[CR #216352] The JDBC secure business object (SBO) builds queries as database..tablename. For databases that rely on owner qualification (such as Oracle and DB2), the JDBC SBO does not provide asset checking or owner-based qualification of a table.
Workaround: For maximum security and reliability, send to the SBO for JDBC XML requests of type “SQL:pass through,” which provide proper execution of the SQL statement by the back-end server.
| Copyright © 2005. Sybase Inc. All rights reserved. |
|
|
