authorize.out

derby database source code.good for you.

ij> call SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY('derby.database.defaultConnectionMode','readOnlyACCESS');
0 rows inserted/updated/deleted
ij> VALUES SYSCS_UTIL.SYSCS_GET_DATABASE_PROPERTY('derby.database.defaultConnectionMode');
1                                                                                                                               
--------------------------------------------------------------------------------------------------------------------------------
readOnlyACCESS                                                                                                                  
ij> call SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY('derby.database.fullAccessUsers','fullUser1,"***both","aaa-differByCase"');
0 rows inserted/updated/deleted
ij> VALUES SYSCS_UTIL.SYSCS_GET_DATABASE_PROPERTY('derby.database.fullAccessUsers');
1                                                                                                                               
--------------------------------------------------------------------------------------------------------------------------------
fullUser1,"***both","aaa-differByCase"                                                                                          
ij> call SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY('derby.database.readOnlyAccessUsers',null);
0 rows inserted/updated/deleted
ij> VALUES SYSCS_UTIL.SYSCS_GET_DATABASE_PROPERTY('derby.database.readOnlyAccessUsers');
1                                                                                                                               
--------------------------------------------------------------------------------------------------------------------------------
NULL                                                                                                                            
ij> --
-- Connect as a guest user (name differs from a full user by case)
connect 'authorize' user '"fulluser1"' as c2;
ij(C2)> call AUTH_TEST.verifyAccessRO(11);
0 rows inserted/updated/deleted
ij(C2)> readonly off;
ERROR 25505: A read-only user or a user in a read-only database is not permitted to disable read-only mode on a connection.
ij(C2)> readonly on;
ij(C2)> disconnect;
ij> --
-- Connect as a full user and verify we can do it all
connect 'authorize' user 'fulluser1' as c2;
ij(C2)> call AUTH_TEST.verifyAccessRW(12);
0 rows inserted/updated/deleted
ij(C2)> readonly on;
ij(C2)> call AUTH_TEST.verifyAccessRO(13);
0 rows inserted/updated/deleted
ij(C2)> readonly off;
ij(C2)> call AUTH_TEST.verifyAccessRW(14);
0 rows inserted/updated/deleted
ij(C2)> --
-- Verfify we cannot set the readonly state in an active connection.
autocommit off;
ij(C2)> insert into AUTH_TEST.t1 values 1,2;
2 rows inserted/updated/deleted
ij(C2)> readonly off;
ERROR 25501: Unable to set the connection read-only property in an active transaction.
ij(C2)> readonly on;
ERROR 25501: Unable to set the connection read-only property in an active transaction.
ij(C2)> rollback;
ij(C2)> autocommit on;
ij(C2)> --
-- Verify a read only user can perform a query that uses a
-- temp table. 
insert into AUTH_TEST.t1 values 1,2,3,4,5,6,7;
7 rows inserted/updated/deleted
ij(C2)> insert into AUTH_TEST.t1 select * from AUTH_TEST.t1;
7 rows inserted/updated/deleted
ij(C2)> insert into AUTH_TEST.t1 select * from AUTH_TEST.t1;
14 rows inserted/updated/deleted
ij(C2)> insert into AUTH_TEST.t1 select * from AUTH_TEST.t1;
28 rows inserted/updated/deleted
ij(C2)> insert into AUTH_TEST.t1 select * from AUTH_TEST.t1;
56 rows inserted/updated/deleted
ij(C2)> readonly on;
ij(C2)> select * from AUTH_TEST.t1 order by a;
A          
-----------
1          
1          
1          
1          
1          
1          
1          
1          
1          
1          
1          
1          
1          
1          
1          
1          
2          
2          
2          
2          
2          
2          
2          
2          
2          
2          
2          
2          
2          
2          
2          
2          
3          
3          
3          
3          
3          
3          
3          
3          
3          
3          
3          
3          
3          
3          
3          
3          
4          
4          
4          
4          
4          
4          
4          
4          
4          
4          
4          
4          
4          
4          
4          
4          
5          
5          
5          
5          
5          
5          
5          
5          
5          
5          
5          
5          
5          
5          
5          
5          
6          
6          
6          
6          
6          
6          
6          
6          
6          
6          
6          
6          
6          
6          
6          
6          
7          
7          
7          
7          
7          
7          
7          
7          
7          
7          
7          
7          
7          
7          
7          
7          
ij(C2)> readonly off;
ij(C2)> delete from AUTH_TEST.t1;
112 rows inserted/updated/deleted
ij(C2)> --
-- Remove all the authorization properties to prepare to test
-- the UserUtility.
--
call SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY('derby.database.defaultConnectionMode',null);
0 rows inserted/updated/deleted
ij(C2)> VALUES SYSCS_UTIL.SYSCS_GET_DATABASE_PROPERTY('derby.database.defaultConnectionMode');
1                                                                                                                               
--------------------------------------------------------------------------------------------------------------------------------
NULL                                                                                                                            
ij(C2)> call SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY('derby.database.readOnlyAccessUsers',null);
0 rows inserted/updated/deleted
ij(C2)> VALUES SYSCS_UTIL.SYSCS_GET_DATABASE_PROPERTY('derby.database.readOnlyAccessUsers');
1                                                                                                                               
--------------------------------------------------------------------------------------------------------------------------------
NULL                                                                                                                            
ij(C2)> call SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY('derby.database.fullAccessUsers',null);
0 rows inserted/updated/deleted
ij(C2)> VALUES SYSCS_UTIL.SYSCS_GET_DATABASE_PROPERTY('derby.database.fullAccessUsers');
1                                                                                                                               
--------------------------------------------------------------------------------------------------------------------------------
NULL                                                                                                                            
ij(C2)> --
-- Verify external scalar function getPermission works with no users.
values AUTH_TEST.getPermission('myFriend');
1                                                                                                                               
--------------------------------------------------------------------------------------------------------------------------------
NULL