[
https://issues.jboss.org/browse/TEIID-2695?page=com.atlassian.jira.plugin...
]
Steven Hawkins commented on TEIID-2695:
---------------------------------------
Hm, I thought the hasRole('role') call was the way to
determine if this current user has this role assigned to them (in other words, a member of
the group).
You are using the terms too loosely. A Teiid role (and a role concept in general) is a
specific entity that combines permissions and groups. A JAAS group (what
UsersRolesLoginModule is terming as a role - which is misleading as it does not specify
any permissions) is generally not something that we want specifically referenced by the
vdb - what happens if you want to change the source group names, they change between
environments, etc.
I think this is not good, because you can no longer use functional
based permissions in view's to control behavior.
Can you explain that more?
Unable to use CASE statement in Select
--------------------------------------
Key: TEIID-2695
URL:
https://issues.jboss.org/browse/TEIID-2695
Project: Teiid
Issue Type: Bug
Components: Query Engine
Affects Versions: 8.4.1
Reporter: Van Halbert
Assignee: Steven Hawkins
Attachments: portfolio-vdb.xml
Trying to add a <mask> of:
<permission>
<resource-name>Stocks.StockPrices.Price</resource-name>
<mask>CASE WHEN hasRole('prices') THEN Price END</mask>
</permission>
even tried using "= true" just to see
but it it always returns null for Prices.
To test it, I logged in as 'user' using CommandLog vdb and issued:
Select VDB, CASE WHEN hasRole('prices') THEN 'Y' Else 'N' END as
V from TEIID_COMMANDLOG
and 'N' was always returned for column V.
teiid roles file:
# A roles.properties file for use with the UsersRolesLoginModule
# username=role1,role2
portfolio=superuser
viewonly=readonly
user=user,prices
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:
http://www.atlassian.com/software/jira