joungmin/vpd-permission-poc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: preserve quoted DDS end user identity

Browse Source
This commit is contained in:
devmrko
2026-06-29 22:33:27 +09:00
parent b943d0e9bc
commit ad9a2b7dd4
1 changed files with 14 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
dds-backoffice/src/main/java/com/cloudhandson/ddsbackoffice/service/DdsQueryService.java
View File

@@ -85,7 +85,7 @@ public class DdsQueryService {
var search = searchText == null ? "" : searchText.trim();
var timeoutSeconds = timeoutSeconds(properties.queryTimeout());
var connectionProperties = new Properties();
connectionProperties.setProperty("user", user.username());
connectionProperties.setProperty("user", jdbcUsername(user.username()));
connectionProperties.setProperty("password", user.password());
connectionProperties.setProperty("oracle.net.CONNECT_TIMEOUT", String.valueOf(timeoutSeconds * 1000));
connectionProperties.setProperty("oracle.jdbc.ReadTimeout", String.valueOf(timeoutSeconds * 1000));
@@ -168,6 +168,19 @@ public class DdsQueryService {
return normalized;
}
private static String jdbcUsername(String username) {
var normalized = username == null ? "" : username.trim();
if (normalized.length() >= 2 && normalized.startsWith("\"") && normalized.endsWith("\"")) {
return normalized;
}
// The standalone SQL creates quoted lower-case END USER names. Oracle's
// JDBC driver uppercases an unquoted username, so preserve that identity.
if (!normalized.isEmpty() && normalized.equals(normalized.toLowerCase(Locale.ROOT))) {
return "\"" + normalized.replace("\"", "\"\"") + "\"";
}
return normalized;
}
private static int timeoutSeconds(Duration duration) {
return Math.max(1, (int) Math.ceil(duration.toMillis() / 1000.0));
}