]
Matus Makovy commented on TEIIDDES-2274:
----------------------------------------
TD 8.3.4: This can't be reproduced for verification anymore. Fixing TEIIDDES-2196
(Data Roles dialogue issues) resolved this. User isn't able to target column using Row
Filter tab (renamed Conditions tab from 8.3.3) anymore. If you want to create Row Filter
(row-based security) you have to choose table as target. Conditions on columns are used
only for Column Masking.
Row-based Security creates incorrect permission
-----------------------------------------------
Key: TEIIDDES-2274
URL:
https://issues.jboss.org/browse/TEIIDDES-2274
Project: Teiid Designer
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Modeling, VDB & Execution
Affects Versions: 8.3.3
Environment: OSX 10.9.4, Java 1.7.0_25. However, this bug has also been verified
on a RHEL 7 instance as well.
Reporter: Blaine Mincey
Assignee: Barry LaFond
Labels: designer, teiid
Fix For: 8.3.4, 8.6, 8.5.1
In modeling a VDB, when adding a condition for row-based security, an incorrect
permission is created. For example, if using the Designer to select a column, the
following condition is added:
<permission>
<resource-name>AccountsView.CUSTOMER.STATE</resource-name>
<condition constraint="true"><> 'New
York'</condition>
</permission>.
In order for row-based security to work, the VDB.xml needs to be edited to be the
following:
<permission>
<resource-name>AccountsView.CUSTOMER</resource-name>
<condition constraint="true">STATE <> 'New
York'</condition>
</permission>