|
IDENTIFICATION DIVISION.
PROGRAM-ID. SDL034.
ENVIRONMENT DIVISION.
CONFIGURATION SECTION.
SOURCE-COMPUTER. xyz.
OBJECT-COMPUTER. xyz.
DATA DIVISION.
WORKING-STORAGE SECTION.
* Standard COBOL (file "SDL034.SCO") calling SQL
* procedures in file "SDL034.MCO".
* STANDARD COBOL (file "SDL034.SCO")
****************************************************************
*
* COMMENT SECTION
*
* DATE 1992/06/17 STANDARD COBOL LANGUAGE
* NIST SQL VALIDATION TEST SUITE V6.0
* DISCLAIMER:
* This program was written by employees of NIST to test SQL
* implementations for conformance to the SQL standards.
* NIST assumes no responsibility for any party's use of
* this program.
*
* SDL034.SCO
* WRITTEN BY: DAVID W. FLATER
*
* THIS ROUTINE TESTS THE TRAPPING OF PRIVILEGE VIOLATIONS.
*
* REFERENCES
* ANSI SQL-1992
*
* SECTION 6.4 <column reference>
* SECTION 11.36 <grant statement>
*
****************************************************************
* EXEC SQL BEGIN DECLARE SECTION END-EXEC
01 t PIC S9(9) DISPLAY SIGN LEADING SEPARATE.
01 uid PIC X(18).
01 uidx PIC X(18).
* EXEC SQL END DECLARE SECTION END-EXEC
01 SQLCODE PIC S9(9) COMP.
01 errcnt PIC S9(9) DISPLAY SIGN LEADING SEPARATE.
*date_time declaration
01 TO-DAY PIC 9(6).
01 THE-TIME PIC 9(8).
01 ii PIC S9(9) DISPLAY SIGN LEADING SEPARATE.
01 flag PIC S9(9) DISPLAY SIGN LEADING SEPARATE.
01 SQL-COD PIC S9(9) DISPLAY SIGN LEADING SEPARATE.
PROCEDURE DIVISION.
P0.
MOVE "SCHANZLE" TO uid
CALL "AUTHID" USING uid
MOVE "not logged in, not" TO uidx
* EXEC SQL SELECT USER INTO :uidx FROM HU.ECCO;
CALL "SUB1" USING SQLCODE uidx
MOVE SQLCODE TO SQL-COD
if (uid NOT = uidx) then
DISPLAY "ERROR: User ", uid " expected. User ", uidx "
- " connected"
STOP RUN
END-IF
MOVE 0 TO errcnt
DISPLAY "SQL Test Suite, V6.0, Standard COBOL, sdl034.
- "pco"
DISPLAY
"59-byte ID"
DISPLAY "TEd Version #"
*date_time print
ACCEPT TO-DAY FROM DATE
ACCEPT THE-TIME FROM TIME
DISPLAY "Date run YYMMDD: " TO-DAY " at hhmmssff: " THE-TIME
******************** BEGIN TEST0474 *******************
MOVE 1 TO flag
DISPLAY " TEST0474 "
DISPLAY " Priv.violation: need SELECT for searched
- " UD"
DISPLAY "Reference ANSI SQL-1992 Section 6.4
- " reference>"
DISPLAY " - - - - - - - - - - - - - - - - - - -"
DISPLAY "UPDATE CUGINI.SRCH1 SET C1 = 2 WHERE C1 = 0;"
* EXEC SQL UPDATE CUGINI.SRCH1
* SET C1 = 2 WHERE C1 = 0;
CALL "SUB2" USING SQLCODE
MOVE SQLCODE TO SQL-COD
MOVE SQLCODE TO ii
DISPLAY "SQLCODE should be < 0; its value is ", ii
if (ii NOT < 0) then
MOVE 0 TO flag
END-IF
DISPLAY "ROLLBACK WORK;"
* EXEC SQL ROLLBACK WORK;
CALL "SUB3" USING SQLCODE
MOVE SQLCODE TO SQL-COD
DISPLAY "DELETE FROM CUGINI.SRCH1 WHERE C1 = 0;"
* EXEC SQL DELETE FROM CUGINI.SRCH1
* WHERE C1 = 0;
CALL "SUB4" USING SQLCODE
MOVE SQLCODE TO SQL-COD
MOVE SQLCODE TO ii
DISPLAY "SQLCODE should be < 0; its value is ", ii
if (ii NOT < 0) then
MOVE 0 TO flag
END-IF
* EXEC SQL ROLLBACK WORK;
CALL "SUB5" USING SQLCODE
MOVE SQLCODE TO SQL-COD
if ( flag = 1 ) then
DISPLAY " *** pass *** "
* EXEC SQL INSERT INTO HU.TESTREPORT
* VALUES('0474','pass','MCO');
CALL "SUB6" USING SQLCODE
MOVE SQLCODE TO SQL-COD
else
DISPLAY " sdl034.sco *** fail *** "
* EXEC SQL INSERT INTO HU.TESTREPORT
