Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Permissions for create or alter statements are not checked. [CORE6078] #6328

Closed
firebird-automations opened this issue Jun 7, 2019 · 7 comments

Comments

@firebird-automations
Copy link
Collaborator

Submitted by: @sim1984

create test$user password '123'; -- Unprivileged user

-- connect to any database
set term ! ;
create procedure New_Procedure123
as
begin
end!
set term ; !
--This operation is not defined for system tables.
--unsuccessful metadata update.
--CREATE PROCEDURE NEW_PROCEDURE123 failed.
--There is no privilege for this operation.

set term ! ;
create or alter procedure New_Procedure123
as
begin
end!
set term ; !
--sucessfull???!

This applies to procedures, triggers, packages, functions, etc.

Commits: 8110218 eca1620

@firebird-automations
Copy link
Collaborator Author

Modified by: @sim1984

description: create test$user password '123'; -- Unprivileged user

-- connect to any database
set term ! ;
create procedure New_Procedure123
as
begin
end!
set term ; !
--This operation is not defined for system tables.
--unsuccessful metadata update.
--CREATE PROCEDURE NEW_PROCEDURE123 failed.
--There is no privilege for this operation.

set term ! ;
create or alter procedure New_Procedure123
as
begin
end!
set term ; !
--sucessfull???!

=>

create test$user password '123'; -- Unprivileged user

-- connect to any database
set term ! ;
create procedure New_Procedure123
as
begin
end!
set term ; !
--This operation is not defined for system tables.
--unsuccessful metadata update.
--CREATE PROCEDURE NEW_PROCEDURE123 failed.
--There is no privilege for this operation.

set term ! ;
create or alter procedure New_Procedure123
as
begin
end!
set term ; !
--sucessfull???!

This applies to procedures, triggers, packages, functions, etc.

@firebird-automations
Copy link
Collaborator Author

Modified by: @AlexPeshkoff

assignee: Alexander Peshkov [ alexpeshkoff ]

@firebird-automations
Copy link
Collaborator Author

Commented by: @AlexPeshkoff

Confirmed in FB4 too

@firebird-automations
Copy link
Collaborator Author

Commented by: @AlexPeshkoff

The following types of objects were fixed: exception, generator, package, procedure, function, view.

@firebird-automations
Copy link
Collaborator Author

Modified by: @AlexPeshkoff

status: Open [ 1 ] => Resolved [ 5 ]

resolution: Fixed [ 1 ]

Fix Version: 3.0.5 [ 10885 ]

Fix Version: 4.0 Beta 2 [ 10888 ]

@firebird-automations
Copy link
Collaborator Author

Modified by: @pavel-zotov

status: Resolved [ 5 ] => Resolved [ 5 ]

QA Status: No test => Done successfully

@firebird-automations
Copy link
Collaborator Author

Modified by: @pavel-zotov

status: Resolved [ 5 ] => Closed [ 6 ]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment