[tarantool-patches] Re: [PATCH v3] Make access_check_ddl check for entity privileges.

Konstantin Osipov kostja at tarantool.org
Thu Jul 26 23:06:18 MSK 2018


* Serge Petrenko <sergepetrenko at tarantool.org> [18/07/19 23:28]:
> Function access_check_ddl checked only for universal access, thus
> granting entity or singe object access to a user would have no effect in
> scope of this function.
> Fix this by adding entity access checks.
> 
> Also attaching an existing sequence to a space checked for
> create privilege on both space and sequence
> (instead of read + write on sequence). Fixed it and changed the tests
> accordingly.
> 
> Closes #3516

Pushed.


-- 
Konstantin Osipov, Moscow, Russia, +7 903 626 22 32
http://tarantool.io - www.twitter.com/kostja_osipov




More information about the Tarantool-patches mailing list