* VALUES('0474','fail','MCO');
CALL "SUB7" USING SQLCODE
MOVE SQLCODE TO SQL-COD
COMPUTE errcnt = errcnt + 1
END-IF
DISPLAY "==============================================="
* EXEC SQL COMMIT WORK;
CALL "SUB8" USING SQLCODE
MOVE SQLCODE TO SQL-COD
******************** END TEST0474 ********************
******************** BEGIN TEST0475 *******************
MOVE 1 TO flag
DISPLAY " TEST0475 "
DISPLAY " Priv.violation: GRANT ALL w/o GRANT
- " OPTION"
DISPLAY "Reference ANSI SQL-1992 Section 11.36
- " statement>"
DISPLAY " - - - - - - - - - - - - - - - - - - -"
DISPLAY "SELECT COUNT(*) INTO :t FROM CUGINI.BADG1;"
COMPUTE t = -1
* EXEC SQL SELECT COUNT(*) INTO :t FROM CUGINI.BADG1;
CALL "SUB9" USING SQLCODE t
MOVE SQLCODE TO SQL-COD
MOVE SQLCODE TO ii
DISPLAY "SQLCODE should be < 0; its value is ", ii
DISPLAY "t should NOT be 1; its value is ", t
if (ii NOT < 0 OR t = 1) then
MOVE 0 TO flag
END-IF
* EXEC SQL ROLLBACK WORK;
CALL "SUB10" USING SQLCODE
MOVE SQLCODE TO SQL-COD
if ( flag = 1 ) then
DISPLAY " *** pass *** "
* EXEC SQL INSERT INTO HU.TESTREPORT
* VALUES('0475','pass','MCO');
CALL "SUB11" USING SQLCODE
MOVE SQLCODE TO SQL-COD
else
DISPLAY " sdl034.sco *** fail *** "
* EXEC SQL INSERT INTO HU.TESTREPORT
* VALUES('0475','fail','MCO');
CALL "SUB12" USING SQLCODE
MOVE SQLCODE TO SQL-COD
COMPUTE errcnt = errcnt + 1
END-IF
DISPLAY "==============================================="
* EXEC SQL COMMIT WORK;
CALL "SUB13" USING SQLCODE
MOVE SQLCODE TO SQL-COD
******************** END TEST0475 ********************
******************** BEGIN TEST0476 *******************
MOVE 1 TO flag
DISPLAY " TEST0476 "
DISPLAY " Priv.violation: GRANT OPTION view/not
- " table"
DISPLAY "Reference ANSI SQL-1992 Section 11.36
- " statement>"
DISPLAY " - - - - - - - - - - - - - - - - - - -"
DISPLAY "SELECT COUNT(*) INTO :t FROM CUGINI.BADG2;"
COMPUTE t = -1
* EXEC SQL SELECT COUNT(*) INTO :t FROM CUGINI.BADG2;
CALL "SUB14" USING SQLCODE t
MOVE SQLCODE TO SQL-COD
MOVE SQLCODE TO ii
DISPLAY "SQLCODE should be < 0; its value is ", ii
DISPLAY "t should NOT be 1; its value is ", t
if (ii NOT < 0 OR t = 1) then
MOVE 0 TO flag
END-IF
* EXEC SQL ROLLBACK WORK;
CALL "SUB15" USING SQLCODE
MOVE SQLCODE TO SQL-COD
if ( flag = 1 ) then
DISPLAY " *** pass *** "
* EXEC SQL INSERT INTO HU.TESTREPORT
* VALUES('0476','pass','MCO');
CALL "SUB16" USING SQLCODE
MOVE SQLCODE TO SQL-COD
else
DISPLAY " sdl034.sco *** fail *** "
* EXEC SQL INSERT INTO HU.TESTREPORT
* VALUES('0476','fail','MCO');
CALL "SUB17" USING SQLCODE
MOVE SQLCODE TO SQL-COD
COMPUTE errcnt = errcnt + 1
END-IF
DISPLAY "==============================================="
* EXEC SQL COMMIT WORK;
CALL "SUB18" USING SQLCODE
MOVE SQLCODE TO SQL-COD
******************** END TEST0476 ********************
**** TESTER MAY CHOOSE TO INSERT CODE FOR errcnt > 0
STOP RUN.
* **** Procedures for PERFORM statements
¤ Diese beiden folgenden Angebotsgruppen bietet das Unternehmen0.21Angebot
Wie Sie bei der Firma Beratungs- und Dienstleistungen beauftragen können
¤
|
Lebenszyklus
Die hierunter aufgelisteten Ziele sind für diese Firma wichtig
Ziele
Entwicklung einer Software für die statische Quellcodeanalyse
|
