diff --git a/bookstore/src/main/java/com/fjordtek/bookstore/model/book/BookHash.java b/bookstore/src/main/java/com/fjordtek/bookstore/model/book/BookHash.java index 796fb2d..9f413fe 100644 --- a/bookstore/src/main/java/com/fjordtek/bookstore/model/book/BookHash.java +++ b/bookstore/src/main/java/com/fjordtek/bookstore/model/book/BookHash.java @@ -80,6 +80,25 @@ public class BookHash { //////////////////// // Attribute setters + /* + * Ignore UPDATE queries in Jakarta Persistence API context. + * + * Security note: + * + * To actually prevent UPDATE queries, bookstore database user must have + * permission denial for UPDATE queries for BOOK_HASH table in SQL database + * internal security policy. + * + * SQL server admin // Remove UPDATE permission: + * + * REVOKE UPDATE on .BOOK_HASH FROM ''@'sql-server_domain-name'; + * + * SQL server admin // Confirm changes: + * + * SHOW GRANTS FOR ''@'sql-server_domain-name'; + + * If needed, contact your SQL server admin to configure this policy. + */ @Column( name = "hash_id", unique = true,