JDBC SQL query permissions.

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

JDBC SQL query permissions.

Mikhail Petrov
Hello, Igniters.

At the moment execution of the following SQL queries via JDBC requires
no security permissions:
ALTER TABLE ADD
ALTER TABLE DROP COLUMN
CREATE INDEX
DROP INDEX

Could someone clarify does this behavior considered desired or it is
needed to be fixed?

Tests that shows described behavior can be found here - [1].

[1] - https://github.com/apache/ignite/pull/7691

Regards,
Mikhail.

Reply | Threaded
Open this post in threaded view
|

Re: JDBC SQL query permissions.

dmagda
Hello Mikhail,

Most likely that didn't get in the scope when those commands were being
added to Ignite. @Taras Ledkov <[hidden email]>, @Ivan Pavlukhin
<[hidden email]>, @Yuriy Gerzhedovich <[hidden email]>,
could you please share your thoughts on this?

-
Denis


On Fri, May 8, 2020 at 2:19 AM Mikhail Petrov <[hidden email]> wrote:

> Hello, Igniters.
>
> At the moment execution of the following SQL queries via JDBC requires
> no security permissions:
> ALTER TABLE ADD
> ALTER TABLE DROP COLUMN
> CREATE INDEX
> DROP INDEX
>
> Could someone clarify does this behavior considered desired or it is
> needed to be fixed?
>
> Tests that shows described behavior can be found here - [1].
>
> [1] - https://github.com/apache/ignite/pull/7691
>
> Regards,
> Mikhail.
>
>