]
Steve Hawkins resolved TEIID-966.
---------------------------------
Fix Version/s: 7.0
(was: 7.1)
Resolution: Done
With all of the teiid/security changes there is only one server side representation of the
username.
User (principal) name in MetaMatrix should be consistently the same
string
--------------------------------------------------------------------------
Key: TEIID-966
URL:
https://jira.jboss.org/browse/TEIID-966
Project: Teiid
Issue Type: Feature Request
Components: Query Engine
Affects Versions: 7.0
Reporter: Debbie Steigner
Assignee: Steven Hawkins
Fix For: 7.0
The issue has to do with the way we represent a user's name. Customer uses LDAP for a
membership domain. Sometimes, the user's name is their cn, followed by "@"
plus the domain name, e.g.:
username@LDAP
Sometimes, it's simply the user name. e.g.:
username
This name is recorded in the audit logs, used throughout Console, and perhaps most
importantly, is the name returned by the USER() system function.
The problem is that we use the return value of USER() to record information about who is
doing things. Later, we make comparisons against this info to control access, etc. This
comparison often fails, even though we may be comparing the same identity, due to this
inconsistency.
Workaround for the USER() function: build in special logic within each procedure to strip
out the @LDAP if it is present.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: