Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Permissions for create or alter statements are not checked. [CORE6078] #6328

Closed
firebird-issue-importer opened this issue Jun 7, 2019 · 7 comments

Comments

@firebird-issue-importer
Copy link

firebird-issue-importer commented Jun 7, 2019

Submitted by: @sim1984

create test$user password '123'; -- Unprivileged user

-- connect to any database
set term ! ;
create procedure New_Procedure123
as
begin
end!
set term ; !
--This operation is not defined for system tables.
--unsuccessful metadata update.
--CREATE PROCEDURE NEW_PROCEDURE123 failed.
--There is no privilege for this operation.

set term ! ;
create or alter procedure New_Procedure123
as
begin
end!
set term ; !
--sucessfull???!

This applies to procedures, triggers, packages, functions, etc.

Commits: 8110218 eca1620

@firebird-issue-importer
Copy link
Author

firebird-issue-importer commented Jun 7, 2019

Modified by: @sim1984

description: create test$user password '123'; -- Unprivileged user

-- connect to any database
set term ! ;
create procedure New_Procedure123
as
begin
end!
set term ; !
--This operation is not defined for system tables.
--unsuccessful metadata update.
--CREATE PROCEDURE NEW_PROCEDURE123 failed.
--There is no privilege for this operation.

set term ! ;
create or alter procedure New_Procedure123
as
begin
end!
set term ; !
--sucessfull???!

=>

create test$user password '123'; -- Unprivileged user

-- connect to any database
set term ! ;
create procedure New_Procedure123
as
begin
end!
set term ; !
--This operation is not defined for system tables.
--unsuccessful metadata update.
--CREATE PROCEDURE NEW_PROCEDURE123 failed.
--There is no privilege for this operation.

set term ! ;
create or alter procedure New_Procedure123
as
begin
end!
set term ; !
--sucessfull???!

This applies to procedures, triggers, packages, functions, etc.

@firebird-issue-importer
Copy link
Author

firebird-issue-importer commented Jun 7, 2019

Modified by: @AlexPeshkoff

assignee: Alexander Peshkov [ alexpeshkoff ]

@firebird-issue-importer
Copy link
Author

firebird-issue-importer commented Jun 7, 2019

Commented by: @AlexPeshkoff

Confirmed in FB4 too

@firebird-issue-importer
Copy link
Author

firebird-issue-importer commented Jun 17, 2019

Commented by: @AlexPeshkoff

The following types of objects were fixed: exception, generator, package, procedure, function, view.

@firebird-issue-importer
Copy link
Author

firebird-issue-importer commented Jun 17, 2019

Modified by: @AlexPeshkoff

status: Open [ 1 ] => Resolved [ 5 ]

resolution: Fixed [ 1 ]

Fix Version: 3.0.5 [ 10885 ]

Fix Version: 4.0 Beta 2 [ 10888 ]

@firebird-issue-importer
Copy link
Author

firebird-issue-importer commented Jun 18, 2019

Modified by: @pavel-zotov

status: Resolved [ 5 ] => Resolved [ 5 ]

QA Status: No test => Done successfully

@firebird-issue-importer
Copy link
Author

firebird-issue-importer commented Jun 18, 2019

Modified by: @pavel-zotov

status: Resolved [ 5 ] => Closed [ 6 ]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment