[
https://issues.jboss.org/browse/TEIID-2695?page=com.atlassian.jira.plugin...
]
Steven Hawkins commented on TEIID-2695:
---------------------------------------
So the confusion here is that what UsersRolesLoginModule terms as roles are actually
groups to JAAS. Then whenever Teiid refers to roles it is the Teiid role names as defined
in the VDB xml (this means that even if the source system changes the vdb can remain
consistent). So user is in the groups user and prices, and has the Teiid ReadOnly role
since that is available to any authenticated. Using hasRole('prices') is working
as expected as there is no Teiid role by that name and will return false.
Unable to use CASE statement in Select
--------------------------------------
Key: TEIID-2695
URL:
https://issues.jboss.org/browse/TEIID-2695
Project: Teiid
Issue Type: Bug
Components: Query Engine
Affects Versions: 8.4.1
Reporter: Van Halbert
Assignee: Steven Hawkins
Attachments: portfolio-vdb.xml
Trying to add a <mask> of:
<permission>
<resource-name>Stocks.StockPrices.Price</resource-name>
<mask>CASE WHEN hasRole('prices') THEN Price END</mask>
</permission>
even tried using "= true" just to see
but it it always returns null for Prices.
To test it, I logged in as 'user' using CommandLog vdb and issued:
Select VDB, CASE WHEN hasRole('prices') THEN 'Y' Else 'N' END as
V from TEIID_COMMANDLOG
and 'N' was always returned for column V.
teiid roles file:
# A roles.properties file for use with the UsersRolesLoginModule
# username=role1,role2
portfolio=superuser
viewonly=readonly
user=user,prices
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:
http://www.atlassian.com/software/jira