reporter: Hans Zeller
• Created: 29/Mar/17 21:11
• Updated: 29/Mar/17 21:11

Description

Right now, only trusted users can create Trafodion User-defined Routines, called UDRs in short (this includes stored procedures in Java, scalar UDFs and table-mapping UDFs). This is because these UDRs run under the user id of the Trafodion engine. It would be good to have an "isolated" flavor where these routines run under some other user id that poses a much smaller security risk, as it is done in other DMBSs, like IBM DB2 for Linux, Unix and Windows.

This JIRA is the parent of multiple subtasks to achieve this goal.

Sub-Tasks

• User ids for isolated UDRs: Open
• Communication protocol for tdm_udrserv for isolated UDRs: Open
• Move TMUDF compiler interface calls to tdm_udrserv: Open