Uploaded image for project: 'Teiid Designer'
  1. Teiid Designer
  2. TEIIDDES-2274

Row-based Security creates incorrect permission

    Details

    • Steps to Reproduce:
      Hide

      1. Create a VDB and select associated models.
      2. Create permissions for a specific column. For example, a table contains a state (New York) that must not be displayed for a particular data role. Set the permission for the state column to not equal 'New York'.
      3. This creates an incorrect permission resulting in having to hand-edit the VDB/META-INF/vdb.xml file to correct the permission.

      Show
      1. Create a VDB and select associated models. 2. Create permissions for a specific column. For example, a table contains a state (New York) that must not be displayed for a particular data role. Set the permission for the state column to not equal 'New York'. 3. This creates an incorrect permission resulting in having to hand-edit the VDB/META-INF/vdb.xml file to correct the permission.
    • Workaround:
      Workaround Exists
    • Workaround Description:
      Hide

      The VDB.xml can be edited to read as follows:
      <permission>
      <resource-name>AccountsView.CUSTOMER</resource-name>
      <condition constraint="true">STATE <> 'New York'</condition>
      </permission>

      Show
      The VDB.xml can be edited to read as follows: <permission> <resource-name>AccountsView.CUSTOMER</resource-name> <condition constraint="true">STATE <> 'New York'</condition> </permission>

      Description

      In modeling a VDB, when adding a condition for row-based security, an incorrect permission is created. For example, if using the Designer to select a column, the following condition is added:
      <permission>
      <resource-name>AccountsView.CUSTOMER.STATE</resource-name>
      <condition constraint="true"><> 'New York'</condition>
      </permission>.

      In order for row-based security to work, the VDB.xml needs to be edited to be the following:
      <permission>
      <resource-name>AccountsView.CUSTOMER</resource-name>
      <condition constraint="true">STATE <> 'New York'</condition>
      </permission>

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                blafond Barry LaFond
                Reporter:
                blaine.mincey Blaine Mincey
              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: