Re: [stardog-users] SPARQL DELETE ERROR with stardog 1.1

1 view
Skip to first unread message

Kendall Clark

unread,
Dec 20, 2012, 10:00:10 AM12/20/12
to stardog
Stardog 1.1.1 doesn't support SPARQL 1.1 Update *query language*. It
supports Update in the data protocol.

We will lift this restriction in a future release, as soon as we can
implement it securely (i.e., not liable to injection attacks).

Cheers,
Kendall

On Thu, Dec 20, 2012 at 9:56 AM, Laurens De Vocht <laur...@gmail.com> wrote:
> I get this error when I execute a Delete query on my stardog default sparql
> endpoint (authentication is disabled):
>
> http://localhost:5822
>
> Exception: HTTP Error 405: Method Not Allowed (query: DELETE { ?s ?p ?o
> } WHERE { { ?s ?p ?o . FILTER (?s =
> <http://data.colinda.org/conference.php?id=9151>) } }
>
> --
> -- --
> You received this message because you are subscribed to the C&P "Stardog"
> group.
> To post to this group, send email to sta...@clarkparsia.com
> To unsubscribe from this group, send email to
> stardog+u...@clarkparsia.com
> For more options, visit this group at
> http://groups.google.com/a/clarkparsia.com/group/stardog?hl=en
>
>

Ron Michael Zettlemoyer

unread,
Dec 21, 2012, 10:20:43 AM12/21/12
to sta...@clarkparsia.com
So are SPARQL 1.1 updates actually in Stardog now, just disabled? Couldn't you allow an admin to enable it if they choose? :)

I was curious about that when you first mentioned it...  Maybe I'm just not thinking of this the right way, but shouldn't preventing injection be a problem for the calling application to worry about?  Like if the account I connect to Stardog with has write permissions, I should be able to do whatever I want, and if my code is stupid enough to allow an injection attack from my users than that's my fault. What if your secure implementation considers something as an injection attack but it's something I am doing intentionally?

I know that you've though all this through, I am just curious about it.

Kendall Clark

unread,
Dec 21, 2012, 10:47:06 AM12/21/12
to stardog
On Fri, Dec 21, 2012 at 10:20 AM, Ron Michael Zettlemoyer
<ron.zet...@fynydd.com> wrote:
> So are SPARQL 1.1 updates actually in Stardog now, just disabled? Couldn't
> you allow an admin to enable it if they choose? :)

In a branch, but not in the released product.

> I was curious about that when you first mentioned it... Maybe I'm just not
> thinking of this the right way, but shouldn't preventing injection be a
> problem for the calling application to worry about?

Yes and no. It should be possible for the calling application to
prevent injection attacks in some way, ideally in a way based on
Stardog, so that we know it's done properly.

> Like if the account I
> connect to Stardog with has write permissions, I should be able to do
> whatever I want, and if my code is stupid enough to allow an injection
> attack from my users than that's my fault.

This is a reasonable position; it's not the one we've taken to date.

> What if your secure
> implementation considers something as an injection attack but it's something
> I am doing intentionally?

It will be disable-able in that case. Which, yes, is exactly like the
case now, but in re: security, we wanted to be very conservative and
very careful.

> I know that you've though all this through, I am just curious about it.

We don't have a release in mind yet but full Update support will be
available sooner than later.

Cheers,
Kendall

Laurens De Vocht

unread,
Feb 13, 2013, 8:47:59 AM2/13/13
to sta...@clarkparsia.com
Any update on this, is it available in the latest release 1.1.3?

Mike Grove

unread,
Feb 13, 2013, 8:50:33 AM2/13/13
to stardog
On Wed, Feb 13, 2013 at 8:47 AM, Laurens De Vocht <laur...@gmail.com> wrote:
Any update on this, is it available in the latest release 1.1.3?

No.  SPARQL update probably won't be available until 1.2.

Cheers,

Mike

vishnu...@gmail.com

unread,
Apr 17, 2013, 6:06:48 AM4/17/13
to sta...@clarkparsia.com
so there is no other ways to edit tuple data once entered?

Kendall Clark

unread,
Apr 17, 2013, 6:39:58 AM4/17/13
to sta...@clarkparsia.com
Use the HTTP protocol, Java APIs (there are 3), or CLI.

Other than those 5 ways, there are no other ways presently.

Cheers,
Kendall
Message has been deleted

vishnu...@gmail.com

unread,
Apr 18, 2013, 6:52:02 AM4/18/13
to sta...@clarkparsia.com

Kendall Clark

unread,
Apr 18, 2013, 9:10:45 AM4/18/13
to stardog
There are clearly examples of adding and deleting data in precisely the chapter that you refer to.

Further, since Stardog supports Sesame and Jena, all the documentation about how to do adds and deletes in Sesame or Jena exist.

Facts are wonderful things!

Cheers,
Kendall


On Thu, Apr 18, 2013 at 3:31 AM, <vishnu...@gmail.com> wrote:
In http://stardog.com/docs/java/  there is no examples for update/delete/insert . can you help?


On Wednesday, 17 April 2013 16:09:58 UTC+5:30, Kendall wrote:

For more options, visit this group at
http://groups.google.com/a/clarkparsia.com/group/stardog?hl=en
 
 
Reply all
Reply to author
Forward
0 new messages