database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-07-07 00:36:50 +03:00
Code Activity

Permissions were not checked correctly when one view invokes another.

Browse Source 
Per bug report from Lieven Van Acker, 5/2/01.
This commit is contained in:
Tom Lane
2001-05-03 17:47:49 +00:00
parent d31b9f3101
commit f2122d092f
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/backend/rewrite/rewriteHandler.c
View File

@ -7,7 +7,7 @@
* *
* *
* IDENTIFICATION * IDENTIFICATION
* $Header: /cvsroot/pgsql/src/backend/rewrite/rewriteHandler.c,v 1.92 2001/04/17 00:32:58 tgl Exp $ * $Header: /cvsroot/pgsql/src/backend/rewrite/rewriteHandler.c,v 1.93 2001/05/03 17:47:49 tgl Exp $
* *
*------------------------------------------------------------------------- *-------------------------------------------------------------------------
*/ */
@ -309,9 +309,11 @@ ApplyRetrieveRule(Query *parsetree,
Assert(subrte->relid == relation->rd_id); Assert(subrte->relid == relation->rd_id);
subrte->checkForRead = rte->checkForRead; subrte->checkForRead = rte->checkForRead;
subrte->checkForWrite = rte->checkForWrite; subrte->checkForWrite = rte->checkForWrite;
subrte->checkAsUser = rte->checkAsUser;
rte->checkForRead = false; /* no permission check on subquery itself */ rte->checkForRead = false; /* no permission check on subquery itself */
rte->checkForWrite = false; rte->checkForWrite = false;
rte->checkAsUser = InvalidOid;
/* /*
* FOR UPDATE of view? * FOR UPDATE of view?