Package org.pjdbc.drivers

Class SchemaValidationDriver

java.lang.Object

org.pjdbc.sql.AbstractDriver

org.pjdbc.sql.AbstractProxyDriver

org.pjdbc.drivers.SchemaValidationDriver

All Implemented Interfaces:

Driver

@DriverCapability(prefix="schema",
                  description="Validates SQL statements against a defined schema (table/column whitelist or blacklist)",
                  capabilities={"security","validation"})
@DriverParameter(name="allowedTables",type=STRING,description="Semicolon-separated list of allowed table names (whitelist mode)") @DriverParameter(name="blockedTables",type=STRING,description="Semicolon-separated list of blocked table names (blacklist mode)") @DriverParameter(name="allowedColumns",type=STRING,description="Semicolon-separated list of allowed column patterns") @DriverParameter(name="blockedColumns",type=STRING,description="Semicolon-separated list of blocked column patterns") @DriverParameter(name="mode",type=STRING,description="Validation mode",defaultValue="whitelist",enumValues={"whitelist","blacklist","metadata"}) @DriverParameter(name="caseSensitive",type=BOOLEAN,description="Whether table/column names are case-sensitive",defaultValue="false") @DriverParameter(name="message",type=STRING,description="Custom error message prefix",defaultValue="SchemaValidationDriver") @DriverParameter(name="loadFromDb",type=BOOLEAN,description="Load allowed tables from database metadata",defaultValue="false") @DriverParameter(name="schemaPattern",type=STRING,description="Schema pattern for metadata loading") @DriverParameter(name="tableTypes",type=STRING,description="Semicolon-separated table types for metadata",defaultValue="TABLE;VIEW")
public class SchemaValidationDriver
extends AbstractProxyDriver

SchemaValidationDriver validates SQL statements against a defined schema.

URL format: jdbc:schema[param=value,...]:jdbc:target:...

Modes:

• whitelist - Only tables in allowedTables list are permitted
• blacklist - All tables except those in blockedTables list are permitted
• metadata - Load allowed tables from database metadata at connection time

Example URLs:

 jdbc:schema[allowedTables=users;orders;products]:jdbc:postgresql://localhost/mydb
 jdbc:schema[blockedTables=audit_log;secrets,mode=blacklist]:jdbc:mysql://localhost/db
 jdbc:schema[mode=metadata,schemaPattern=public]:jdbc:postgresql://localhost/mydb
 jdbc:schema[blockedColumns=ssn;credit_card]:jdbc:postgresql://localhost/mydb
 

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	SchemaValidationDriver.SchemaConfig	Configuration holder for schema validation parameters.
static enum	SchemaValidationDriver.ValidationMode	Validation mode for the schema driver.

Driver Parameters

URL format: jdbc:schema[param=value,...]:<target-url>

Parameter	Type	Default	Constraints	Description
allowedTables	string	-	-	Semicolon-separated list of allowed table names (whitelist mode)
blockedTables	string	-	-	Semicolon-separated list of blocked table names (blacklist mode)
allowedColumns	string	-	-	Semicolon-separated list of allowed column patterns
blockedColumns	string	-	-	Semicolon-separated list of blocked column patterns
mode	string	whitelist	one of: "whitelist", "blacklist", "metadata"	Validation mode
caseSensitive	boolean	false	-	Whether table/column names are case-sensitive
message	string	SchemaValidationDriver	-	Custom error message prefix
loadFromDb	boolean	false	-	Load allowed tables from database metadata
schemaPattern	string	-	-	Schema pattern for metadata loading
tableTypes	string	TABLE;VIEW	-	Semicolon-separated table types for metadata

Constructor Summary

Constructors

Constructor	Description
SchemaValidationDriver()

Method Summary

Modifier and Type	Method	Description
protected boolean	acceptsSubName(String subname)
protected boolean	acceptsSubProtocol(String subprotocol)
Connection	connect(String url, Properties info)
static SchemaValidationDriver.SchemaConfig	getSchemaConfig(Connection conn)	Get the schema configuration for a connection.
protected CallableStatement	proxyCallableStatement(CallableStatement delegate, Connection conn)
protected Connection	proxyConnection(Connection delegate, String url, Properties info, Driver driver)
protected PreparedStatement	proxyPreparedStatement(PreparedStatement delegate, Connection conn)
protected Statement	proxyStatement(Statement delegate, Connection conn)

Methods inherited from class org.pjdbc.sql.AbstractProxyDriver

getPropertyInfo, isCompositionValidationEnabled, isValidateParametersEnabled, proxyCallableStatement, proxyConnection, proxyConnection, proxyPreparedStatement, proxyResultSet

Methods inherited from class org.pjdbc.sql.AbstractDriver

acceptsProtocol, acceptsURL, getMajorVersion, getMinorVersion, getParentLogger, getUrlParameter, getUrlParameter, getUrlParameters, jdbcCompliant, parseUrl, protocol, subname, subprotocol, validateParameters

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SchemaValidationDriver

public SchemaValidationDriver()

Method Details

acceptsSubProtocol

protected boolean acceptsSubProtocol(String subprotocol)

Specified by:

acceptsSubProtocol in class AbstractDriver

acceptsSubName

protected boolean acceptsSubName(String subname)

Overrides:

acceptsSubName in class AbstractProxyDriver

connect

public Connection connect(String url,
 Properties info)
                   throws SQLException

Specified by:

connect in interface Driver

Overrides:

connect in class AbstractProxyDriver

Throws:

SQLException

proxyConnection

protected Connection proxyConnection(Connection delegate,
 String url,
 Properties info,
 Driver driver)
                              throws SQLException

Overrides:

proxyConnection in class AbstractProxyDriver

Throws:

SQLException

proxyStatement

protected Statement proxyStatement(Statement delegate,
 Connection conn)
                            throws SQLException

Overrides:

proxyStatement in class AbstractProxyDriver

Throws:

SQLException

proxyPreparedStatement

protected PreparedStatement proxyPreparedStatement(PreparedStatement delegate,
 Connection conn)
                                            throws SQLException

Overrides:

proxyPreparedStatement in class AbstractProxyDriver

Throws:

SQLException

proxyCallableStatement

protected CallableStatement proxyCallableStatement(CallableStatement delegate,
 Connection conn)
                                            throws SQLException

Overrides:

proxyCallableStatement in class AbstractProxyDriver

Throws:

SQLException

getSchemaConfig

public static SchemaValidationDriver.SchemaConfig getSchemaConfig(Connection conn)

Get the schema configuration for a connection.