[tarantool-patches] Re: [PATCH v3] Make access_check_ddl check for entity privileges.
kostja at tarantool.org
Thu Jul 26 23:06:18 MSK 2018
* Serge Petrenko <sergepetrenko at tarantool.org> [18/07/19 23:28]:
> Function access_check_ddl checked only for universal access, thus
> granting entity or singe object access to a user would have no effect in
> scope of this function.
> Fix this by adding entity access checks.
> Also attaching an existing sequence to a space checked for
> create privilege on both space and sequence
> (instead of read + write on sequence). Fixed it and changed the tests
> Closes #3516
Konstantin Osipov, Moscow, Russia, +7 903 626 22 32
http://tarantool.io - www.twitter.com/kostja_osipov
More information about the Tarantool-patches