[jboss-jira] [JBoss JIRA] (SECURITY-738) XACML DatabaseResourceAttributeLocator fails when used with Oracle 11g Driver

[Anil Saldhana (JIRA)]

    [ https://issues.jboss.org/browse/SECURITY-738?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12770197#comment-12770197 ] 

Anil Saldhana commented on SECURITY-738:
----------------------------------------

Please feel free to fork https://github.com/picketbox/security-xacml and submit a pull request.
                
> XACML DatabaseResourceAttributeLocator fails when used with Oracle 11g Driver
> -----------------------------------------------------------------------------
>
>                 Key: SECURITY-738
>                 URL: https://issues.jboss.org/browse/SECURITY-738
>             Project: PicketBox 
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: JBossXACML
>    Affects Versions: picketbox_xacml_2.0.8.Final
>         Environment: EAP 6.0.1
>            Reporter: Hisanobu Okuda
>            Assignee: Anil Saldhana
>
> We are using the DatabaseResourceAttributeLocator in jboss-xacml 2.0.8.Final for fetching a policy attribute from an Oracle 11g database. The Oracle JDBC driver is ojdbc6 11.2.0.x. However, the locator fails with an SQLException. The complete stacktrace is attached, but the interesting part is the following:
> {code}
> Caused by: java.sql.SQLException: error occurred during batching: batch must be either executed or cleared
>         at oracle.jdbc.driver.OraclePreparedStatement.executeInternal(OraclePreparedStatement.java:3435)
>         at oracle.jdbc.driver.OraclePreparedStatement.executeQuery(OraclePreparedStatement.java:3493)
>         at oracle.jdbc.driver.OraclePreparedStatementWrapper.executeQuery(OraclePreparedStatementWrapper.java:1491)
>         at org.jboss.security.xacml.locators.attrib.DatabaseAttributeLocator.getColumnValue(DatabaseAttributeLocator.java:215)
>         ... 48 more
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira