[tarantool-patches] Re: [PATCH v3] Make access_check_ddl check for entity privileges.

  • From: Konstantin Osipov <kostja@xxxxxxxxxxxxx>
  • To: Serge Petrenko <sergepetrenko@xxxxxxxxxxxxx>
  • Date: Thu, 26 Jul 2018 23:06:18 +0300

* Serge Petrenko <sergepetrenko@xxxxxxxxxxxxx> [18/07/19 23:28]:

Function access_check_ddl checked only for universal access, thus
granting entity or singe object access to a user would have no effect in
scope of this function.
Fix this by adding entity access checks.

Also attaching an existing sequence to a space checked for
create privilege on both space and sequence
(instead of read + write on sequence). Fixed it and changed the tests
accordingly.

Closes #3516

Pushed.


-- 
Konstantin Osipov, Moscow, Russia, +7 903 626 22 32
http://tarantool.io - www.twitter.com/kostja_osipov

Other related posts: