]
Van Halbert commented on TEIIDDES-2274:
---------------------------------------
Matus,
You say conditions on columns are only used for masking, does that mean we don't
support conditions on columns anymore? Like indicated above:
{code}
<permission>
<resource-name>Accounts.Customer</resource-name>
<condition>state <> 'New York'</condition>
</permission>
{code}
Row-based Security creates incorrect permission
-----------------------------------------------
Key: TEIIDDES-2274
URL:
https://issues.jboss.org/browse/TEIIDDES-2274
Project: Teiid Designer
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Modeling, VDB & Execution
Affects Versions: 8.3.3
Environment: OSX 10.9.4, Java 1.7.0_25. However, this bug has also been verified
on a RHEL 7 instance as well.
Reporter: Blaine Mincey
Assignee: Barry LaFond
Labels: designer, teiid
Fix For: 8.3.4, 8.6, 8.5.1
In modeling a VDB, when adding a condition for row-based security, an incorrect
permission is created. For example, if using the Designer to select a column, the
following condition is added:
<permission>
<resource-name>AccountsView.CUSTOMER.STATE</resource-name>
<condition constraint="true"><> 'New
York'</condition>
</permission>.
In order for row-based security to work, the VDB.xml needs to be edited to be the
following:
<permission>
<resource-name>AccountsView.CUSTOMER</resource-name>
<condition constraint="true">STATE <> 'New
York'</condition>
</permission>