You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@trafodion.apache.org by "Roberta Marton (JIRA)" <ji...@apache.org> on 2015/08/21 18:06:46 UTC

[jira] [Commented] (TRAFODION-688) LP Bug: 1379516 - Any user can set parserflags

    [ https://issues.apache.org/jira/browse/TRAFODION-688?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14706927#comment-14706927 ] 

Roberta Marton commented on TRAFODION-688:
------------------------------------------

Fix committed and QA verified.

> LP Bug: 1379516 - Any user can set parserflags
> ----------------------------------------------
>
>                 Key: TRAFODION-688
>                 URL: https://issues.apache.org/jira/browse/TRAFODION-688
>             Project: Apache Trafodion
>          Issue Type: Bug
>          Components: sql-security
>            Reporter: Roberta Marton
>            Assignee: Roberta Marton
>            Priority: Critical
>             Fix For: 1.0 (pre-incubation)
>
>
> Parserflags cause operations to work in special ways.  For example, parserflag 0x20000, when set, allows the user to update metadata.  Today, anyone can set parserflags.  This is a security issue.  Changes are needed to prevent anyone from setting these flags.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)