[teiid-designer-issues] [JBoss JIRA] (TEIIDDES-2274) Row-based Security creates incorrect permission
[
https://issues.jboss.org/browse/TEIIDDES-2274?page=com.atlassian.jira.plu...
]
Barry LaFond commented on TEIIDDES-2274:
----------------------------------------
The Teiid documentation: https://docs.jboss.org/author/display/TEIID/XML+Definition
appears to allow both *table* and *column* targets as shown in the snippets below, and
Designer currently only allows targeting a *column*
{code:xml}
<permission>
<resource-name>modelName.tblName.column1</resource-name>
<mask>CASE WHEN column1=user() THEN column1 END</mask>
</permission>
{code}
{code:xml}
<permission>
<resource-name>modelName.tblName.column1</resource-name>
<condition>column2='x'</condition>
<mask order="1">column1</mask>
</permission>
{code}
Row-based Security creates incorrect permission
-----------------------------------------------
Key: TEIIDDES-2274
URL: https://issues.jboss.org/browse/TEIIDDES-2274
Project: Teiid Designer
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Modeling, VDB & Execution
Affects Versions: 8.3.3
Environment: OSX 10.9.4, Java 1.7.0_25. However, this bug has also been verified
on a RHEL 7 instance as well.
Reporter: Blaine Mincey
Labels: designer, teiid
In modeling a VDB, when adding a condition for row-based security, an incorrect
permission is created. For example, if using the Designer to select a column, the
following condition is added:
<permission>
<resource-name>AccountsView.CUSTOMER.STATE</resource-name>
<condition constraint="true"><> 'New
York'</condition>
</permission>.
In order for row-based security to work, the VDB.xml needs to be edited to be the
following:
<permission>
<resource-name>AccountsView.CUSTOMER</resource-name>
<condition constraint="true">STATE <> 'New
York'</condition>
</permission>
--
This message was sent by Atlassian JIRA
(v6.2.6#6264)