[
https://issues.jboss.org/browse/TEIID-2844?page=com.atlassian.jira.plugin...
]
Steven Hawkins commented on TEIID-2844:
---------------------------------------
Added a system property:
org.teiid.ignoreUnauthorizedAsterisk (to control the system wide default behavior -
defaults to false) and a session property ignore_unauthorized_asterisk to set whether
select * or a qualified asterisk will ignore unauthorized columns when expanded.
So typically a client would issue:
{code}
select teiid_session_set('ignore_unauthorized_asterisk', true)
{code}
to enable this behavior - which could be made part of the initialization if using a pool.
A couple of follow ons for this issue include - providing a high level way of enabling
this feature from the client side and refining the server side logic to ensure that plans
and results are cachable for authorization modified commands.
remove unauthorized columns from select *
-----------------------------------------
Key: TEIID-2844
URL:
https://issues.jboss.org/browse/TEIID-2844
Project: Teiid
Issue Type: Enhancement
Components: Query Engine
Reporter: Steven Hawkins
Assignee: Steven Hawkins
Fix For: 8.7
For ease of use with entitlement checking enabled, user queries with select * and *.tbl,
should simply not treat unauthorized columns as selectable.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:
http://www.atlassian.com/software/jira