Grouper Developers Forum

[Kathryn Huxtable <>]

Title: Re: [grouper-dev] Signet 0.3.0 tagged (I meant "subject", not "signet")

I said “signet” in the subject line, but meant “subject”.

I hope that Lynne and Dave don’t have heart attacks when they read that first post.

Sorry about that. I tagged the Subject API.

-K


On 4/7/07 9:27 AM, "Kathryn Huxtable" <> wrote:

> I have tagged the new Subject API release 0.3.0 as SUBJECT_0_3_0 in the CVS
> repository.
>
> This release adds tests for the JNDISourceAdapter and JDBCSourceAdapter
> classes, using an HSQLDB database (supplied) for the JDBC tests, and an
> external LDAP provisioned with the KITN test data. The LDAP configuration
> for testing ldappc will work for this.
>
> The JNDISourceAdapter now escapes the search strings to prevent LDAP filter
> injection.
>
> The JDBCSourceAdapter now uses prepared statements, which automatically
> prevents SQL injection, in addition to generally speeding up the queries.
>
> There is a syntax change required in the sources.xml file for the new
> JDBCSourceAdapter.
>
>     1. You must specify the number of substitution parameters, and
>
>     2. You must use the question mark ("?") instead of '%TERM%' for the
>        search string. This is not to be in quotes, so you'll need to use
>        database-dependant mechanisms to concatenate the question mark with
>        other string data.
>        The example tagged is for Oracle and uses the Oracle || concatenation
>        operator.
>
> -K